Emma Brooks Design — Data Protection Complaints Procedure

Effective Date: 17 July 2026

<aside> ⚖️

This procedure sets out how I handle complaints about the way I use personal data, in line with the Data (Use and Access) Act 2025 and UK GDPR. It works alongside my Privacy Policy — read that for what data I collect and why.

</aside>

1. Purpose

I want anyone I hold personal data on — clients, subscribers, enquirers, website visitors — to have a clear, easy way to tell me if they think I've got something wrong, and to know what happens next. This procedure explains that.

2. What Counts as a Data Protection Complaint

A data protection complaint is any expression of dissatisfaction about how I've collected, used, shared, stored, or protected your personal data. For example, concerns about:

• How I've responded to a request to access, correct, or delete your data
• Unwanted marketing emails
• How long I've kept your data
• A security incident involving your data
• The lawful basis I've relied on to process your data
• Cookies or tracking on my website

This is different from general customer service feedback about a project or purchase — though if you're not sure which one you've got, just get in touch and I'll work it out with you.

3. How to Make a Complaint

You can complain to me:

• By email: [email protected] — please include "Data Protection Complaint" in the subject line