This procedure is published in accordance with the Data (Use and Access) Act 2025.
Data Protection Complaints
Last reviewed: September 2026
Contents
1. Scope
This procedure covers complaints about how RICBTC, as a data controller, has handled your personal data. It does not cover complaints about the professional conduct of a registered therapist, which are dealt with under the complaints procedure.
2. How to submit a data protection complaint
Complaints must be made in writing, setting out the personal data concerned and the nature of your concern.
A dedicated contact address for data protection complaints is in development.
3. Acknowledgement
RICBTC will acknowledge a data protection complaint within thirty days of receiving it.
4. Investigation
RICBTC will investigate the complaint without undue delay, and will contact you if further information is needed to complete the investigation.
5. Communicating the outcome
You will be told the outcome of the investigation in writing, including any action taken as a result.
6. Right to escalate to the Information Commissioner’s Office
If you are not satisfied with the outcome, you have the right to complain to the Information Commissioner’s Office (ICO).
- Website: ico.org.uk
- Helpline: 0303 123 1113
7. Review
This procedure is reviewed periodically to reflect changes in data protection law and guidance.