diff --git a/src/proxy.ts b/src/proxy.ts
index 4505b33..afe7abc 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -75,6 +75,9 @@ function buildCsp(): string {
     // loads generally.
     "img-src 'self' data: https:",
     "font-src 'self'",
+    // The Home page's "Find us" map is a Google Maps embed (see (customer)/home/page.tsx); without this it falls
+    // back to default-src 'self' and the browser refuses to load the frame. Only that one origin is allowed.
+    "frame-src https://www.google.com",
     "connect-src 'self'",
     "worker-src 'self'",
     "manifest-src 'self'",