Privacy & complaints
Data Protection Complaints
VariationDesk Ltd provides a clear process for complaints about how personal data is handled. This process applies whether VariationDesk is acting as controller or assisting a customer that is the controller.
1. Send the complaint
Email info@variationdesk.co.uk with the subject 'Data protection complaint'. Tell us what happened, the personal data or account involved, what you believe is wrong, and what outcome you are seeking. If the complaint concerns data held inside a customer workspace, identify that customer or workspace where possible.
2. We acknowledge it
VariationDesk will acknowledge a data-protection complaint within 30 days. We may ask for information needed to verify identity, authority or the scope of the complaint.
3. We investigate
We will investigate fairly and proportionately, review relevant systems and records, consider the applicable data-protection requirements, and involve the relevant customer controller where the complaint concerns customer-controlled workspace data.
4. We respond
We will communicate the outcome and any action taken or proposed. If the investigation needs more time, we will explain the position and keep the complainant reasonably informed.
5. ICO rights
A person remains entitled to raise a concern with the Information Commissioner's Office. Using this process does not remove that right.
What we record
VariationDesk records the complaint, acknowledgement date, relevant evidence, investigation steps, outcome and completion date so that complaints are handled consistently and can be demonstrated if required.