DATA-PROTECTION COMPLAINTS · PRE-LAUNCH POLICY

Privacy complaints

Use this route if you are concerned about how GDPRFix handles personal information, including information captured in a website report.

Privacy contact · Make a privacy complaint · Complain to the ICO

How to contact us

Email hello@gdprfix.org with the subject “Data-protection complaint”. Describe what happened, when it happened and what outcome you are seeking. Include a report reference where relevant, but do not send passwords or unnecessary sensitive information.

How we handle complaints

Alex Player is the contact for privacy complaints. The complaint-handling workflow must be tested before public launch. The procedure is to record the concern, acknowledge it within 30 days of receipt, investigate without undue delay and explain the outcome and any action taken. Acknowledgement is not a promise that every investigation will finish within 30 days. This procedure must be adopted and tested before the public service opens.

Information and updates

We may ask for enough information to identify the record and understand the concern. Identity checks should be proportionate. The responsible person should keep the complainant informed, record the outcome and explain any further review route. Complaint records need a defined retention period before launch.

Escalating a concern

You can raise a concern with the UK Information Commissioner’s Office. See ico.org.uk/make-a-complaint/ for the available routes and what evidence to include. A scan report does not prevent you exercising your data-protection rights.

Official guidance: Privacy information · Complaint handling · Cookies and storage