Privacy Policy
Last updated: 26 October 2026
Who we are
Ambra Suite is a business-to-business ERP operated by YOT LTD, Malta. YOT LTD is the controller of personal data collected through ambrasuite.com. For privacy or legal requests, contact sales@yotltd.com.
Data we collect
- Sales enquiries: your name, work email, company, required phone number, selected topics (additional modules, users and setup fees), message, submission time and enquiry reference.
- Technical and security information: our hosting services may process IP addresses, browser information and connection logs to operate and protect this website.
- Consent choices and, only if you agree and analytics is enabled, aggregate website usage information described below.
Please do not include sensitive personal data or confidential customer records in an enquiry.
How and why we use your data
We use enquiry details to answer your request, discuss Ambra Suite and take steps prior to entering a contract at your request (GDPR Article 6(1)(b)). Our legitimate interests (Article 6(1)(f)) support business correspondence, responding to enquiries made on behalf of a company, and keeping this website secure and free from spam. Optional analytics relies on your consent (Article 6(1)(a)). We do not sell your personal data or use it for third-party advertising.
Recipients and CAPTCHA
Our hosting and database provider processes enquiries on our behalf. Our email provider, Resend, processes enquiry details to deliver a notification to our sales team. Access is limited to authorised personnel and providers who need it for these purposes.
The sales enquiry form uses Cloudflare Turnstile. Cloudflare processes IP addresses and browser or device signals to verify requests and stop spam and abuse. This security processing is necessary for our legitimate interest in protecting the form. See Cloudflare’s privacy policy.
International transfers
Our providers may process data outside the European Economic Area. Where required, we use appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, with supplementary protections as appropriate. Contact us for information about the safeguards relevant to your data.
Retention and deletion
We keep sales enquiries for up to 24 months after our last contact unless you become a customer, in which case retention follows the customer agreement and applicable legal obligations. Security records are retained only as needed for their purpose. You may request deletion subject to legal obligations and applicable GDPR exceptions.
Customer Ambra instances
Each customer’s ERP runs as its own Ambra instance. Personal data processed inside that instance is governed by the customer’s agreement and data-processing terms: the customer is the controller and YOT LTD acts as processor. Requests concerning data in a customer’s ERP should be directed to that customer; we assist as required by the agreement.
Your GDPR rights
You may request access, rectification, erasure, restriction of processing, object to processing based on legitimate interests, request portability where applicable, and withdraw consent at any time. Contact sales@yotltd.com. We respond within one month, subject to any lawful extension, and may need to verify your identity.
You may complain to Malta’s Information and Data Protection Commissioner (IDPC), idpc.org.mt, or your local supervisory authority.
Changes
We will post updates on this page and change the date above. Material changes will be communicated as appropriate.