1. Purpose & scope
This procedure applies to any complaint from an individual (ticket buyer, exhibitor contact, newsletter subscriber, or website visitor) about how we have collected, used, stored, shared, or protected their personal data.
2. How to make a complaint
You can raise a data protection complaint by contacting us at:
- Email: info@bespoked.cc
- Post: Bespoked Events Ltd, Unit 3, Phoenix Business Park, Continental Approach, Westwood, Kent, CT9 4HL - marked "Data Protection Complaint"
Please provide as much detail as possible, including your name, contact details, and a description of your concern, to help us investigate promptly.
3. What happens next
- Acknowledgement: we will acknowledge receipt of your complaint within 5 working days.
- Investigation: our Data Protection Lead will review the complaint, which may involve reviewing our records and consulting relevant staff or processors.
- Response: we aim to provide a full response within 30 calendar days of receipt, in line with UK GDPR timescales. If the matter is complex and requires more time, we will let you know and explain the delay.
- Outcome: our response will explain our findings and, where applicable, any steps we will take to resolve the issue (for example, correcting or deleting data, or changing a process).
4. How we record complaints
We log all data protection complaints received, including the date, nature of the complaint, the individual's details, actions taken, and the outcome. This log is reviewed periodically to identify any recurring issues and to demonstrate our compliance with data protection law.
Complaint records are retained for 3 years and stored securely in accordance with our internal data retention policy.
5. If you are not satisfied with our response
If you remain unhappy after receiving our response, you have the right to escalate your complaint to the relevant supervisory authority:
- UK: Information Commissioner's Office (ICO) - ico.org.uk, helpline 0303 123 1113.
- EU / Germany: your local data protection authority, or the German Federal Commissioner for Data Protection and Freedom of Information (BfDI), or the relevant state (Länder) authority.
- Japan: the Personal Information Protection Commission (PPC).
You are not required to complain to us first before contacting a supervisory authority, but we would welcome the opportunity to resolve your concern directly.
6. Review of this procedure
This procedure is reviewed at least annually, or sooner if required by changes in law, to ensure it remains effective and compliant with applicable data protection legislation, including UK GDPR, PECR, EU GDPR, and APPI as relevant.
7. Contact
Bespoked Events Ltd, Unit 3, Phoenix Business Park, Continental Approach, Westwood, Kent, CT9 4HL. Email: info@bespoked.cc.