Data Protection Complaints Procedure

Data Protection Complaints Procedure

Section 103, Data (Use and Access) Act 2025  ·  Effective July 2026

1. Purpose

The Data (Use and Access) Act 2025 requires all data controllers to have a formal written procedure for handling data protection complaints. This document sets out Winternational Fashion Limited's procedure for receiving, investigating and resolving such complaints. It applies to any individual — customer, website visitor, email subscriber or other person — who wishes to raise a concern about how Winternational has handled their personal data.

2. What Counts as a Data Protection Complaint

A data protection complaint is any expression of dissatisfaction about how we have collected, used, stored, shared or deleted your personal data, including:

   How we collected your personal data

   What we are using your personal data for

   How long we are keeping your personal data

   Whether we have shared your personal data with others, including delivery agents

   Whether we have responded properly to a Subject Access Request or other rights request

   Whether we have kept your personal data secure

   Whether we have sent you marketing communications you did not consent to

   Any other concern about our use of your personal data

3. How to Submit a Complaint

 

Email

lookgood@winternational.co.uk

 

Subject line

DATA PROTECTION COMPLAINT

 

Post

Winternational Fashion Limited, Berkshire, United Kingdom

 

Please include your full name, contact details, a description of the complaint and the outcome you are seeking.

4. How We Will Handle Your Complaint

Step 1 — Acknowledgement (within 5 working days)

We will acknowledge receipt of your complaint within 5 working days, confirm who is handling it and provide an expected timeline for our response.

Step 2 — Investigation

We will investigate thoroughly and fairly, reviewing relevant records, systems and processes. We may contact delivery agents, payment providers or other third parties where necessary. We may contact you if we need further information.

Step 3 — Full Response (within one calendar month)

We will provide a full written response within one calendar month. Where the complaint is complex we may extend this by up to two months — if so we will notify you within the first month and explain why. Our response will confirm what we investigated, our findings, what action we have taken and your options if you are not satisfied.

5. Escalation to the ICO

If you are not satisfied with our response, or have not received a response within one calendar month, you have the right to escalate to the ICO.

 

ICO Website

ico.org.uk/make-a-complaint

 

ICO Helpline

0303 123 1113

 

ICO Address

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

6. Data Subject Rights Requests

This procedure is separate from your right to submit a Subject Access Request or exercise other UK GDPR rights. For rights requests, please email lookgood@winternational.co.uk. If you are unhappy with how we handle a rights request, you can raise this as a complaint under this procedure.

7. Confidentiality and Record Keeping

All complaints are handled confidentially. We keep a record of all complaints received, investigations and responses, retained securely for a minimum of three years.

8. Review

This procedure is reviewed annually. Last reviewed July 2026. Available at winternational.co.uk and on request by email.

 

Winternational Fashion Limited  ·  winternational.co.uk  ·  lookgood@winternational.co.uk