Legal

Data Protection Complaints Procedure

Last updated: [Date]

In accordance with Section 164A of the Data Protection Act 2018 (as inserted by the Data Use and Access Act 2025), [Your Consultancy Name] has established this formal procedure for handling complaints about how we process personal data.

1. How to make a complaint

Email: info@[yourdomain].co.uk · Post: [Your Consultancy Name], [Address]

Please provide as much detail as possible: what data is involved, what you believe went wrong, and the outcome you seek.

2. What happens next

Acknowledgement: Within 30 calendar days. Investigation: Thorough review of relevant processing. Response: Substantive response without undue delay, aiming within 60 calendar days.

3. If you remain dissatisfied

You may lodge a complaint with the ICO: ico.org.uk/make-a-complaint · 0303 123 1113. The ICO recommends raising concerns with us first.

4. Record keeping

We maintain records of all complaints, investigation steps, and outcomes. Retained for 7 years.