What are data protection complaints?

To complain, you do not have to use legal terms or quote sections of the legislation.

For example, you may submit complaints about:

• the way Insight Associates has responded to your subject access request (SAR), or other rights request;
• the security measures Insight Associates has used to store your information (e.g. someone who has been impacted by a data breach, regardless of whether it’s reportable to the Information Commissioners Office; or
• how Insight Associates has collected or used your personal information (e.g. where the company has stored it, how long they have kept it for, or its accuracy).

If your complaint relates to our service or other matters, whilst also exercising your data protection rights. This doesn’t count as a data protection complaint. For example:

• an employee may raise a grievance issue, and also request copies of their personal information; or
• a person may complain about a customer service issue and also request that you delete their information.

If Insight Associates are unsure you are making a data protection complaint, you will be asked for clarification.

How to make a data protection complaint to Insight Associates

You may choose to make a complaint using whichever method you choose, however, for efficiency and accuracy of recording, we would recommend that you send an email to GDPR@insightassociates.co.uk detailing the nature of your complaint. Please provide your name and contact details.

Please Note: You will then be asked to verify your ID before any response can be made.

After receipt of acceptable ID, Insight Associates will acknowledge receipt of your complaint within 30 days.

Your complaint will be handled by Insight Associates in a timely manner, and you will receive notification of the outcome in writing.