Privacy Policy
ashambirge.com
Version 1.0 · Effective September 1, 2026 · Last updated September 1, 2026
1. Who we are
Irreverent Ambition Inc. (“we,” “us”) operates ashambirge.com and publishes The Ash Ambirge Newsletter. We are the data controller for the personal data described here, meaning we decide why and how it is processed.
Irreverent Ambition Inc.
2810 N Church St PMB 64502
Wilmington, DE 19802
United States
Privacy contact: ash@ashambirge.com
We have not appointed a Data Protection Officer, as we are not required to.
2. What we collect
You give us:
| Data | When |
|---|---|
| Email address | Newsletter signup, purchase, account creation |
| Name | Purchase, account creation, class registration, if you provide it |
| Billing address and country | Purchase, for tax purposes |
| Payment details | At checkout, handled entirely by our payment processor. We never see or store your card number. |
| Message content | When you email us or submit a form |
| Business details | If you book advertising: company, role, product information |
Collected automatically:
| Data | Source |
|---|---|
| IP address, browser type, device type, operating system | Site visits |
| Pages viewed, referring site, time on site | Site analytics |
| Email opens and link clicks | Newsletter tracking pixels and tagged links |
| Cookie identifiers | Site visits, subject to your consent where required |
We do not collect special category data (health, race, religion, political opinions, biometrics, sexual orientation), and we ask that you do not send it to us.
3. Why we use it, and our legal basis
Under GDPR we must have a lawful basis for each purpose.
| Purpose | Legal basis |
|---|---|
| Send the free newsletter you signed up for | Consent (Art. 6(1)(a)) |
| Deliver products, classes, and subscriptions you bought | Contract (Art. 6(1)(b)) |
| Process payments and prevent fraud | Contract and legitimate interests (Art. 6(1)(b), (f)) |
| Email you about products related to what you already bought | Legitimate interests (Art. 6(1)(f)), with opt-out in every message |
| Site analytics and understanding what people read | Consent where cookies require it, otherwise legitimate interests |
| Email open and click measurement | Legitimate interests (Art. 6(1)(f)) |
| Aggregate advertiser reporting | Legitimate interests (Art. 6(1)(f)) |
| Keep tax, accounting, and transaction records | Legal obligation (Art. 6(1)(c)) |
| Respond to your messages | Legitimate interests (Art. 6(1)(f)) |
| Defend or bring legal claims | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed our interest in running a small publishing business against your rights, and we use the minimum data needed. You may object at any time (section 8).
4. Advertisers: what we never share
We do not sell, rent, or share subscriber lists, email addresses, or any personally identifiable subscriber data with advertisers, sponsors, data brokers, or anyone else. Ever, at any price.
Advertisers receive aggregate performance figures only: total sends, total opens, total clicks. Nothing that identifies an individual.
5. Cookies
We use cookies and similar technologies for:
- Strictly necessary: login sessions, checkout, security. These cannot be switched off.
- Analytics: understanding which pages get read. Set only with your consent where required.
- Preferences: remembering settings.
We do not use advertising or cross-site tracking cookies.
If you are in the EU, UK, or another region requiring it, you will see a consent banner on your first visit. You can change your mind at any time by clearing this site's cookies in your browser, which brings the banner back. You can also block cookies entirely, though strictly necessary cookies are required for checkout and login to work.
Email tracking. Our newsletters contain a small invisible image that records whether a message was opened, and links that record clicks. Turning off image loading in your email client prevents open tracking.
6. Who processes your data for us
We use third-party providers (“processors”) who handle data on our instructions under written agreements:
| Provider | Role |
|---|---|
| Ghost | Website hosting, member accounts |
| Kit (ConvertKit) | Email list, delivery, tracking |
| Kajabi | Course hosting and delivery |
| Stripe | Payment processing |
| PayPal | Payment processing |
| Sponsy | Advertising bookings and reporting |
| Netlify | Hosting for certain product pages |
| Site analytics | |
| Anthropic | AI assistance with drafting certain customer support replies |
We may also disclose personal data:
- To our accountants and professional advisers, under confidentiality
- Where required by law, court order, or a valid government request
- To a buyer, if the business is sold or merged, subject to this policy
- To protect our legal rights or prevent fraud
We update this list as our tools change.
7. International transfers
We are based in the United States and our providers are largely US-based. If you are in the EEA, UK, or Switzerland, your personal data is transferred to the United States.
For those transfers we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where needed. Some providers additionally participate in the EU-US Data Privacy Framework.
You may request a copy of the transfer safeguards we rely on by emailing us.
8. Your rights
If you are in the EEA or UK, you have the right to:
- Access — get a copy of the personal data we hold about you
- Rectification — correct data that is wrong or incomplete
- Erasure — have your data deleted (“right to be forgotten”)
- Restriction — limit how we use your data while a dispute is resolved
- Portability — receive your data in a machine-readable format, or have it sent to another provider
- Object — object to processing based on legitimate interests, and to direct marketing at any time, absolutely
- Withdraw consent — at any time, without affecting processing already carried out
- Not be subject to automated decision-making — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects
- Complain to your national supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EEA it is your local Data Protection Authority. We would prefer you contact us first.
If you are in California, you have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction; to opt out of “sale” or “sharing” of personal information; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
Everyone can unsubscribe from any email using the link at the bottom of every message, and can email us to ask what we hold.
To exercise a right, email ash@ashambirge.com. We respond within 30 days and may extend by two further months for complex requests, telling you why. We may ask you to verify your identity. There is no charge unless a request is manifestly unfounded or excessive.
9. How long we keep it
| Data | Retention |
|---|---|
| Newsletter subscriber data | Until you unsubscribe, then up to 12 months in a suppression list so we don't email you again |
| Customer purchase and account records | 7 years, for tax and accounting obligations |
| Advertiser booking records | 7 years, for tax and accounting obligations |
| Email correspondence | Up to 3 years |
| Analytics data | Up to 26 months |
| Cookie consent records | Up to 12 months |
When a retention period ends we delete or irreversibly anonymise the data.
10. Security
We use HTTPS across the site, rely on providers with recognised security practices, limit access to personal data to those who need it, and do not store payment card details ourselves.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and notify you directly where required.
11. Children
This site is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.
12. Changes to this policy
We may update this policy. The “last updated” date at the top shows when. Material changes affecting how we use your data will be notified by email or a notice on the site.
Questions, requests, or complaints: ash@ashambirge.com
Irreverent Ambition Inc.
2810 N Church St PMB 64502
Wilmington, DE 19802
United States