Ambassador Privacy Notice

1. Controller

The Converged Security Institute is the data controller for personal data processed in the Ambassador Programme. Contact: info@convergedsecurity.es.

2. Data we collect

Ambassadors: name, email, country, phone, organisation, job title, professional profile links, application answers, agreement acceptance records, payout (Wise/bank) details and commission and payout history.

Referred learners: the fact that an enrolment was referred, the programme, amount paid and payment status. Visitors: a random browser identifier and a one-way hashed (pseudonymised) network address, used only to count unique visits and detect fraud. We do not store raw IP addresses.

3. Purposes and legal bases

Running the programme and paying commission (performance of a contract, GDPR Art. 6(1)(b)); fraud prevention and programme security (legitimate interests, Art. 6(1)(f)); accounting and tax records (legal obligation, Art. 6(1)(c)); the optional public Ambassador Directory (consent, Art. 6(1)(a), which you can withdraw at any time in your dashboard).

4. Sharing

Payout details are shared with Wise for payment processing. Emails are sent through our email service provider. We do not sell personal data. Ambassadors see only aggregate, non-identifying information about learners they referred.

5. Retention

Click data is deleted after 13 months. Commission and payout records are kept for 6 years for accounting purposes. Other Ambassador data is deleted or anonymised within 12 months of leaving the programme, unless needed to handle a dispute.

6. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing, and lodge a complaint with your data protection authority (in Spain, the AEPD). You can download your data and withdraw from the programme directly in your Ambassador Dashboard.