GDPR Complaints Policy

Our GDPR complaints policy

We are committed to providing a high-quality legal service to all our clients. If at any point you become unhappy or concerned about how we have handled your personal data or dealt with your data rights please let us know and we will do our best to resolve the concern.

What are data protection complaints?

Data Protection complaints include, but may not be limited to, situations where:

• A data subject feels the firm has not responded to a subject access request (SAR) in an appropriate manner
• A data subject feels the firm has not responded to another GDPR rights request in an appropriate manner
• A data subject has concerns about how the firm has stored their information
• A data subject has concerns about how the firm has collected or used their personal information (where is it store, how long it is kept, its accuracy)

The GDPR complaints policy does not cover instances where a client wishes to complain about the service the firm has provided. Service complaints should be dealt with under our General Complaints policy.

Our GDPR complaints procedure

To report a GDPR complaint please contact Chris Detheridge, our Data Protection manager by email clientcare@wmlaw.co.uk or write to Sequoia House, Anchorage Avenue, Shrewsbury Business Park, Shrewsbury, SY2 6FG

What will happen next?

1. We will acknowledge your concern within 30 days. The 30-day time period begins the day after we receive the complaint.
2. We will investigate the concern. To do this we will require:

• Proof of your identify in the form of a passport or driving licence
• Specific information about your concern, including dates and as much detail as possible. We may ask further questions or request more information from you to allow for a thorough investigation.
• If you are raising a concern on behalf of someone else we may ask for documents of authority, such as a power of attorney, or we may write to that person to request their authority to deal with you on their behalf.

1. Will we respond to all concerns without undue delay. There may be some occasions where we take more time to respond, for example where the matter is complex. We will keep you informed of the expected timescales for our response.
2. We are committed to dealing with data protection complaints fairly, and in a courteous and timely manner. However, if clients feel their complaint has not been dealt with appropriately then a complaint can be raised with the Information Commission (IC)
3. Further information is available at http://www.ico.org.uk  . Please note the IC may decline to deal with a complaint if the client has not first followed our GDPR complaints process as set out above.