IN FORCE SINCE 19 JUNE 2026
Privacy complaint checks
If someone has a concern about their personal information, can they find the right person to contact? We look for a clear route on your website.
What the public scan looks for
We follow your privacy links and look for instructions and contact details. Finding an email address tells us visitors have a starting point; it does not tell us whether anyone reads or responds to those emails.
What you need to confirm
The owner questionnaire asks about 30-day acknowledgement, investigation, outcome communication and the recipient responsible for incoming concerns. These answers are labelled as self-reported.
A practical preparation checklist
Check the published contact address, who receives it and who covers absence. Keep a record of incoming complaints and updates. Distinguish acknowledgement from resolution: the 30-day requirement concerns acknowledging receipt, while investigation and response must proceed without undue delay.
No fake complaints
GDPRFix does not submit complaint forms or send test complaints. “No clear route detected” is a prompt to review the website and wider process, not a finding that the organisation has broken the law.