Data Protection Complaints Policy

Effective date: 19 June 2026  ·  Last updated: June 2026

If you're unhappy with how I've handled your personal information, I want to hear from you. I take every concern seriously and will do my best to put things right.

This policy explains what counts as a data protection complaint, how to raise one, what happens next, and what you can do if you're not satisfied with my response.

This policy has been put in place in line with the Data (Use and Access) Act 2025, which requires all organisations to have a formal data protection complaints process from 19 June 2026.

What is a data protection complaint?

A data protection complaint is when you believe I haven't handled your personal information in the way the law requires. For example, you might want to complain if:

  • I collected or used your information without a proper reason to do so
  • I didn't respond properly when you asked to see, correct, or delete your information
  • I shared your information with someone I shouldn't have
  • I kept your information for longer than necessary
  • You experienced a data breach that affected your personal information
  • You have concerns about the accuracy of information I hold about you
  • I didn't handle your information securely

How to raise a complaint

You can contact me in any of the following ways. Please use whichever is easiest for you.

Email
info@amyguneri.com

Website
amyguneri.com/contact

It helps if you can tell me:

  • Your name and contact details
  • What happened and when (as best you can remember)
  • How this has affected you
  • What outcome you're looking for

Don't worry if you don't have all of this to hand. I'll work with you to understand what happened.

What happens after you complain

Step 1 — I acknowledge your complaint (within 30 days)

I'll confirm I've received your complaint within 30 calendar days, as required by the Data (Use and Access) Act 2025. This acknowledgement will confirm what you can expect to happen next.

Step 2 — I investigate

I'll look into what happened without unnecessary delay. I'll keep you informed of progress and let you know if I need more time.

Step 3 — I give you my response

I aim to provide a full response as soon as reasonably possible. My response will be written in plain English and will explain what I found, what action I've taken (if any), and your right to take the matter further if you're not happy with my response.

If you're not happy with my response

If you feel I haven't resolved your complaint to your satisfaction, you have the right to take it to the UK's independent data protection regulator, the Information Commissioner's Office (ICO).

Under the Data (Use and Access) Act 2025, I ask that you give me the opportunity to respond before contacting the ICO. The ICO will typically expect to see that you raised your complaint with the organisation first.

You can contact the ICO in the following ways:

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

About this policy

This policy is reviewed regularly and updated whenever my processes change or the law requires it.

Amy Guneri VA is the data controller for personal information held about clients, contacts, and website visitors. I process personal data in line with UK data protection law, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

Questions? Get in touch at info@amyguneri.com or via amyguneri.com/contact.