Privacy policy

AML Academy (2gether d.o.o.) – Privacy Policy 

Last updated: December 21, 2025

AML Academy (AML Akademija), operated by 2gether d.o.o., operates this online store and website, including all related information, content, features, tools, products and services (the “Services”), in order to provide customers with access to online courses and digital educational content.

Our store is hosted on Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through our Services or otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with respect to personal data processing.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies or can reasonably be linked to an identifiable individual.

Depending on how you interact with our Services, we may collect the following categories of personal information:

  • Contact information (name, surname, email address, phone number)

  • Billing information (billing address, company name, VAT number, transaction details)

  • Payment information (processed securely by third-party payment providers; we do not store full card details)

  • Account information (username, password, course access credentials)

  • Transaction information (courses purchased, access history)

  • Communications (emails, contact form messages, support inquiries)

  • Device and usage information (IP address, browser type, device data, cookies, usage analytics)

We do not intentionally collect special categories of personal data under GDPR.

2. Sources of Personal Information

We collect personal information:

  • Directly from you, when you create an account, purchase a course, or contact us

  • Automatically, through cookies and similar technologies when you use the Services

  • From service providers, such as Shopify, payment processors, and analytics providers

  • From partners or third parties, where legally permitted

3. How We Use Your Personal Information

We use personal information to:

  • Provide access to online courses and digital content

  • Process payments and manage transactions

  • Create and manage user accounts

  • Communicate with you regarding your purchases or inquiries

  • Send newsletters or regulatory updates (only if you subscribe)

  • Improve our Services, website performance, and user experience

  • Ensure security, prevent fraud, and comply with legal obligations

We do not use personal data for automated decision-making or profiling without consent.

4. Legal Basis for Processing

We process personal data based on:

  • Performance of a contract (delivery of online courses)

  • Your consent (e.g. newsletters, marketing)

  • Legitimate interests (service improvement, platform security)

  • Legal obligations under applicable laws

5. Disclosure of Personal Information

We may disclose personal information:

  • To Shopify and trusted service providers (payment processing, IT hosting, analytics)

  • To regulatory or public authorities where required by law

  • To subcontractors involved in delivering our Services

  • In connection with corporate transactions (e.g. restructuring, merger)

We do not sell personal data and do not engage in cross-context behavioral advertising.

6. Relationship with Shopify

Our Services are hosted by Shopify, which processes personal data in order to operate and improve the platform. Shopify may process data independently as a data controller for certain purposes.

More information:

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Ensure website functionality

  • Analyze usage and improve performance

For more information, please see our Cookie Policy.

8. International Data Transfers

Your personal data may be transferred outside the European Economic Area (EEA).
Where applicable, we rely on Standard Contractual Clauses or other approved safeguards.

9. Data Retention

We retain personal data only as long as necessary to:

  • Provide the Services

  • Meet legal, accounting, or regulatory requirements

  • Resolve disputes or enforce agreements

10. Your Rights

If you are located in the EEA or UK, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority
    (Slovenia: Informacijski pooblaščenec)

11. Children’s Data

Our Services are not intended for individuals under 16 years of age, and we do not knowingly collect personal data from minors.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a revised “Last updated” date.

13. Contact Information

Data Controller:
AML Academy (2gether d.o.o.)
Kotnikova ulica 5, 1000 Ljubljana, Slovenia

General inquiries: info@amla.si

Privacy matters: amla@2gether.si
Website: www.amla.si