Privacy Policy

Last updated: May 6, 2026

Introduction

Frosty Spiral ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services.

Information We Collect

We collect the following types of information:

Information You Provide

  • Name and contact details (email address)
  • Programme enrollment information
  • Communication preferences
  • Any information you provide in forms or correspondence

Information Collected Automatically

  • IP address and browser type
  • Pages visited and time spent on our website
  • Cookie data (see our Cookies Policy for details)

How We Use Your Information

We use your personal data to:

  • Provide and manage our financial education programmes
  • Communicate with you about your enrollment and sessions
  • Respond to your enquiries and provide customer support
  • Improve our website and services
  • Send you relevant updates about our programmes (with your consent)
  • Comply with legal obligations

Legal Basis for Processing

We process your personal data based on:

  • Contract performance: to deliver the services you've enrolled in
  • Legitimate interests: to improve our services and communicate effectively
  • Consent: for marketing communications and certain cookies
  • Legal obligation: to comply with applicable laws

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Service providers who assist in delivering our programmes (under strict confidentiality agreements)
  • Legal authorities when required by law
  • Professional advisors (accountants, lawyers) when necessary

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Enrollment records are typically kept for six years for business and legal compliance purposes.

Your Rights

Under data protection law, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to processing of your data
  • Request restriction of processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

Children's Privacy

Our programmes include sessions for children, but enrollment is managed by parents or guardians. We do not knowingly collect personal data directly from children under 16 without parental consent.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this privacy policy or how we handle your personal data, contact us at:

Email: [email protected]
Address: 42 Cathedral Road, Cardiff CF11 9LJ, United Kingdom