Last updated: 5 June 2026
tundra-craft is fully committed to compliance with the General Data Protection Regulation and the UK Data Protection Act 2018. As a document verification service handling sensitive personal information, we recognize the importance of protecting your privacy and ensuring your data rights are respected.
We are registered with the Information Commissioner's Office as a data controller and maintain comprehensive data protection policies and procedures.
For the purposes of data protection legislation, the data controller is:
tundra-craft
142 Pentonville Road
London, N1 9JE
United Kingdom
Email: [email protected]
We process personal data only where we have a lawful basis to do so under Article 6 of the GDPR:
For special category data (such as information about health conditions that may affect housing needs), we process data only with explicit consent or where processing is necessary for substantial public interest purposes.
The GDPR provides you with extensive rights regarding your personal data. These rights are free to exercise in most cases.
You have the right to clear, transparent information about how we use your personal data. This information is provided in our Privacy Policy and through fair processing notices when we collect your data.
You can request a copy of the personal data we hold about you, known as a Subject Access Request (SAR). We will provide this information within one month of receiving your request. The information will include:
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month and notify any third parties to whom the data has been disclosed.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances:
This right is not absolute. We may need to retain data to comply with legal obligations, establish or defend legal claims, or for other legitimate reasons.
You can request that we limit how we use your data in certain situations:
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You can request that we transmit this data directly to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
While our verification processes involve human assessment, if we implement automated decision-making or profiling in the future, you will have the right to request human intervention, express your point of view, and challenge the decision.
To exercise any of your GDPR rights, contact us using the following methods:
Email: [email protected]
Post: 142 Pentonville Road, London, N1 9JE, United Kingdom
Please include the following information in your request:
We will respond to requests within one month. In complex cases, we may extend this by a further two months and will notify you if this is necessary.
We adhere to the six key data protection principles under GDPR:
We implement comprehensive technical and organizational measures to ensure data security:
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will:
We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to individuals' rights and freedoms. Our DPIAs identify and mitigate privacy risks associated with new verification methodologies or technologies.
Where we engage third-party service providers to process personal data on our behalf, we ensure:
We store and process all personal data within the United Kingdom. We do not routinely transfer data to countries outside the UK. If international transfers become necessary in the future, we will ensure appropriate safeguards are in place, such as:
If you have questions about our GDPR compliance or wish to make a complaint about how we handle your data, contact us at:
Email: [email protected]
Address: 142 Pentonville Road, London, N1 9JE, United Kingdom
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113