Data Protection Complaints Handling Policy

Introduction

The Worwin UK Foundation takes its legal obligations under the UK General Data Protection Regulation (UK-GDPR) and Data Protection Act 2018 (DPA) very seriously. We are committed to protecting your data and privacy in accordance with Data Protection Laws, including but not limited to UK-GDPR and DPA. We strive to investigate concerns and complaints in a prompt and effective manner, and in accordance with these Data Protection Laws. 

Making a data protection complaint

If you have concerns about the way we have collected, used, shared, stored or otherwise handled your personal information, you can raise this with us by making a data protection complaint. 

To help us understand your concern and respond appropriately, it is helpful if you include a clear explanation of the issue, how it relates to the handling of your personal information, and any relevant dates or correspondence, if available. 

A data protection complaint can be made by the person to whom the personal information relates, or by someone authorised to act on their behalf. 

You can make a data protection complaint by contacting us:

By post: Worwin UK Foundation, 66 Lincoln’s Inn Fields, London WC2A 3LH 

Online form: www.worwinuk.org/contact

What happens next

We will acknowledge your data protection complaint as soon as possible after it is received, and no later than 30 calendar days. 

Please note that identification may be required if it is unclear who is making the request. 

If you are making a complaint on behalf of someone else, we require evidence that you are authorised to do so. This helps us ensure personal information is only shared with the right people.   

Investigation and outcome

We will review and investigate your complaint without undue delay. We will take into account: 

  • The complexity of the issues; 

  • The seriousness of any alleged infringement; 

  • The potential impact upon the individual. 

The time required to provide a full response will depend on the nature and complexity of your complaint. We will keep you informed where an investigation is likely to take longer or where we need further information to help us understand your complaint. 

Once our investigation is complete, we will write to you to explain the outcome. 

Further action

If you remain dissatisfied after receiving our response, you have the right to raise your concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.  

Further information about the ICO and how to raise a concern is available on the ICO’s website.

Data Protection Complaints Handling Policy June 2026