Privacy Policy

Effective from: 1st January 2026

1. Introduction

Frost Fussion Ltd. (hereinafter "we" or "Frost Fussion") is committed to protecting your privacy and personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Frost Fussion Ltd.
The Lodge Clarke Gardens, Springwood Avenue, Woolton, United Kingdom, L25 7UN
Company Number: 15010420
Phone: +44 1632 960428
Email: privacy@frostfussion.com

3. What Personal Data We Collect

3.1 Data Provided During Registration

• First name and surname
• Email address
• Password (stored in encrypted form)
• Date of birth
• Country of residence

3.2 Payment Data

• Billing address
• Payment information (processed through certified payment gateways)
• Transaction history

3.3 Service Usage Data

• Watched content and viewing history
• Ratings and reviews
• Search queries
• Interactions with the platform
• Device information (type, operating system, browser)
• IP address and geographical location
• Cookies and similar technologies

4. Purpose and Legal Basis for Processing

4.1 Service Provision

We process your data based on the contract for providing streaming services, account management, payment processing and technical support (Article 6(1)(b) UK GDPR).

4.2 Content Personalisation

Based on legitimate business interests (Article 6(1)(f) UK GDPR) and with your consent where required (Article 6(1)(a) UK GDPR), we process data about your viewing to recommend relevant content and improve user experience.

4.3 Marketing Communication

With your express consent (Article 6(1)(a) UK GDPR), we may send news, offers and information about our services. You can withdraw your consent at any time.

4.4 Fulfilment of Legal Obligations

We process data necessary to fulfil tax, accounting and other legal obligations under UK law (Article 6(1)(c) UK GDPR).

5. Sharing Personal Data

We may share your personal data with:

• Payment Service Providers: For payment processing (e.g. Stripe, PayPal)
• Cloud Service Providers: For hosting and data storage (AWS, Google Cloud)
• Analytics Tools: Google Analytics to improve services
• Content Suppliers: Licence providers for audiovisual content
• Legal Authorities: If required by law or court order

All these partners are contractually bound to protect your data in accordance with UK GDPR and Data Protection Act 2018.

6. Transfer of Data Outside the UK

Some of our service providers may have servers outside the United Kingdom. In such cases, we ensure an adequate level of protection through:

• Adequacy decisions by the UK Government
• Standard Contractual Clauses (SCCs) approved by the ICO
• Other mechanisms approved under UK data protection law

7. Data Retention Period

• Account Data: For the duration of the account and 3 years after its cancellation
• Billing Data: 7 years due to tax obligations
• Marketing Consents: Until consent is withdrawn or maximum 5 years
• Viewing History: 2 years from last activity
• Cookies: According to settings, maximum 24 months

8. Your Rights Under UK GDPR

You have the following rights under UK data protection law:

8.1 Right of Access

You have the right to obtain confirmation as to whether we process your personal data and access to such data (Article 15 UK GDPR).

8.2 Right to Rectification

You have the right to request correction of inaccurate data or completion of incomplete data (Article 16 UK GDPR).

8.3 Right to Erasure

You have the right to request deletion of your data if it is no longer necessary for the purposes for which it was collected (Article 17 UK GDPR), subject to legal retention requirements.

8.4 Right to Restriction of Processing

You have the right to request restriction of processing in certain circumstances (Article 18 UK GDPR).

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format (Article 20 UK GDPR).

8.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes (Article 21 UK GDPR).

8.7 Right to Withdraw Consent

If processing is based on consent, you have the right to withdraw consent at any time (Article 7 UK GDPR).

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

9. Data Security

We have implemented appropriate technical and organisational measures to protect your data:

• Data transmission encryption (TLS/SSL)
• Encryption of stored sensitive data
• Regular security audits and penetration testing
• Access control and authentication systems
• Staff training on data protection and security
• Disaster recovery and business continuity plans
• Compliance with ISO 27001 information security standards

10. Cookies and Similar Technologies

We use cookies and similar technologies. Detailed information can be found in our Cookie Policy.

11. Children and Minors

Our service is not intended for persons under 18 years of age without parental or guardian consent. We do not knowingly collect data from children under 13 years of age without verifiable parental consent. If we become aware that we have collected personal data from a child under 13 without parental consent, we will delete that information.

12. Automated Decision-Making and Profiling

We use automated decision-making for content recommendations based on your viewing history and preferences. You have the right to object to such processing and request human intervention in accordance with Article 22 UK GDPR.

13. Changes to Privacy Policy

We may occasionally update this policy to reflect changes in our practices or legal requirements. We will inform you of significant changes by email or through a prominent notice on our platform at least 30 days in advance.

14. Contact for Data Protection Questions

If you have any questions regarding the processing of your personal data or wish to exercise your rights, please contact us:

Data Protection Officer
Email: privacy@frostfussion.com
Postal Address: Frost Fussion Ltd., The Lodge Clarke Gardens, Springwood Avenue, Woolton, United Kingdom, L25 7UN

Last updated: 1st January 2026