Data Protection Complaints Policy

Last Updated: July 2026

Purpose

KCurryVA is committed to protecting the privacy and personal information of clients, prospective clients and other individuals whose personal data is processed as part of our services.

We take concerns about the handling of personal information seriously and are committed to resolving data protection complaints fairly, transparently and without unnecessary delay.

This policy explains how you can raise a data protection complaint and how KCurryVA will respond.

What is a Data Protection Complaint?

A data protection complaint is any concern relating to the way KCurryVA has collected, used, stored, shared or otherwise processed personal information.

Examples include concerns about:

Access to personal information.
Accuracy of personal information.
How personal information has been used.
Retention of personal information.
Security of personal information.
Disclosure of personal information.
The exercise of your data protection rights.

How to Make a Complaint

If you have a concern about how your personal information has been handled, please contact us by email.

KCurryVA@outlook.com

Please include, where possible:

Your name.
Your contact details.
A description of your concern.
Any relevant dates or correspondence.
What outcome you are seeking.

Providing this information will help us investigate your complaint as efficiently as possible.

If you have a question or concern about how your personal information has been handled, we encourage you to contact us in the first instance. Many concerns can be resolved quickly without the need for a formal complaint.

Complaint Handling Process

Step 1 – Receipt of Complaint

Complaints should be submitted by email to KCurryVA@outlook.com.

Step 2 – Acknowledgement

Receipt will be acknowledged within 24 hours.

Step 3 – Initial Assessment

An initial assessment will be completed within two working days to determine the nature of the complaint and whether further information is required.

Step 4 – Investigation

The complaint will be investigated. Where appropriate, additional information may be requested from the complainant or, where KCurryVA is acting as a Data Processor, from the relevant Data Controller.

Step 5 – Outcome

A written outcome will normally be provided within 30 calendar days.

If additional time is required, the complainant will be informed of the reason for the delay and provided with an updated timescale.

Complaints Relating to Client Data

KCurryVA provides operational support services to a range of organisations and professionals.

In many cases, KCurryVA processes personal information on behalf of clients who act as the Data Controller.

Where a complaint relates to personal information processed on behalf of one of our clients:

We will investigate our own processing activities.
We will notify the relevant Data Controller where appropriate.
We will work cooperatively with the Data Controller to resolve the complaint.

The Data Controller remains responsible for decisions regarding the purposes and means of processing personal data.

Your Rights

Making a complaint under this policy does not affect your rights under UK data protection legislation.

If you remain dissatisfied after receiving our response, you have the right to raise your concerns with the Information Commissioner's Office (ICO).

Further information is available from the ICO website.

(We'll add the official ICO link in the website version.)

Review of this Policy

This policy will be reviewed:

At least annually.
Following significant changes to applicable legislation.
Following any significant data protection complaint where improvements are identified.

Related Documents

This policy forms part of the KCurryVA Governance Suite.

Version	Date	Summary of Changes	Approved By
1.0	10 July 2026	Initial issue	Business Owner