Skip to content

Data Protection Complaints Procedure

Effective 19 July 2026

This procedure explains how to complain about Priceway's handling of personal data.

Making a complaint

Email contact@priceway.co.uk with “Data protection complaint” in the subject line. You may also write to our business address or the UK representative stated in the Privacy Notice.

Tell us:

  • what processing concerns you;
  • the relevant dates, pages, consent ID or messages;
  • why you believe the processing was incorrect; and
  • what outcome you seek.

Do not send more identification or sensitive information than necessary. We may request proportionate evidence of identity where needed to protect another person's data.

Acknowledgment

We will acknowledge the complaint without undue delay and no later than 30 days after receipt. The acknowledgment will explain how the complaint will be handled and how to provide further information.

Investigation

We will investigate appropriately, which may include:

  • checking consent and system records;
  • reviewing the applicable lawful basis, notice and retention period;
  • consulting processors or other recipients;
  • correcting, deleting, restricting or securing data where required;
  • considering whether an incident must be reported; and
  • recording the evidence and reasoning.

A person with sufficient independence and authority will review the complaint. We will communicate the outcome as soon as reasonably practicable, explain material findings and identify any action or review route.

Your other rights

A complaint can also include a request to exercise a UK GDPR right. We will identify and handle that request under the applicable statutory time limit.

ICO complaint

You may complain directly to the Information Commissioner's Office at any time. You do not have to complete Priceway's process first, and using it does not affect your right to contact the ICO or a court.

Records

Priceway keeps proportionate complaint records to demonstrate compliance and identify recurring issues. Access is restricted and retention follows the Privacy Notice.