Statutory Complaints Portal

Internal-First Complaints Submission

Submit a Complaint

In line with the Data (Use and Access) Act 2025 (DUAA) and the UK General Data Protection Regulation (UK GDPR), Avalon Data operates an internal-first complaints procedure. Please submit your complaint here before escalating to a regulator. This portal handles:

  • Data protection complaints — issues relating to how we process personal data, including the rights you can exercise under UK GDPR (access, rectification, erasure, objection, etc.)
  • Cookie and electronic marketing complaints — concerns about cookies set on our website, electronic marketing, or related PECR matters
  • Service complaints — complaints about the quality, accuracy, or conduct of our website audit services or any other commercial dealings with us

Your Details

Your Complaint

Your Privacy & This Complaint: Avalon SaaS Ltd Trading as Avalon Data is the controller for the information provided in this form. We collect this data to investigate and resolve your complaint, in line with our internal-first complaints procedure.

Purpose: To investigate your complaint and provide you with a written outcome before any external escalation.

Sensitive Data: Any information regarding your complaint is treated as strictly confidential and is only accessible by the Data Lead at Avalon SaaS Ltd.

Retention: We retain records of complaints for 6 years from the date of resolution. This aligns with the Limitation Act 1980, which sets the standard six-year limitation period for most civil claims, and ensures we can defend ourselves against any future challenge arising from a complaint we have handled.

Your Rights: Submitting this form does not waive any of your statutory rights. For more information about how we handle your data, see our Full Privacy Policy.

What Happens Next

  • Acknowledgement — we will acknowledge receipt of your complaint within a few working days of submission.
  • Investigation — we will investigate your concern thoroughly and proportionately, working with you to clarify any details we need.
  • Written Outcome — we will provide a full written response within one month of acknowledgement, in line with the standard set out in UK GDPR Article 12(3). If your complaint is particularly complex we may extend this by up to two further months and will tell you why.
  • Escalation — if you remain dissatisfied with our response, you have the right to escalate:
    • Data protection / cookie matters: the Information Commissioner's Office (ICO) at ico.org.uk
    • Service complaints: as Avalon Data is not a regulated legal services firm, you may pursue any further claim through the appropriate civil court or alternative dispute resolution process available to you