Data Protection Complaints Procedure
Data Protection Complaints Procedure
Section 103, Data (Use and Access) Act 2025 · Effective July 2026
1. Purpose
The Data (Use and Access) Act 2025 requires all data controllers to have a formal written procedure for handling data protection complaints. This document sets out Winternational Fashion Limited's procedure for receiving, investigating and resolving such complaints. It applies to any individual — customer, website visitor, email subscriber or other person — who wishes to raise a concern about how Winternational has handled their personal data.
2. What Counts as a Data Protection Complaint
A data protection complaint is any expression of dissatisfaction about how we have collected, used, stored, shared or deleted your personal data, including:
● How we collected your personal data
● What we are using your personal data for
● How long we are keeping your personal data
● Whether we have shared your personal data with others, including delivery agents
● Whether we have responded properly to a Subject Access Request or other rights request
● Whether we have kept your personal data secure
● Whether we have sent you marketing communications you did not consent to
● Any other concern about our use of your personal data
3. How to Submit a Complaint
|
|
lookgood@winternational.co.uk |
|
Subject line |
DATA PROTECTION COMPLAINT |
|
Post |
Winternational Fashion Limited, Berkshire, United Kingdom |
Please include your full name, contact details, a description of the complaint and the outcome you are seeking.
4. How We Will Handle Your Complaint
Step 1 — Acknowledgement (within 5 working days)
We will acknowledge receipt of your complaint within 5 working days, confirm who is handling it and provide an expected timeline for our response.
Step 2 — Investigation
We will investigate thoroughly and fairly, reviewing relevant records, systems and processes. We may contact delivery agents, payment providers or other third parties where necessary. We may contact you if we need further information.
Step 3 — Full Response (within one calendar month)
We will provide a full written response within one calendar month. Where the complaint is complex we may extend this by up to two months — if so we will notify you within the first month and explain why. Our response will confirm what we investigated, our findings, what action we have taken and your options if you are not satisfied.
5. Escalation to the ICO
If you are not satisfied with our response, or have not received a response within one calendar month, you have the right to escalate to the ICO.
|
ICO Website |
ico.org.uk/make-a-complaint |
|
ICO Helpline |
0303 123 1113 |
|
ICO Address |
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
6. Data Subject Rights Requests
This procedure is separate from your right to submit a Subject Access Request or exercise other UK GDPR rights. For rights requests, please email lookgood@winternational.co.uk. If you are unhappy with how we handle a rights request, you can raise this as a complaint under this procedure.
7. Confidentiality and Record Keeping
All complaints are handled confidentially. We keep a record of all complaints received, investigations and responses, retained securely for a minimum of three years.
8. Review
This procedure is reviewed annually. Last reviewed July 2026. Available at winternational.co.uk and on request by email.
Winternational Fashion Limited · winternational.co.uk · lookgood@winternational.co.uk