Privacy Policy

Last Updated: 14 April, 2026

Frontier Firm Technologies ehf. ("we", "us", or "our") operates FraiOS ("the Service").

This document describes the information we collect about you, how it is used and shared, and your rights in relation to it.

When you use our Service, you can trust that we keep your information secure. We are committed to acting in ways that respect your rights and maintain your trust.

1. Data Collection

All information we hold about you is provided to us by you when you use our Service. We will tell you why we need that information and how we intend to use it.

2. Legal Basis for Processing

The General Data Protection Regulation (GDPR) requires that all organisations processing personal data have a legal basis for doing so.

Our legal bases are:

  • Performance of a contract, in order to provide you with our Service.
  • Legitimate interests, where you are a customer of the Service - including processing for direct marketing purposes and for the prevention of fraud.
  • Processing necessary to ensure the security of networks and information, including preventing unauthorised access.

We use your information to:

  • Bill you correctly for services provided.
  • Provide you with access to the Service.
  • Ensure secure access to your data.
  • Direct your enquiries to the appropriate member of our team.
  • Investigate and resolve your concerns.
  • Communicate with you regarding products, services, promotions, research, surveys, news, and updates related to our Service.
  • Process promotions and competitions, including prizes, and send you information about our Service.
  • Investigate or address legal matters relating to your use of our Service or products, or as permitted by law.

Where any part of our processing involves automated decision-making, we ensure that any proposed decisions are reviewed by a member of staff before they are acted upon. You will always be able to obtain an explanation of any decision and to contest it if you are dissatisfied.

We collect and process both personal data and special categories of personal data as defined under GDPR.

This includes:

  • Name
  • Email address
  • IP address

We may share your personal data with:

  • Our payment processor, to process card payments.
  • High-quality data resellers (limited information only).
  • Our legal advisers in the event of a dispute or other legal matter.
  • Law enforcement, regulatory authorities, or other third parties in order to comply with our legal obligations.
  • Other parties where we have obtained your consent to sharing.

2.1 Transfers to Third Countries and International Organisations

We transfer personal data to the following third countries or international organisations, using appropriate safeguards, where we rely on third-party services to provide our Service:

  • Stripe (USA)
  • Mailgun (USA)
  • Google Analytics (USA)

We have ensured that all such transferred data is fully protected and secured as required under the General Data Protection Regulation.

We retain your personal data for the duration of your customer relationship with us, unless you request deletion. Our Retention and Disposal Policy (available on request) sets out how long we retain data and how we dispose of it when it is no longer needed. We will delete or anonymise your information on request, unless:

  • There is an unresolved matter, such as a claim or dispute.
  • We are legally required to retain it.
  • There are overriding legitimate business interests, including but not limited to fraud prevention and the protection of customer safety and security.

3. Your Rights

The General Data Protection Regulation grants you specific rights regarding your personal data. You have the right to be informed about the data we hold and how we use it; you can request a copy of the personal data we hold about you; you can ask us to correct any inaccuracies; you can ask us to stop sending you marketing communications; or in some circumstances, you can ask us to cease processing your information.

5. Your Privacy Rights

You have the right to access, correct, or delete your personal data. You may also object to our processing of your personal data, request that we restrict its processing, or request that we transfer it to you.

6. Opting Out of Marketing Communications

You may opt out of receiving emails and other communications from us by following the unsubscribe instructions contained in those communications.

7. Cookies

Cookies are small text files stored in your browser or device by websites, applications, online media, and advertisements.

We use cookies to:

  • Authenticate users.
  • Remember user preferences and settings.
  • Determine the frequency with which our content is accessed.
  • Measure the effectiveness of advertising campaigns.
  • Analyse site visits and trends.

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page.