Skip to main content

Data protection complaints

Understanding your data rights

At The Adaptavist Group, we take the privacy and security of your personal information seriously. Under the UK's Data Use and Access Act 2025 (DUAA), you have specific statutory rights regarding how your information is handled, including the right to lodge a formal complaint directly with us. The law establishes this internal complaints process as an essential first step. This gives us the opportunity to investigate your concerns and resolve them swiftly before the matter is escalated to the regulator.
A data protection complaint may relate to how we have collected, used, stored or shared your personal data. This includes concerns about:
  • A subject access request: issues or delays in accessing the personal data we hold about you.
  • A data breach: concerns regarding unauthorised access, accidental loss, or alteration of your information.
  • Data retention: disputes over how long we have kept your data.
  • Processing objections: any other instance where you believe our data processing operations do not align with legal frameworks.
This form should only be used for complaints about our data processing or security practices. If you need to contact us about something else, please use our contact page or support portal.
What to expect
We aim to handle all complaints transparently, fairly, and without unjustifiable delay.
  1. Submission: you complete and submit the data protection complaints form below.
  2. Acknowledgement: our privacy team reviews the submission and formally acknowledges the complaint within 30 days.
  3. Review and verification: we verify your details, gather internal records related to the issue, and keep you updated on our progress.
  4. Resolution response: we issue a formal written response detailing how the investigation was conducted, our findings, and any remedial actions.
Identity verification notice
To progress your complaint, we may need to contact you to ask for further information. For example, we may need to ask for your ID to verify your identity and update you on your complaint. This security step ensures we only share personal data with the authenticated individual.

Data protection complaints form

Alternative submission method

While using the electronic form above ensures your complaint reaches our data protection team immediately, the DUAA requires us to accept complaints via email. You may also submit your complaint to: legaloperations@adaptavist.com

Escalating your complaint

We will investigate your matter thoroughly and make every effort to achieve a fair resolution.
If you remain unsatisfied with the final outcome or the way your complaint was handled, you can escalate your concern to the UK's independent data protection regulator, the Information Commissioner's Office (ICO) or your local Data Protection Regulator. However, please note that under the Data Use and Access Act 2025, the ICO will expect you to have completed our internal complaints process before they will intervene.

Privacy policy

For comprehensive details on how we process, manage, and protect your personal data across our operations, please review The Adaptavist Group privacy policy.