Legal

GDPR Compliance

thundercraft-district is committed to protecting personal data in line with the UK GDPR.

Data controller

thundercraft-district acts as the data controller for information collected through our services and website. You can contact us for any data-related requests.

Scope of processing

We process data to arrange services, maintain care records, and support ongoing client communication. We do not process sensitive data without a clear lawful basis.

Lawful bases

Consent

For optional communications or updates you choose to receive.

Contract

To deliver agreed services and manage client requests.

Legitimate interest

For operational planning and service quality improvements.

Data subject rights

You have the right to request access, rectification, erasure, restriction, or portability of your personal data. Requests are handled promptly and in accordance with statutory timelines.

If we cannot fulfil a request, we will provide a clear explanation and guidance on next steps.

Security measures

We use access controls, secure storage systems, and staff training to protect data. We review our processes regularly to keep protections aligned with current best practice.