Aim and scope of policy
The Data Protection Act 2018 is the main law governing data protection, but The Data (Use and Access) Act 2025 introduced some amendments. From 19th June 2026, you have the right to complain directly to us if you consider that we have breached data protection laws because of the way we have handled your personal data (or the personal data of someone you are acting on behalf of). This Policy explains your right to complain and how we will handle your complaint.
Our Data Protection Officer (DPO), Debbie Starr, debbie.starr@tbtmarketing.com responsible for handling data protection complaints within our organisation. They will work alongside other members of our organisation who have been identified as relevant to the investigation of each complaint.
All staff are responsible for recognising data protection complaints.
Staff who receive or identify a data protection complaint, whether in person, via social media or through any other channels, must inform Debbie Starr, DPO as soon as possible.
We are committed to handling data protection complaints in line with our legal obligations and in an accessible, fair, transparent and timely manner. We will handle complaints confidentially and only share information where appropriate to investigate and resolve the complaint, as required or authorised by law or otherwise in accordance with our privacy notices.
Examples of a data protection complaint include (but are not limited to) the following:
This list is not exhaustive. You have the right to complain to us at any time if you consider that there has been an infringement of any of your rights in relation to your personal data. Information on how we handle your personal data is set out in our Privacy Notice which can be viewed on our website: https://www.tbtrecruitment.co.uk/policies/
If we are not sure whether you are making a data protection complaint, we will contact you to clarify the nature of your complaint.
Employees who want to raise a grievance should do so under our grievance procedure.
If your complaint relates to whistleblowing, please read our separate whistleblowing procedure which is also available to view on our website using the link above.
How to Make a Data Protection Complaint to Us
You can submit a complaint directly to us using our Complaint Form. Please contact us on 01373 469250 or admin@tbtrecruitment.co.uk to request a copy.
The form is to be emailed to Debbie Starr, debbie.starr@tbtmarketing.com
We will take appropriate steps to respond to data protection complaints that we receive from any other channels, including via social media.
We will comply with our duty to make reasonable adjustments to our data protection complaints process for disabled people under the Equality Act 2010. If you feel that you would benefit from any adjustments to our data protection complaints process, you should raise this with us when making your complaint.
Complaints Made on Social Media
Although data protection complaints may be made on social media, we would advise that a complaint may be dealt with more efficiently and effectively if it is made using the email address stated above.
Where we identify a data protection complaint about our organisation on social media, we will take appropriate steps to respond to the complaint in line with this policy. However, as responding on social media is not usually a secure way of providing information, we will ask the individual making the complaint for an alternative contact method that we can use to respond to their complaint.
When we receive a data protection complaint, we will acknowledge receipt no later than 30 days from receiving it.
If we have any doubts about your identity, we may need to ask you for proof of ID before we respond to your complaint.
Complaints made on your behalf by a third party must be accompanied by evidence that the third party is authorised to act on your behalf. If this is not provided, we will contact the third party to ask that such evidence is provided before we respond to your complaint. If we are unsure whether a letter of authority is valid, we will contact you about this before we respond to your complaint.
We will take appropriate steps to respond to your complaint without undue delay, including making enquiries into the complaint and keeping you informed about the progress of our investigation and timescales for the next update or outcome.
We may need to contact you to request further information to assist with our investigation. It may take us longer to investigate and resolve complaints which are complex, serious or which relate to multiple data protection issues.
Following our investigation, we will inform you of the outcome of your complaint without undue delay, explaining our findings, whether the complaint is upheld (in whole or in part), any action taken or proposed, and, where no action is taken, the reasons for that decision.
If you are dissatisfied with the outcome, you should contact Natasha Welsh, Natasha@tbtrecruitment.co.uk to request a review of the original decision. Where reasonably practicable, any internal review will be carried out by a person who was not primarily responsible for the original response.
Complaints About Data Processors
Where we receive a complaint that relates to the processing of personal information by our service providers, we will ask them to provide us with information relevant to the complaint without undue delay and in line with our contractual terms with the service provider.
We will keep a record of:
We will use these records to demonstrate compliance, for audit and monitoring purposes, training, to support consistent handling and to identify recurring issues, trends or areas for organisational improvements or remediation.
We will not retain personal data relating to complaints for longer than is necessary. More information on our retention periods is set out in our privacy notices available on Breathe HR.
Complaints to the Information Commissioner’s Office
You have the right to make a data protection complaint at any time to the Information Commissioner’s Office (ICO).
The ICO’s contact details are as follows:
Information Access Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Reviewed July 2026 by Operations Director – Scott Jeffrey
01373 469250
