Privacy policy
Last updated 3 November 2026
This policy explains what personal data Frost Digital collects through this website, why we collect it, who receives it and the rights you have. We follow Uganda's Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021.
1. Who we are
Frost Digital ("we", "us") is a company registered in Uganda. We are the data controller for personal data collected through this website. This means we decide how and why it is used.
Namanve Exhibition and Business Centre, 2nd Floor, Unit C-013, Jinja Road, P.O. Box 152063 Mukono, Kampala, Uganda.
Email: info@frostds.com
Phone: +256 782 700919
For any question about this policy or your data, write to info@frostds.com with "Privacy" in the subject line.
2. What we collect
When you use the contact form. We collect the topic you choose, your name, your email address, your message and, if you give it, your organisation. Your name, email address and message are needed so we can reply. Your organisation is optional. If you do not give the required details, we cannot answer your enquiry through the form. We also record that you agreed to this policy when you sent the form.
When you email or call us. We collect the details you choose to share, such as your name, contact details and what you tell us.
When you visit the website. The service that delivers the website receives technical data that every browser sends: your IP address, browser and device type, the pages you request and the date and time. This is needed to show you the website and to protect it from abuse.
On your own device. If you use the light or dark mode button, your choice is saved in your browser, not on our servers. Our cookie policy explains this and how to turn it off.
We do not use analytics, advertising or tracking cookies. We do not ask for sensitive personal data. Please do not send confidential customs, commercial or personal data through the form.
3. Why we use it
- To reply to your enquiry and arrange a demo, a meeting or a proposal you ask for.
- To discuss a project or a research collaboration with you, and to take steps you ask for before any contract.
- To keep the website working and secure.
- To meet our legal obligations, for example keeping business records.
We use your data on the basis of the consent you give when you send the form or contact us, and where it is needed for steps you ask us to take before entering into a contract. You can withdraw your consent at any time by writing to us. This does not affect anything we did before you withdrew it.
We do not sell your data. We do not send marketing emails unless you ask us to. We do not make decisions about you by automated means alone.
4. Who receives your data
We share personal data only with the service providers below, and only as far as they need it to provide their service to us.
| Provider | What they do for us | Where |
|---|---|---|
| Web3Forms (Web3Creative) | Delivers contact form messages to our inbox. Stores submissions encrypted, for no more than three years under its own policy. | India, with storage on Amazon Web Services |
| CleanTalk and Akismet | Spam checks run by Web3Forms. They receive the IP address and email address of the person sending the form. | Outside Uganda |
| Spaceship | Hosts this website and our email, including info@frostds.com. | Singapore (website server), outside Uganda (email) |
We may also share data with professional advisers, or with authorities when the law requires it.
5. Transfers outside Uganda
The providers above store or process data outside Uganda, including in India, Singapore, the United States and Europe. We choose providers that protect data with measures such as encryption and contractual commitments. When you tick the consent box on the form, you agree to your details being transferred to these providers for the purposes in this policy.
6. How long we keep it
- Enquiries that do not lead to a project: deleted 12 months after our last contact with you.
- Enquiries that lead to a project: kept for as long as the work and the contract need, then for any period the law requires for business and tax records.
- Website server logs we control: deleted after 30 days.
Web3Forms keeps its own copy of form submissions under its retention rules, for no more than three years. When we delete data, we do it in a way that it cannot be rebuilt.
7. How we protect it
The website and the form use encrypted connections (HTTPS). Only the people at Frost Digital who need your enquiry to answer it can read it. Our providers encrypt stored data. If a breach puts your data at risk, we will report it to the Personal Data Protection Office as the law requires, and tell you when we are directed to.
8. Your rights
Under the Data Protection and Privacy Act, 2019 you have the right to:
- ask whether we hold personal data about you, why, and who has received it, and get a copy;
- ask us to correct, update or delete data that is wrong, out of date or no longer needed;
- object to how we use your data, or ask us to stop, including for direct marketing;
- withdraw your consent at any time;
- ask that no decision about you is made by automated means alone.
To use any of these rights, write to info@frostds.com. We may ask you to confirm who you are. We will reply within 30 days, or sooner where the law sets a shorter time.
If you are not happy with how we handle your data, you can complain to the Personal Data Protection Office of Uganda. If you live outside Uganda, you may also have rights under your own country's law, and we will respect them.
9. Children
This website is meant for organisations and adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us their details, contact us and we will delete them.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will tell you before it applies.