Privacy notice

Security and privacy

Your customers' details are safe with us. These certifications belong to the infrastructure providers Frontier is built on, not to Frontier Agency itself.

Who we are

The Frontier Agency Dashboard is run by Charlie Stephenson trading as Frontier Agency, Newcastle upon Tyne, United Kingdom. We are registered with the Information Commissioner's Office (CSN0629092). Contact: charlie.stephenson@frontier-agency.com.

Two roles

• Controller for the details of our own clients (business owners and their staff who log in) and people who contact the agency.
• Processor for the customer data each client business collects through its booking, rental, shop, membership and enquiry pages. The client business is the controller of that data; we only process it on its instructions under our client terms.

What we collect and why

• Account details (name, email, authentication credentials and security settings) — to provide and secure your account (contract). Passwords are handled by our authentication provider, not stored as readable passwords.
• Business details, billing and subscription status — to provide the service and take payment (contract, legal obligation for accounting records).
• Enquiries sent to the agency — to reply and manage our sales pipeline (legitimate interests).
• Technical logs and security data — to keep the service secure and prevent abuse (legitimate interests).
• Client customer records — contact details, enquiries, appointments, rental/shop orders, addresses, notes, form answers, consent records, vouchers, memberships and optional photos or signatures. We process these on the client business’s instructions; the business must identify its lawful basis and publish its own notice.
• Optional marketing preferences — used only where permitted and separately from agreement to the service. You can withdraw marketing consent without cancelling your account.

Who we share it with

Lovable Cloud provides our application hosting, authentication, database and storage. Stripe provides subscription and customer checkout services; full card details are entered directly into Stripe’s payment forms, not stored by Frontier. Microsoft provides connected Outlook email functionality where used. Other integrations chosen by your business process the information needed for that connection under their own terms.

Providers may process data outside your country. Applicable transfer arrangements, provider contracts and locations must be reviewed for the markets served; this notice does not certify that every international transfer is covered. Contact us for current provider and transfer information before uploading data with special regional restrictions.

How long we keep it

We keep operational account information while the service is provided. Billing and transaction records may need to be retained for up to six years for accounting or legal obligations, or longer where legally required. This is not a reason to retain all customer records for six years. Closed or inactive accounts are not automatically deleted by the application; retention and disposal require review and action by the responsible business.

Client businesses set appropriate retention periods for their customers’ contact details, booking records, notes and photos, and can use export and anonymisation tools. Requests for deletion or return are reviewed against legal record-keeping requirements. Security logs and backups may retain residual records until their provider retention cycle expires; contact us for current periods relevant to your request.

Cookies and storage

We use necessary browser storage for sign-in, security, checkout and preferences. No optional advertising or analytics scripts are currently enabled. Review the cookie policy or open Cookie settings to manage your choices. Our fonts are served locally rather than requested from Google Fonts.

Your rights

You can ask to access, correct, delete, restrict or move your data, or object to how we use it. If you are a customer of one of our client businesses, contact that business first — we will help them respond. You can also complain to the ICO at ico.org.uk.

Email charlie.stephenson@frontier-agency.com. We may need to verify your identity without collecting unnecessary information. We normally respond within one month where UK/EU data protection law applies, subject to lawful extensions. You may complain to your local supervisory authority. Where applicable, California residents may request access, correction or deletion and exercise relevant opt-out rights without unlawful discrimination. We do not sell personal information or use advertising tracking to share it for cross-context behavioural advertising.

Security and sensitive information

Published Frontier pages use HTTPS, authentication and access controls. No online service is risk-free. Do not include card details in support messages. Client businesses must assess the legal basis and additional safeguards before collecting health information, children’s data or other sensitive records; enabling a form or specialist pack does not itself establish compliance.

International use and updates

Frontier offers business subscriptions internationally; these pages are currently in English. Applicable local privacy rights are not removed by this notice. Country-specific disclosures, translations and transfer arrangements may be required before entering a particular market. We will update this notice when our practices change and identify the update date above.