Frost Forged Wellness operates frostforgedwellness.com, a direct-to-consumer e-commerce store selling premium contrast therapy equipment including cold plunges, saunas, and related products. We are the data controller responsible for your personal information collected through this website.

For privacy-related questions, contact us at info@frostforgedwellness.com.

We collect the following categories of personal information:

Directly From You

• When you place an order — billing, shipping, and contact details
• When you create an account or sign up for email updates
• When you contact us via email, chat (The Advisor), or contact forms
• When you complete the Find Your Setup quiz
• When you submit a warranty or support claim

Automatically

• Browser and device data via cookies and similar tracking technologies
• Pages visited, time on site, referral source, and click behavior
• IP address and approximate geographic location

From Third Parties

• Payment processors (Shopify Payments, Stripe, PayPal) — transaction confirmation only
• Analytics providers (Google Analytics) — aggregated behavioral data
• Email marketing platforms (Klaviyo) — email engagement data if you are subscribed
• Advertising platforms (Meta, Google Ads) — if you arrived via a paid ad

We use the information we collect for the following purposes:

• Order fulfillment — processing, shipping, tracking, and delivering your purchase
• Customer support — responding to inquiries, warranty claims, and returns
• Account management — maintaining your account and purchase history
• Payment processing — securely charging your chosen payment method
• Legal compliance — meeting tax, accounting, and regulatory obligations
• Fraud prevention — detecting and preventing fraudulent transactions
• Marketing — sending promotional emails if you have opted in (you can unsubscribe at any time)
• Site improvement — analyzing usage patterns to improve content and user experience
• Personalization — tailoring product recommendations and content to your interests

We do not use your data to make automated decisions that have legal or similarly significant effects on you.

We share your information only with the following categories of recipients, and only to the extent necessary:

Service Providers

• Shopify — our e-commerce platform and hosting provider. Processes orders, stores customer data, and manages checkout. Governed by Shopify's Privacy Policy.
• Payment processors (Stripe, PayPal, Shop Pay) — handle payment transactions securely. We do not receive or store your full card details.
• Freight carriers — receive your name and delivery address to fulfill shipments.
• Klaviyo — email marketing platform, used only if you have opted into marketing communications.
• Google Analytics — website analytics. Data is anonymized and aggregated.
• Anthropic — powers The Advisor AI chat widget. Conversations may be processed to generate responses. Do not submit sensitive personal or financial information through the chat widget.

Manufacturers & Suppliers

We share your order details with our product suppliers to facilitate manufacturing, quality assurance, and warranty support. Suppliers receive only the information necessary to fulfill your order or warranty claim.

Legal & Regulatory

We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our legal rights or prevent fraud.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

We use cookies and similar tracking technologies to operate our website, understand how visitors use it, and deliver relevant content and advertising.

Types of Cookies We Use

• Essential cookies — required for the website to function. Include shopping cart, session management, and checkout cookies. Cannot be disabled.
• Analytics cookies — track how you use the site (pages visited, time on page, referral source). Used to improve site performance. Provided by Google Analytics.
• Marketing cookies — track visits across websites to deliver targeted advertising. Used by Meta Pixel and Google Ads. Only active if you consent.
• Preference cookies — remember your settings and preferences for future visits.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling certain cookies may affect the functionality of our website, including the ability to complete a purchase.

To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on. To opt out of Meta advertising, visit your Facebook Ad Preferences.

Do Not Track

Our website does not currently respond to browser "Do Not Track" signals. We will update this policy if our practices change.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Order and transaction records — retained for 7 years to meet tax and accounting obligations
• Customer account data — retained while your account is active and for 3 years after your last purchase or inquiry
• Marketing data — retained until you unsubscribe or request deletion
• Support correspondence — retained for 3 years from the date of the interaction
• Analytics data — retained in aggregated, anonymized form indefinitely

When data is no longer required, we delete or anonymize it securely.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• PCI-DSS compliant payment processing — we never store your full card details
• Access controls limiting who within our organization can access personal data
• Regular review of our data collection, storage, and processing practices

While we take security seriously, no method of transmission over the internet or electronic storage is 100% secure. If you believe your data has been compromised, contact us immediately at info@frostforgedwellness.com.

In the event of a data breach that is likely to affect your rights, we will notify you and relevant authorities as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information. We honor these rights for all customers regardless of jurisdiction.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to opt out of its sale (we do not sell data), and the right to non-discrimination for exercising these rights. To submit a request, contact us at info@frostforgedwellness.com.

EU/UK Residents (GDPR)

If you are located in the European Union or United Kingdom, your data rights are protected under the General Data Protection Regulation (GDPR). Our lawful bases for processing include: contract performance (order fulfillment), legitimate interests (fraud prevention, analytics), consent (marketing emails), and legal obligation (tax records). You have the right to lodge a complaint with your local supervisory authority.

How to Exercise Your Rights

To submit any data request, email us at info@frostforgedwellness.com with the subject line "Privacy Request" and describe your request. We will respond within 30 days. We may need to verify your identity before processing your request.

Our website and products are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@frostforgedwellness.com and we will delete it promptly.

Our website may contain links to third-party websites, including research papers, supplier pages, and partner sites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Links to scientific research and publications are provided for informational purposes only. Those sites are not affiliated with Frost Forged Wellness and operate under their own privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page reflects the most recent revision.

For material changes — such as new data sharing practices or changes to your rights — we will notify you by email or by posting a prominent notice on our website at least 14 days before the change takes effect. Continued use of our website after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out. We respond to all privacy inquiries within 30 days.