GDPR Information

Last updated: May 20, 2026

Our Commitment to Data Protection

frost-drive Limited is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides specific information about how we handle your personal data in accordance with these regulations.

Data Controller

frost-drive Limited is the data controller responsible for your personal data.

frost-drive Limited
42 Kingsway Studios
London WC2B 6TE
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including where:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent (where consent was the legal basis)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restriction of Processing

You have the right to request restriction of processing your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling. We do not currently engage in automated decision-making.

How to Exercise Your Rights

To exercise any of your rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, and we will inform you of any such extension.

Data Processing Activities

Masterclass Bookings

  • Purpose: Processing and delivering masterclass services
  • Legal basis: Contract performance
  • Data collected: Name, email, professional background, payment information
  • Retention period: 7 years for financial records; other data retained while you remain a customer

Marketing Communications

  • Purpose: Sending information about upcoming masterclasses
  • Legal basis: Legitimate interest (for existing customers); Consent (for new subscribers)
  • Data collected: Name, email address
  • Retention period: Until you unsubscribe or request deletion

Website Analytics

  • Purpose: Understanding website usage and improving user experience
  • Legal basis: Legitimate interest
  • Data collected: IP address, browser type, pages visited
  • Retention period: 26 months

Third-Party Data Processors

We work with the following categories of third-party processors:

  • Payment processing services
  • Email service providers
  • Website hosting services

All processors are carefully selected and required to meet UK GDPR standards. We have data processing agreements in place with all processors.

International Data Transfers

Some of our service providers are located outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • UK adequacy decisions
  • Standard contractual clauses approved by the UK authorities
  • Other appropriate safeguards as required by UK GDPR

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments
  • Access controls and authentication measures
  • Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and will inform you without undue delay.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with UK data protection law.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: frost-drive.com

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.