Data Protection Complaints Policy

Last updated: 20 August 2026

1. Purpose

Eden Cupcake Floristry respects your privacy and is committed to handling personal information responsibly and in accordance with applicable data protection legislation.

This policy explains how you can complain if you believe we have not handled your personal information appropriately and how we will deal with your complaint.

2. What you can complain about

You can make a complaint about the way Eden Cupcake Floristry has handled your personal information, including concerns about:

  • how we collected your personal information;
  • how we used or shared your personal information;
  • how long we retained your information;
  • the security of your information;
  • the accuracy of your information;
  • how we responded to a data protection rights request;
  • a suspected personal data breach; or
  • any other concern relating to our handling of your personal information.

You do not need to use legal terminology or identify a particular law when making a complaint.

3. How to make a complaint

You can make a data protection complaint by completing our Data Protection Complaint Form available on our website.

You may also contact us directly using the contact details provided in our Privacy Policy.

Although we provide a preferred complaints form, you are not required to use it. Data protection complaints may be made through other communication channels, and we will consider complaints regardless of how they are received.

4. What happens when we receive your complaint

When we receive a data protection complaint, we will:

  1. acknowledge receipt of the complaint within 30 days;
  2. review the information provided;
  3. make appropriate enquiries and investigate the circumstances;
  4. contact you if we require further information or clarification;
  5. keep you informed of the progress of the complaint where appropriate; and
  6. communicate the outcome of our investigation without undue delay.

These steps reflect the current requirements set out by the Information Commissioner's Office.

5. Verification of identity

In some circumstances, we may need to verify your identity before providing information or taking action in relation to your complaint.

We will only request information that is reasonably necessary to establish your identity.

6. Complaints made on behalf of another person

If you are making a complaint on behalf of another individual, we may need evidence that you have their authority to act on their behalf.

7. Our response

Once we have investigated your complaint, we will explain the outcome to you and, where appropriate, explain any action we have taken or intend to take.

8. If you remain dissatisfied

If you are dissatisfied with our response, you may raise your concerns with the Information Commissioner's Office (ICO), which is the UK's independent supervisory authority for data protection.

Information Commissioner's Office – Data Protection Complaints

The ICO generally expects individuals to give the organisation concerned an opportunity to resolve the complaint first.

9. Relationship with our Privacy Policy

This policy should be read alongside our Privacy Policy, which explains how Eden Cupcake Floristry collects, uses, stores and protects personal information.

Data Protection Complaint Form