A data protection complaint is any concern about how we have handled your personal data.

This may include concerns about:

• how we collect your data

• how your data is used, shared or stored

• how we respond to your data subject rights request (such as access or erasure requests)

• the accuracy or security of your personal information.

You do not need to use legal or technical language to raise a concern. If something does not feel right, please let us know.

You can raise a data protection complaint at any time using the form below.

To help us investigate your concern as quickly as possible, please provide as much detail as you can, including:

• what happened

• when it happened

• any relevant correspondence or supporting information.

We will handle your complaint promptly, fairly and in line with our obligations under UK data protection law.

We will:

• acknowledge your complaint and begin our review without undue delay

• contact you if we need further information (this may include proof of identity where appropriate)

• keep you informed of progress where relevant

• provide you with a clear and comprehensive outcome.

We also use feedback from data protection complaints to improve how we manage and protect personal data.

If you are not satisfied with how your complaint has been handled, or with the outcome, you have the right to raise your concern with the UK’s independent regulator for data protection and information rights, the Information Commissioner’s Office (ICO).

The ICO encourages individuals to contact the organisation first so that issues can be resolved directly. You can contact the ICO in the following ways:

• Email: icocasework@ico.org.uk

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

• Telephone: 0303 123 1113

For more information, visit the ICO website: https://ico.org.uk.

This process applies only to concerns about personal data. If your concern relates to another matter, please use the appropriate complaints process.