Records About You

1 Start Here

You may have been told that a photographer, studio, or agency submitted your identification document or a model release relating to you to ProntoID. Or you may have found content of yourself published somewhere and been told ProntoID holds the verification record for it. This page explains what to do.

Everything below is about the record — the identification document, the model release, and the verification result — rather than about the content itself.

2 What ProntoID Holds

Where a photographer or studio has registered a model release with us, we may hold the identification document submitted for you, the date of birth it states, your name, the release document itself, the verification outcome, and any contact details provided for you.

We did not obtain any of this from you. We received it from the person who submitted it. Under our Terms and Conditions, that person is required to have told you they would do so, and to have had your agreement. If they did not, we want to know.

A full description of what we hold, why, and on what legal basis is in our Privacy Policy.

3 How to Contact Us

Email info@prontoid.com. This is the only route for requests about records, and there is a reason for that: it means every request is read by a person rather than resolved automatically.

You do not need a ProntoID account. You do not need to give a reason. Tell us what you want to happen, and give us whatever you know that might help us locate a record — for example:

• the name of the photographer, studio, or agency;
• the platform where you have seen the content, and a link to it if you have one;
• roughly when the photographs or video were taken;
• the name you were working under at the time, if it was not your own;
• any reference number you have been given.

The more of this you can give us, the more likely we are to find the right record. If you have none of it, write to us anyway and we will tell you honestly whether we can proceed.

4 Confirming Who You Are

So our first reply will ask you to confirm your identity. We ask for the least we can work with, and what we ask for depends on what you already have. Where we hold a record for you, we can often confirm your identity against that record, which means you may not need to send us anything new.

Anything you do send us for the purpose of confirming your identity is used only for that purpose and is deleted once the check is complete. It is not added to any record, and it is not shared with any platform or with the person who submitted the original documents.

If we cannot establish who you are, we will tell you so and explain why, rather than leaving your request unanswered. We will not treat a failed identity check as a reason to ignore you.

5 What We Can Do

Once we know who you are, you can ask us to do any of the following.

• Tell you what we hold. We will tell you what records exist, where they came from, who submitted them, what has been shared with a platform, and how long we expect to keep them. If nothing exists, we will tell you that too.
• Give you a copy. Including a copy of the model release that was submitted for you, so you can see for yourself what it says and what you are recorded as having agreed to.
• Correct what is wrong. Names, spellings, dates, and anything else recorded inaccurately.
• Withdraw your consent. Where a record rests on your consent, you can withdraw it. We will stop relying on it from that point.
• Suspend or withdraw the record. Where you tell us the documents were submitted without your agreement, or you withdraw consent, we can suspend or withdraw the record so it no longer supports publication, and we can tell the platform we have done so. We do not need the agreement of the person who submitted the documents, and we will not ask them for it.
• Object to what we do with it. Where we rely on legitimate interests, you can object, and we will stop unless we can show compelling grounds that override your objection.
• Verify yourself directly. If you would rather the record rested on your own verification than on documents someone else submitted, we can arrange that.

The fifth of these is usually the one that matters most, because a withdrawn record removes the basis on which a platform published the content in the first place.

6 What We Must Keep

We would rather tell you this now than after you have asked.

Some records exist because a law requires them to be kept. Where content has been published, record-keeping laws require that the record establishing the age and identity of the people appearing in it is preserved for a set period, calculated from when that content was last published. While that obligation applies, we cannot delete the record even at your request.

What we can do is restrict it. A restricted record is held for the compliance purpose alone: it is not used for anything else, it does not support further publication, and access to it is limited. We will tell you exactly what is being kept, why, and for how long.

7 What Happens Next

• We acknowledge your email and ask what we need to confirm your identity.
• Once your identity is confirmed, we search for records matching what you have told us.
• We reply with what we found, or confirm that we found nothing.
• We carry out what you have asked for, or explain precisely what we cannot do and why.

We respond within one month of confirming your identity. If a request is complex we may need longer, in which case we will tell you why and keep you updated rather than going quiet. Where you tell us documents were submitted without your agreement, we treat that as urgent and act before the rest of the process is complete.

8 If You Are Not Satisfied

Tell us, and we will look at it again.

You can also complain to a data protection authority. ProntoID is operated by Brooks & Keitt Sarl from Switzerland, so the Swiss authority is the Federal Data Protection and Information Commissioner (FDPIC). If you live in the European Economic Area or the United Kingdom, you can complain to the authority in your own country instead. You can go to them whether or not you have contacted us first, though it is usually quicker to ask us.

If your concern is about content published on a platform rather than about our records, the platform's own regulator may also be relevant, and we can point you to who that is.