Data Protection Complaints Policy
Purpose
BrainWorks Hypnotherapy is committed to protecting your privacy and handling personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.
This policy explains how you can raise concerns regarding the handling of your personal information.
Your Right to Complain
You have the right to complain if you believe BrainWorks Hypnotherapy has not handled your personal information appropriately.
This may include concerns about:
- Collection of personal information.
- Storage and security of personal information.
- Confidentiality.
- Accuracy of information held.
- Information sharing.
- Data retention.
- Subject Access Requests.
- Any of your data protection rights.
How to Make a Complaint
Complaints may be submitted in writing by email or letter.
Please provide:
- Your name and contact details.
- A description of your concern.
- Relevant dates and correspondence.
- The outcome you would like to achieve.
Contact Details
Helen Brimson
BrainWorks Hypnotherapy
Email: helen@brainworkshypnotherapy.co.uk
How Your Complaint Will Be Handled
Upon receiving a complaint, BrainWorks Hypnotherapy will:
- Record the complaint.
- Review the concerns raised.
- Investigate the matter appropriately.
- Request additional information if required.
- Keep you informed of progress where necessary.
- Communicate the outcome in writing.
Complaints will be acknowledged within 7 calendar days and investigated without undue delay.
Possible Outcomes
Following investigation, BrainWorks Hypnotherapy may:
- Provide clarification regarding the processing of personal information.
- Correct inaccurate records.
- Restrict or cease processing where appropriate.
- Improve procedures or safeguards.
- Take other appropriate remedial action.
Escalation to the ICO
If you are dissatisfied with the outcome of your complaint, you have the right to contact the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
The ICO generally expects individuals to give organisations an opportunity to address concerns before contacting them directly.
Record Keeping
Records of data protection complaints and their outcomes will be maintained securely in accordance with legal obligations and professional requirements.
Review
This policy will be reviewed periodically to ensure ongoing compliance with UK data protection legislation and regulatory guidance.
