Last updated: 6 May 2026
1. Controller and scope
ArmoFlow Ltd acts as a data controller for personal data processed through www.armoflow.com and related corporate communications. For FrostDesk customer accounts, ArmoFlow Ltd may act as a data processor where clients determine the purposes and means of processing.
2. Categories of data processed
Depending on use, we may process contact data, account and authentication data, service configuration data, support correspondence, messaging workflow metadata, calendar integration data, and operational data generated through day-to-day platform use.
3. Purposes and legal bases (GDPR)
We process personal data under GDPR principles of lawfulness, fairness, and transparency. Legal bases include contract performance (service delivery), legitimate interests (platform security, abuse prevention, reliability), consent (where required for optional analytics/cookies), and legal obligations (regulatory and record-keeping duties).
4. Messaging workflows and calendar integrations
FrostDesk supports operational messaging workflows and calendar-connected scheduling. Data processed for these features can include message content, communication timestamps, participant identifiers, booking events, and related workflow status information required to coordinate service operations.
5. Third-party infrastructure providers
ArmoFlow Ltd uses vetted third-party infrastructure providers for hosting, storage, delivery, monitoring, and analytics. Such providers process data under contractual safeguards and data processing terms appropriate to their role.
6. International transfers, retention, and security
Where data is transferred internationally, we apply suitable safeguards such as standard contractual clauses where required. Data is retained only as long as necessary for service operation, legal obligations, and legitimate business needs. We maintain technical and organizational measures designed to protect confidentiality, integrity, and availability.
7. Data subject rights
Subject to applicable law, individuals may request access, correction, deletion, restriction, portability, and objection to processing. Consent may be withdrawn where processing is consent-based. Requests can be sent to hello@armoflow.com.
8. Updates
This policy may be updated periodically to reflect legal, technical, or operational changes affecting ArmoFlow Ltd and FrostDesk.
9. Contact
Privacy and data protection inquiries can be sent to hello@armoflow.com.