Privacy Policy – Frame Mill

Frame-Mill — frame-mill.com

UK GDPR / DATA PROTECTION ACT 2018

Controller: THE REAL DEAL PROVIDERS LTD (Company No. 16108011)
Registered office: Dept 6152, 43 Owston Road, Carcroft, Doncaster, United Kingdom, DN6 8DA
Trading name / Site: Frame-Mill — frame-mill.com
Contact (privacy): info@frame-mill.com
Last updated: 25 September 2025

1. About This Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use frame-mill.com (the “Site”) and Frame-Mill services (together, the “Services”). We process personal data as a controller under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

2. Data We Collect

We collect the following categories of personal data:

Account & Identity Data: name or username, email address, password (hashed), country/region, preferred currency.
Transaction & Order Data: purchased items, amounts, currency (USD/EUR/AUD/CAD), timestamps, invoice identifiers, limited payment metadata from our payment processors (we do not store full card numbers).
Technical & Usage Data: IP address, device and browser characteristics, language, time zone, referring URLs, pages viewed, session identifiers, event logs, error reports.
Content & Interaction Data: prompts/inputs you provide, settings, generated outputs, downloads history, support requests, communication metadata.
Cookie/Similar Tech Data: identifiers and analytics/marketing preferences. See our Cookie Policy for details.

3. Sources of Data

Directly from you when you create an account, place an order, use Credits, generate outputs, or contact support.
Automatically via cookies, SDKs, and similar technologies when you browse or use the Services.
From service providers who support payments, hosting, analytics, or content delivery (limited to what is necessary for their services).

4. Purposes & Legal Bases

We process personal data for the purposes and legal bases below:

Provide and operate the Services (create/manage accounts, process orders, deliver Digital Content and Credits) — legal basis: performance of a contract.
Maintain functionality, troubleshoot, secure and improve the Services (including analytics and crash diagnostics) — legal basis: legitimate interests to run and improve our Services.
Customer support and service communications (order confirmations, delivery notices, service updates) — legal basis: performance of a contract / legitimate interests.
Marketing communications (where permitted) — legal basis: consent (you can withdraw at any time).
Record-keeping for accounting and taxation — legal basis: legal obligation.

5. Children’s Data

The Services are intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us at info@frame-mill.com to request deletion.

6. Payment Processing

Payments are handled by third-party payment processors. They act as independent controllers or processors according to their own terms and privacy notices. We receive limited payment metadata sufficient to reconcile orders; we do not store full payment card details.

7. Sharing of Personal Data

Service Providers: hosting, content delivery networks, payment processing, email delivery, analytics, security, and customer support tools (only as necessary to provide their services).
Corporate & Legal: where required to comply with applicable laws, to respond to lawful requests, or to protect our rights, users, and the Services.
Business Changes: in the context of a reorganisation, merger, or asset transfer, subject to safeguards and continued protection of your data.

8. International Transfers

Where we transfer personal data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum (IDTA) to the EU Standard Contractual Clauses, adequacy regulations, or other legally recognised transfer mechanisms. Copies of relevant safeguards can be requested via info@frame-mill.com.

9. Data Retention

Account data: retained for the life of the account; deleted or anonymised within 90 days after closure, subject to legal retention requirements.
Order and transaction records: typically retained for 6 years (UK tax/audit requirements).
Technical logs and analytics data: typically retained for 12–24 months, then aggregated or anonymised.
Support communications: typically retained for up to 24 months from last interaction.
Generated outputs and prompts: retained to operate the Services and for quality and reliability purposes; you may delete certain content from your account where functions are provided.

10. Security

We implement administrative, technical, and physical measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction.
No method of transmission or storage is 100% secure; we encourage strong passwords and keeping your credentials confidential.

11. Your Rights

Depending on your location, you may have rights under the UK GDPR, including to request access, rectification, erasure, restriction, portability, and to object to certain processing. Where consent is the legal basis, you may withdraw it at any time.

Access: obtain a copy of your personal data.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion where data is no longer necessary or where required by law.
Restriction: limit processing in certain circumstances.
Portability: receive data you provided in a structured, commonly used format.
Objection: object to processing based on legitimate interests, including analytics where applicable.
Marketing: opt out of marketing emails by using unsubscribe links or contacting us.

12. How to Exercise Your Rights

Email: info@frame-mill.com (subject line: “Data Rights Request”).
Include: your account email, the right you wish to exercise, and sufficient details to locate your data.
We may request limited additional information to verify your identity before acting on your request.
We aim to respond within one month, or as required by law.

13. Cookies & Similar Technologies

We use cookies and similar technologies to provide, secure, and improve the Services. For details on types of cookies, purposes, retention, and your choices, please read our Cookie Policy and adjust your preferences through the cookie banner.

14. Third-Party Links

The Site may include links to third-party websites or services. We are not responsible for their privacy practices. We recommend reviewing their privacy notices.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date above. Where required, we will provide additional notice.

16. Contact

For questions about this Privacy Policy or our data practices, contact: info@frame-mill.com.