We aim to handle your personal data lawfully, fairly and securely.
If you're unhappy with how the council has collected, used, shared or stored your personal data, you can make a data protection complaint.
This might include concerns about:
- how your personal data has been used or shared
- whether your data is accurate or kept up to date
- delays or issues responding to a data protection request
Making a data protection complaint
You can make a data protection complaint online.
Submit a Stage 1 data protection complaint
After you make the complaint
We will:
- acknowledge your complaint within 2 working days
- send a full response within 10 working days of the acknowledgement
If we need more time to respond, we will let you know before the 10‑day deadline.
Any extension will usually be no more than a further 10 working days, and we will explain the reasons for this.
Stage 2 review
If you are not satisfied with our response, you can ask for a Stage 2 review within 28 days of receiving it.
A Stage 2 review will be carried out by a senior officer who was not involved at Stage 1. We will:
- acknowledge your Stage 2 request within 2 working days
- send a full response within 20 working days of the acknowledgement
If we need more time, we will let you know before the 20‑day deadline. Any extension will usually be no more than a further 20 working days, and we will explain why.
If you are unhappy with the outcome
If you remain dissatisfied after you receive our Stage 2 response, you can contact the Information Commissioner’s Office (ICO) about a data protection complaint.
Read the policy
For full details about how we handle data protection complaints, including timescales and review arrangements, read our policy: