Data Protection Complaints
Moore and Tibbits are committed to meeting their data protection obligations and ensuring principles set out in the UK General Data Protection Regulation (UK GDPR) are followed when we handle personal data.
Our policy aims to ensure that your complaint is dealt with promptly, fairly and free of charge. Making a complaint will not affect how we discharge your rights.
We have a procedure in place which details how we handle complaints as follows:
1. What is a data protection complaint?
A data protection complaint is any expression of dissatisfaction about how Moore & Tibbits have handled your personal data. A data protection complaint may arise in relation to concerns about:
- responses made to data access requests;
- how we are keeping information safe;
- incorrect information held;
- disclosures of information about you;
- keeping information for longer than necessary;
- using personal data for a different purpose to the one we collected it for; or
- any of your data protection rights.
2. Who can complain?
A data protection complaint can be made by anyone whose personal data is processed by Moore & Tibbits. If you want to make a complaint on someone else’s behalf, we will need permission to deal with you, and we may need to ask for ID.
3. How to make a complaint
Data protection complaints can be addressed to the person you have been dealing with, or to the Data Protection Lead who keeps records of all formal data protection complaints.
Complaints may be made verbally; however, where a complaint is submitted by telephone, we may request that it is also provided in writing where possible. This helps ensure that we accurately capture all relevant details of the request or complaint. Where a complaint is recorded over the telephone, we will provide you with a written copy to confirm that the information has been documented correctly.
The contact details are:
FAO: Data Protection Lead
Post: 3rd Floor, Westgate House, Market Street, Warwick CV34 4DH
Phone: 01926 491181 or
Email: timo@moore-tibbits.co.uk.
4. Information to include in your complaint
If your complaint relates to how we have handled a Data Subject Access Request (DSAR), it would assist us if you could clearly specify what you believe is missing from our response. Namely, the data you expected to receive but did not.
For all other complaints concerning the exercise of your rights, please provide as much relevant detail as possible. It would also be helpful if you could outline the outcome you are seeking. This information will help us to better understand your concerns.
5. Acknowledgement and response
We will send you a letter acknowledging receipt of your complaint within 30 days and confirm the name of the person dealing with the complaint. We will confirm that we have eight weeks in which to resolve it.
The Data Protection Lead will investigate your complaint, as appropriate.
We will review the information you provide with the information we hold, and check that we have upheld our own terms and policies. We will provide information to help you understand how we reached our decision and let you know what actions we have taken and about any improvements we intend to make.
6. Review and escalation
If you are still not satisfied with our handling of your complaint you can ask the Information Commissioner’s Office (ICO) to consider the complaint. We would hope that this does not become necessary and that we can resolve matters between ourselves.
See the ICO’s website for details: Make a complaint about how an organisation has used your personal information | ICO
June 2026