Legal notice

Data Protection Complaint Procedure


Business Name: Helen Russell Creations
Website: www.helenrussellcreations.com

1. Purpose

We are committed to protecting the privacy and personal data of our customers, website visitors, and business contacts. This document explains how individuals can raise concerns or complaints regarding the way we collect, use, store, share, or otherwise process personal information.

2. Who Can Make a Complaint?

Any individual whose personal data is processed by us may submit a complaint if they believe:

  • Their personal data has been handled improperly.
  • Their privacy rights have not been respected.
  • Information we hold about them is inaccurate.
  • Their personal data has been disclosed without authorisation.
  • A request relating to their data protection rights has not been handled appropriately.
  • They have concerns about our compliance with applicable data protection laws.

3. How to Submit a Complaint

Complaints should be submitted in writing and include as much detail as possible to help us investigate the matter. If you make the initial complaint via social media or telephone we will ask you to submit a written version of the complaint so we can endeavour to follow due process outlined by ICO guidelines. Please note you will be required to provide verification of your identity before we discuss or share any personal details or information we store.

Please provide:

  • Your full name.
  • Contact details.
  • A description of your complaint.
  • Relevant dates and circumstances.
  • Any supporting documents or evidence.

Complaints can be submitted using the following contact details:

Data Protection Contact: Helen Russell
Email: helen@helenrussellcreations.com
Postal Address: Studio S4, The Local Motive, New Road, Mytholmroyd, West Yorkshire, HX7 5DU

4. What Happens After We Receive Your Complaint?

Upon receiving your complaint, we will:

  1. Acknowledge receipt within 30 days.
  2. Review the details provided.
  3. Conduct an investigation where necessary.
  4. Contact you if additional information is required.
  5. Provide a written response explaining our findings and any actions taken.

We will provide a full response within 30 working days from date of complaint acknowledgement. If the matter is particularly complex, we may require additional time and will keep you informed of progress.

5. Resolution of Complaints

Where appropriate, we may take corrective action, including:

  • Correcting inaccurate personal data.
  • Restricting or stopping certain processing activities.
  • Improving our procedures and controls.
  • Providing further explanations regarding our processing activities.
  • Taking remedial measures to prevent recurrence.

6. Escalation Rights

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

For individuals in the United Kingdom, complaints can be submitted to:

Information Commissioner's Office

You can find further information on the regulator's website:

Information Commissioner's Office (ICO)

We encourage individuals to contact us first so that we can attempt to resolve concerns directly.

7. Confidentiality

All complaints will be handled confidentially and only shared with those who need access to investigate and resolve the matter.

8. Record Keeping

We maintain records of data protection complaints, investigations, and outcomes to help improve our privacy practices and demonstrate compliance with applicable data protection laws.

9. Policy Review

This policy will be reviewed periodically and updated where necessary to reflect changes in legislation, regulatory guidance, or our business operations.

Last Reviewed: June 2026
Next Review Date: June 2027