Privacy Policy

Last updated: 01/09/2025

At Framz Limited (trading as Disciply), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information in accordance with UK GDPR and data protection laws.

1. Data Controller

Framz Limited (Company Number: 15963308) is the data controller for your personal information. We are registered in England and Wales with our registered office at 1 Glamorgan Close, Mitcham, England, CR4 1XG.

2. Information We Collect

Account Information

  • Email address (required for account creation)
  • Password (encrypted)
  • Account preferences and settings

Usage Data

  • Habit tracking data
  • Progress statistics
  • App usage analytics

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: To provide our services and fulfill our obligations to you
  • Legitimate Interest: To improve our services and provide customer support
  • Consent: For marketing communications (where applicable)
  • Legal Obligation: To comply with UK legal requirements

5. How We Use Your Information

  • Provide and maintain our habit tracking service
  • Process payments and manage subscriptions
  • Send important service updates and notifications
  • Improve our service based on usage patterns
  • Provide customer support
  • Comply with legal obligations

6. Data Sharing and International Transfers

We do not sell your personal data. We may share your information with:

  • Service providers (with appropriate safeguards)
  • Payment processors (Stripe) for subscription management
  • Cloud hosting providers with adequate data protection measures

Any international transfers are conducted with appropriate safeguards under UK GDPR, including adequacy decisions or standard contractual clauses.

7. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your personal data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent
  • Lodge a complaint with the ICO

8. Data Retention

We retain your data for as long as necessary to provide our services or as required by law. Account data is typically retained for the duration of your subscription plus 3 years for legal and accounting purposes. You can request deletion of your account at any time.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure hosting, and regular security assessments.

10. Cookies

We use essential cookies for authentication and service functionality. We do not use tracking cookies without your consent. See our Cookie Policy for more details.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights:

Email: accounts+disciply_privacy@framz.io

Data Protection Officer: accounts+disciply_dpo@framz.io

Address: Framz Limited, 1 Glamorgan Close, Mitcham, England, CR4 1XG

ICO Registration: [To be obtained]