Kelly Worrall Marketing · In line with the Data (Use and Access) Act 2025
Data Protection Complaints Procedure
Your data matters, and if you ever feel it hasn’t been handled properly, you have every right to tell me about it.
This page explains how to raise a formal data protection complaint with Kelly Worrall Marketing, what happens once you do, and what to do if you’re not satisfied with my response.
This procedure is in place to comply with the Data (Use and Access) Act 2025, which came into force on 19 June 2026.
It introduced a legal requirement for all organisations to have a formal complaints process for data protection concerns – no exceptions.
What counts as a data protection complaint?
A data protection complaint is any concern you raise about how I’ve handled your personal information. This includes:
- How I collected, stored, or used your personal data
- How I responded to a subject access request or other data rights request
- Whether I had a lawful reason to process your data
- How long I’ve held your data
- The security measures used to protect your data
- Whether your data was shared with third parties appropriately
- Direct marketing you believe you didn’t consent to
If you’re unsure whether your concern qualifies, raise it anyway. I’ll let you know if it falls outside this procedure and point you in the right direction.
How to raise a complaint
You can contact me through any of the channels below. You don’t need to use a specific form or label your message as a “data protection complaint” – if it’s clearly about your personal data, I’ll treat it as one.
Contact Kelly Worrall Marketing
Please include your name, contact details, a description of your concern, and what outcome you’re hoping for.
This helps me investigate and respond as quickly as possible.
What happens after you complain?
Every complaint will be acknowledged within 30 days of receipt – this is a legal requirement. The 30 days starts the day after I receive your complaint, including weekends and bank holidays. Investigation begins immediately, not after the acknowledgement.
I’ll confirm I’ve received your complaint within 30 days. If I can fully investigate and respond within that window, a separate acknowledgement may not be needed.
I’ll look into your complaint without delay, starting from the moment it arrives. I may ask clarifying questions to make sure I address your concern properly, and I’ll keep you updated throughout.
I’ll provide a clear outcome as soon as possible, explaining what I found, what action I’ve taken, and the reasons for my decision. I’ll respond using the same method you used to contact me.
If you’re not satisfied with my response, you have the right to take your complaint to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
How I record complaints
I keep a secure record of all data protection complaints, including:
- Date the complaint was received
- Acknowledgement sent and when
- All relevant correspondence
- The outcome and any action taken
These records are used only to manage complaints and to demonstrate compliance with data protection law. I may also use anonymised information to identify patterns and improve how I handle personal data going forward.
Data I hold and why
Yorkshire Marketing Consultants T/A Kelly Worrall Marketing is a specialist paid advertising agency working with UK trade businesses. The personal data I may hold about you includes contact details, business information, and communications shared during enquiries, client work, or marketing activity.
Full details of how I collect, use, and store personal data are set out in my Privacy Policy.
If you’re not satisfied with my response
You have the right to escalate your complaint directly to the ICO at any point. The ICO expects organisations like mine to be your first stop, but the option to contact them is always open to you.
Information Commissioner’s Office (ICO)
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Last updated: June 2026
This procedure is reviewed annually or whenever relevant legislation changes.