Last updated
1. About this policy
School of Financial Literacy (SOFL) is operated by Frosty Hills, based in Vadodara, Gujarat, India. This policy explains how we collect, use, store and share personal information when you visit https://sofl.co.in, create an account, use our learning products or contact us.
In this policy, "we", "us" and "our" mean Frosty Hills. "You" means the person using SOFL.
2. Information you provide
Account details: Your name and email address are required to create an account. If you register with email, you also create a password. If you use Google Sign-In, we receive your name, email address and Google account identifier. We do not receive your Google password.
Profile details: Your full date of birth and other additional profile details are optional. If you provide your date of birth, it may be used for birthday wishes where you choose to receive them.
Financial Profile: If you complete the questionnaire, we store the answers you submit about your circumstances, financial knowledge, interests and learning needs. Please provide only the information requested. Do not include account passwords, payment PINs or other payment credentials.
Support information: We collect your name, email address, messages, support tickets and information you choose to include when asking for help.
Purchase information: We retain product details, payment and order references, amounts, currency, transaction dates, payment status and invoices. We may also receive or collect your name, email, phone number, billing address and GST details where relevant to the payment or invoice.
3. Activity and technical information
We record login history, content accessed, videos watched, searches, quiz answers and results, questionnaire responses, learning progress, likes, saved content, collections, purchases and related account activity.
Our server and security logs may record IP addresses, browser and device details, errors and security events. These logs help us protect accounts, investigate problems and maintain the website.
4. How we use information
- Create and manage your account, verify access and help you recover your account.
- Provide learning content, save your choices and show your progress.
- Review Financial Profile answers and suggest relevant learning content.
- Verify payments, activate purchased access, issue invoices and handle payment problems.
- Answer support requests and send necessary account and security messages.
- Send optional birthday wishes, promotions or learning suggestions where you have chosen them.
- Improve SOFL, prevent misuse, investigate incidents and meet legal obligations.
Financial Profile responses are reviewed by authorised administrators through the SOFL Admin Panel. They are not publicly visible and are not downloaded, exported or emailed as part of this review. You can update your answers through your account or contact support to request their deletion.
5. Cookies and optional tracking
Essential cookies support login, authentication, security and website sessions. Blocking these cookies may prevent some features from working.
Google Analytics and Meta Pixel are tools identified for traffic analysis, visitor interactions and measurement of advertising on Facebook and Instagram. They may receive technical details and information about page visits and website events. Optional analytics and advertising tracking must be subject to the required consent choices. Agreeing to this policy is not blanket consent to optional tracking.
You can also manage cookies through your browser.
6. Emails and notifications
We send necessary messages such as password resets, purchase confirmations, security alerts and important account or service updates. These may continue even if you stop optional messages.
Birthday wishes, promotions and personalised learning suggestions are optional. Providing your date of birth or creating an account does not, by itself, sign you up for these messages.
7. People and services that receive information
Authorised SOFL administrators can access account records, profile details, Financial Profile responses, support requests, purchase records and learning activity for platform operations and support. Staff access depends on assigned roles. Developer access is limited to information needed for maintenance and troubleshooting.
- Grabweb hosts the website, database, self-hosted videos and backups in India.
- Google Sign-In provides account authentication using basic Google account details.
- Google Workspace and Gmail SMTP process recipient addresses and email content to deliver messages.
- Razorpay and relevant payment providers process payments and related transaction information.
- YouTube delivers embedded videos. We use its privacy-enhanced mode, but Google may still process technical information and video interactions.
- Google Analytics and Meta Pixel may receive information for the purposes and subject to the choices described in the cookies section.
Support requests and internal notifications are stored within SOFL. Support emails may also be processed through Google Workspace.
We may disclose information where required by law or a valid legal request, or where lawfully necessary to investigate fraud, security incidents or misuse. Any additional sharing for another business's own marketing or referrals would need a separate explanation and any consent required by law; this policy does not provide blanket permission for it.
Outside providers may also use information under their own privacy notices. Our main hosting is in India, but Google, Meta and other providers may process information in other countries. Any transfer must follow applicable data protection requirements.
8. Payment security
Payments are processed through Razorpay. SOFL does not store full card numbers, CVVs, UPI PINs, internet banking passwords or bank account login credentials. Payment and invoice records are used for purchase verification, access, accounting and support.
Never send payment credentials, passwords or OTPs in a support ticket or email.
9. How long we keep information
Account and learning information is kept while needed to provide your account and purchased access. After account deletion, we remove information no longer needed, subject to lawful retention requirements.
Payment and invoice records may remain for accounting, taxation, legal claims and other legal obligations. Support tickets and emails are retained only as long as needed to handle enquiries and related obligations. Security logs must be retained for the periods required by applicable cybersecurity and data protection rules.
Database backups are retained for 15 days in India. Deleted information may remain in an existing backup until it expires. Records that must be retained by law may be kept separately for the applicable period.
10. Your choices and privacy requests
You can view and update available profile fields and Financial Profile answers through your account. Registered email addresses currently cannot be changed through account settings. Contact support for correction requests or account access problems.
You can ask us to explain our use of your information, provide access to your information, correct errors, delete information, withdraw consent or stop optional communications, subject to applicable law. A parent or guardian can contact us about a child's information.
We may verify requests through your signed-in account, registered email or other proportionate checks. We aim to respond within seven days after receiving and verifying a privacy request. This is a response target, not a promise that every deletion will be completed within seven days. We will explain further steps, timing and any lawful reason for retaining information.
Withdrawing consent for information essential to a particular service may mean we can no longer provide that service. Withdrawing consent for optional messages or tracking does not, by itself, remove paid access.
11. Deactivating or deleting an account
Temporary deactivation is intended to disable use of your account while retaining the information and purchases needed for secure reactivation. Permanent deletion ends use of the account and its linked purchased access. A new account does not automatically restore purchases from a deleted account. Your legal rights remain unaffected.
12. Users under 18
SOFL’s educational content is available to younger learners. We do not currently verify users’ ages or parental permission during registration.
If you are under 18, you must have a parent or legal guardian’s permission to register and use SOFL. Purchases must be made or authorised by your parent or legal guardian, with the payment account holder’s permission.
Parents or legal guardians can contact support@frostyhills.com with concerns about their child’s account, purchases or personal information.
13. Protecting information
We use HTTPS, store passwords in hashed form, restrict staff access and maintain backups and an incident response process. We investigate suspected unauthorised access, contain incidents and take corrective action. We notify affected people and authorities where required by applicable law.
14. Changes to this policy
We may update this policy when our practices, services or legal obligations change. We will update the date above and explain material changes through email and platform notices. Where required, we will seek fresh consent for a new use of information. Continued use alone is not a substitute for that consent.
15. Contact and complaints
For privacy questions or requests, raise a Support ticket or email support@frostyhills.com. We acknowledge consumer complaints within 48 hours and address them within one month of receipt, subject to any shorter applicable legal deadline. You may also use any complaint or remedy available under applicable law.
Business name: Frosty Hills
Business address: Office No./TF-307, R.K. Plaza, Diwalipura Road, Near Utkarsh School, Vadodara, Gujarat, India. 390015.
Grievance Officer's name: Ms. Shravya Bhat
Designation: Grievance Officer
Email: support@frostyhills.com
Business contact number: 7574004891