1. Who we are
Frostique is a white-label ordering platform operated by Pronttera, KPCT Mall, Fatima Nagar, Pune, Maharashtra, India. In this policy, "we", "us" and "our" mean Pronttera.
We act in two different roles, and which one applies changes your rights and our obligations:
- As a controller — for data about the bakeries and brands who subscribe to Frostique, and about visitors to this website. We decide why and how that data is processed.
- As a processor — for data about shoppers who place orders through a merchant's Frostique-powered storefront. The merchant is the controller; we process that data on their instructions, under our agreement with them.
2. Data we collect as a controller
When you enquire about, sign up for or use a Frostique subscription, we collect:
- Account and contact data — name, business name, email address, phone number, and the login credentials for your portal account (passwords are stored only as salted hashes).
- Business data — branch names and addresses, opening hours, catalogue contents, pricing and other operational settings you enter into the portal.
- Billing data — subscription plan, billing cycle, invoices and payment status. Card details are handled by our payment provider and are never stored on our servers.
- Usage and device data — pages viewed, features used, IP address, browser and device type, and approximate location derived from IP.
- Support correspondence — the content of emails, demo requests and enquiry-form submissions you send us.
3. Why we use it, and on what basis
- To provide the service — creating and running your account, branches and storefront. Basis: performance of our contract with you.
- To bill you — invoicing, collecting subscription fees, tax records. Basis: contract and legal obligation.
- To support you — answering questions, troubleshooting, sending service notices. Basis: contract and legitimate interests.
- To improve and secure the platform — diagnosing faults, analysing aggregate usage, preventing fraud and abuse. Basis: legitimate interests.
- To market to you — sending product news and offers to business contacts. Basis: consent, or legitimate interests where permitted. You can opt out at any time.
4. Shopper data we process for merchants
When a shopper orders through a Frostique-powered storefront, we process their name, contact details, delivery address, order contents, order history, wishlist activity and any message they send at checkout — on behalf of the merchant who operates that storefront.
We do not sell this data, use it to build our own marketing profiles, or share it between merchants. We use it only to run the storefront, deliver the features the merchant has enabled, and meet our obligations to them.
If you are a shopper wanting to access, correct or delete your data, please contact the bakery you ordered from — they control it. If you contact us instead, we will pass your request on to them.
6. International transfers
Our infrastructure providers may store or process data outside India. Where that happens, we rely on contractual safeguards with those providers requiring them to protect the data to a standard comparable to that in this policy.
7. How long we keep it
- Account and business data: for as long as your subscription is active, and up to 12 months after it ends so you can reactivate.
- Billing and tax records: for as long as applicable tax and accounting law requires.
- Shopper data processed for a merchant: for as long as the merchant instructs, and deleted or returned when their subscription ends.
- Website analytics and logs: generally up to 24 months.
8. Your rights
Subject to the law that applies to you, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You may also withdraw consent where we relied on it.
To exercise any of these, email info@pronttera.com. We will respond within the period the applicable law allows. If you are not satisfied with our response, you may complain to your local data-protection authority.
9. Security
We use encryption in transit, hashed credentials, role-based access controls, and restrict staff access to production data to those who need it. No system is perfectly secure, but we will notify affected users and any required authority without undue delay if a breach is likely to put your rights at risk.
10. Children's data
Frostique is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18 in a controller capacity. If you believe a child has given us data, contact info@pronttera.com and we will delete it.
11. Changes and contact
We may update this policy as the product and the law change. Material changes will be notified through the portal or by email before they take effect. The date at the top of this page always shows the current version.
Questions, requests or complaints: info@pronttera.com, or write to Pronttera, KPCT Mall, Fatima Nagar, Pune, Maharashtra, India.