Privacy
Policy
We built AppFrost on a foundation of trust. This policy explains plainly what information we collect, why we collect it, and how you stay in control — no legalese labyrinths required.
Information We Collect
We collect information you give us directly and information generated automatically when you use our services.
Information you provide
- Contact data — name, email address, and any message content you submit through our contact form.
- Project enquiry details — descriptions of your project, budget indications, and timelines you share with us.
- Communications — emails, messages, and other correspondence you send to us.
Information collected automatically
- Usage data — pages visited, time on site, referring URL, and browser type via analytics.
- Device data — IP address, operating system, screen resolution, and language preference.
- Performance data — page load times and error events, used solely to improve site reliability.
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to enquiries — processing your contact form submissions and replying to project requests.
- To improve our services — understanding how visitors interact with our site so we can build a better experience.
- To communicate with you — sending project updates, invoices, or other service-related messages you have requested.
- To comply with legal obligations — retaining records as required by applicable law.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Third-Party Services
We work with a small number of trusted third-party providers that may process your data on our behalf:
- Analytics — privacy-focused, cookieless analytics to measure aggregate site performance. No personal data is shared with ad networks.
- Email delivery — transactional email providers are used solely to send messages you have requested.
- Infrastructure — hosting and CDN providers that process data only to deliver our website securely and reliably.
Each provider is bound by a data processing agreement and is prohibited from using your data for their own purposes.
Data Retention
We retain personal data only as long as necessary for the purpose it was collected:
- Contact form submissions — retained for up to 2 years, or until a project concludes, whichever is longer.
- Analytics data — aggregated and anonymised; raw data is deleted after 13 months.
- Financial records — retained for 7 years as required by law.
When data is no longer required, it is securely deleted or anonymised so it can no longer identify you.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data where we have no lawful basis to retain it.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — ask us to limit how we use your data while a dispute is resolved.
To exercise any of these rights, contact us using the details below. We will respond within 30 days.
Contact Us
Questions, requests, or concerns about this policy? We are happy to help.
If you are located in the European Union and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority.