Submitting a Data Protection Complaint
If you have concerns about how we have handled your personal information, you can submit a data protection complaint to us. You do not need to use legal terms—simply tell us what has happened and why you are concerned. We will consider your complaint and respond as soon as possible.
While we aim to resolve complaints directly, you also have the right to raise your concerns with the Information Commissioner’s Office if you are not satisfied with our response.
You can find more information about the process on the ICO website at Make a complaint.
How to contact us
There are several ways you can submit a data protection complaint to us:
- by emailing us at dataprotection@sepa.org.uk
- by completing our Data Protection Complaint Form
- by post. Please send your complaint, marked for the attention of the Data Protection Officer, to: Angus Smith Building, 6 Parklands Avenue, Eurocentral, Holytown, ML1 4WQ
- by telephone. You can contact us Monday to Friday between 8am and 6pm, on 0300 099 6699. Please ask to speak to the Data Protection Officer.
What information do we need
When submitting a complaint, please provide as much detail as possible as this will help us address your concerns promptly. Where possible, include:
- Name
- Address*
- Email address
- Telephone number*
- Whether you are acting on behalf of someone else, and if so the nature of your relationship to them
- What your complaint is about
- When did this issue occur
- What outcome you are seeking
* please provide this information when it is your preferred form of contact
What to expect from us
We will acknowledge your complaint as soon as possible, and within 30 days of receipt.
There may be occasions when we need to verify your identity before we can investigate your complaint. If this is the case, we will let you know as quickly as possible, and tell you what you need to provide.
What we do with your personal data
We will use the information you provide to investigate and respond to your data protection complaint. Your personal data will be handled in accordance with applicable data protection legislation. This may include sharing information internally with relevant teams to enable investigation of your complaint. We will retain records of your complaint and the outcome for the purposes of demonstrating compliance and improving services.
We will handle your complaint in confidence and in line with data protection legislation, sharing information only where necessary to investigate and resolve the issue.