Privacy Complaints Procedure
This document outlines the internal privacy complaints procedure for Sarah Barter Proofreading (‘I’, ‘me’, ‘my’) and applies to the processing of personal information collected through sarahbarterproofreading.com and my related business activities.
I am committed to handling personal information fairly, lawfully and transparently in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and subsequent UK data protection legislation and amendments currently in force.
This procedure explains how I handle privacy and data protection complaints, the expected timescales involved, and what individuals can expect when raising a concern regarding the way I process personal information.
Submitting your complaint
In the first instance, please contact support@sarahbarterproofreading.com if you wish to make a complaint about how I have handled your personal data.
Timetable for handling privacy complaints
1. Complaint Received
When I receive a privacy or data protection complaint, I will first review the information provided to:
confirm that the complaint relates to Sarah Barter Proofreading;
identify the nature of the privacy concern being raised;
determine whether the complaint also includes a formal data protection rights request, such as a Subject Access Request (SAR), request for rectification, request for erasure, or another individual rights request.
If necessary, I may contact the complainant for clarification before proceeding further.
2. Verifying the complainant’s identity
If I have reasonable doubts regarding the identity of the individual making the complaint, I may request information necessary to verify identity before responding.
Verification will be requested at the earliest opportunity where required.
I will only request information that is necessary and proportionate for identity verification purposes.
If sufficient information is already available to verify identity, I will not request additional documentation.
3. Acknowledgement of the complaint
In accordance with applicable data protection requirements, we will acknowledge receipt of privacy complaints within 30 days of receiving them. The 30-day period begins on the day after the complaint is received and includes weekends and public holidays. If the final day of the acknowledgement period falls on a weekend or public holiday, acknowledgement will be issued by the end of the next working day.
The acknowledgement may include:
confirmation that the complaint has been received;
information about the next steps in the process;
requests for additional information if required; and
indicative timescales where available.
4. Updates during the investigation
I will, without undue delay, take appropriate steps to investigate privacy complaints and keep complainants informed during the process. Updates may include:
confirmation that the investigation remains ongoing;
requests for further information;
progress updates where available; and
expected timescales for the next communication.
Where limited progress can be reported, I will still seek to keep the complainant appropriately informed.
5. Information gathering and acknowledgement review
Before conducting a full investigation, I will ensure that we have enough information to properly understand and assess the complaint. I will not make assumptions regarding the issues raised and may contact the complainant if additional information is required.
6. Investigation process
As part of the investigation process I will:
identify and preserve relevant information where appropriate;
gather and review relevant records and evidence;
assess all relevant facts thoroughly, fairly and accurately;
compare information held by Sarah Barter Proofreading with information provided within the complaint;
review my internal policies, procedures and data handling practices where relevant; and
determine whether any corrective action or process improvements are necessary.
Investigations will be conducted fairly and with appropriate consideration of applicable data protection obligations.
7. Outcome of the complaint
Once the investigation has been completed, I will inform the complainant of the outcome without undue delay. My response will normally be sent by email unless another communication method has been requested.
The response may include:
the findings of the investigation;
actions taken, where applicable;
any corrective measures implemented; and
information regarding further options available to the complainant.
If a complainant remains dissatisfied with the way in which their personal information has been handled or with the outcome of their complaint, they may contact the Information Commissioner’s Office (ICO): https://ico.org.uk/global/contact-us
The ICO is the UK's independent authority responsible for upholding information rights and data protection law.
Last updated 19 June 2026