Data Protection Complaints Policy

Created 16th June 2026

My commitment

Nick Lewis [also referred to as ‘I’, ‘me’ or ‘my’ in this document] is committed to handling personal data responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

If you have a concern about the way I have collected, used, stored, or shared your personal data, you have the right to raise a complaint. All complaints will be taken seriously, investigated fairly, and responded to in a timely and transparent manner.

What is a Data Protection Complaint?

A data protection complaint is a concern raised by an individual about the way their personal data has been handled. This may include:

Personal data being collected without a clear lawful basis
Data being used for a purpose other than the one it was collected for
Data being shared with a third party without consent or legal justification
A request to access, correct, or delete personal data not being handled correctly

A data protection complaint can also be related to:

Personal data being held for longer than necessary
Concerns about the security of personal data held by Nick Lewis
Any other concern about how personal data has been processed

How to raise a complaint

Complaints can be submitted by any of the following means. I will accept complaints regardless of the channel used.

Email (preferred): hello@nicklewis.dev
Subject line: Data Protection Complaint

Social media: via direct message to my social media accounts, such as LinkedIn.

To help me investigate your complaint as efficiently as possible, please include:

Your name and contact details
A clear description of your concern and the personal data involved
The outcome you are seeking

If you are raising a complaint on behalf of someone else, please confirm that you are authorised to do so.

The complaint’s process

Acknowledgement

I will acknowledge receipt of your complaint within 30 calendar days of receiving it. The acknowledgement will confirm that your complaint has been received and is being investigated.

Investigation

I will investigate your complaint thoroughly and without undue delay. The investigation will consider:

What personal data is held and on what lawful basis
Whether the data was used in accordance with the stated purpose
Whether your rights as a data subject were upheld
Whether any error or breach occurred, and if so, what steps are being taken to address it

Outcome

Following the investigation, I will write to you with:

The findings of the investigation
Any action taken or to be taken as a result
An explanation of the decision reached
A reminder of your right to escalate to the ICO if you remain unsatisfied

Record-keeping

I will maintain a complaints log recording the date any complaint’s are received, acknowledged, investigated, and closed, along with the outcome. This log will be retained for a minimum of three years and will be available to the ICO on request.

If you are not satisfied

If you are not satisfied with the outcome of your complaint, please be aware that you have the right to complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office (ICO)
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Your data protection rights

In addition to the right to complain, you have the following rights under UK GDPR in relation to your personal data:

Right of access: to request a copy of the personal data I hold about you
Right to rectification: to request that inaccurate or incomplete data is corrected
Right to erasure: to request deletion of your data where it is no longer necessary or where consent has been withdrawn
Right to restriction: to request that processing is limited in certain circumstances
Right to data portability: to receive your data in a structured, machine-readable format where applicable
Right to object: to object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact hello@nicklewis.dev. I will respond within one calendar month of receiving your request.

Policy updates

This policy will be reviewed annually or whenever there is a significant change in data protection legislation or my processing activities. The current version will always be available at nicklewis.dev/data-protection-complaints-policy. The date at the top of this document indicates when it was created and last updated.