★★★★★ ICO registered — ZC131659

Data Protection Complaints Process.

We take your data privacy seriously. Here’s how to raise a concern and what happens next.

ICORegistered
2009Data protection compliance
UKGDPR compliant
5★Trustpilot rating

1. Our commitment

Iprecious is a trading name of Mad Tech Heads LTD, a company registered in England and Wales (company number 14440918), with its registered office at Office 7622, 182-184 High Street North, East Ham, London, E6 2JA. We are committed to handling your personal data responsibly and in line with the UK GDPR and the Data Protection Act 2018.

If you believe we have not handled your personal data correctly, you have the right to complain. This page explains how to raise a complaint with us, what you can expect from us, and how to escalate your complaint if you are not satisfied.

2. How to raise a complaint

Under the Data (Use and Access) Act 2025 (DUAA), you have a statutory right to complain directly to us if you believe we have infringed the UK GDPR in our processing of your personal data. We encourage you to raise your concern with us first — the ICO expects this before escalating to them.

You can raise a data protection complaint through any of the following channels:

  • Email: info@iprecious.co.uk (you can also use our contact form)
  • Phone: 020 3432 4086
  • Post: Data Protection, Mad Tech Heads LTD, Office 7622, 182-184 High Street North, East Ham, London, E6 2JA
  • In person or verbally: you may make a complaint verbally over the phone or in person — please make it clear you wish to make a data protection complaint so we can handle it correctly

To help us look into your complaint quickly, please include:

  • Your name and the best way to contact you
  • A clear description of your concern and what has happened
  • Any relevant dates, reference numbers, or copies of correspondence
  • What you would like us to do to put things right

You do not need to use any specific form or wording — if you contact us about a data protection concern, we will treat it as a complaint under this process.

3. What happens next — our legal obligations

Under section 164A of the Data Protection Act 2018 (inserted by the DUAA 2025), we are legally required to:

  • Acknowledge your complaint within 30 days of receiving it. We aim to acknowledge within 5 working days.
  • Investigate your complaint fairly and without undue delay, making appropriate enquiries into the issues raised.
  • Keep you informed of progress throughout the investigation.
  • Provide a full written outcome within 30 calendar days where possible. If your complaint is complex and we need longer, we will explain why and give you a revised timeline.
  • Explain our findings, any actions taken, and your right to escalate to the ICO if you remain unsatisfied.

4. Escalation to the Information Commissioner's Office (ICO)

If you are not satisfied with our response, or if 30 days have passed without acknowledgement, you have the right to escalate your complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. The ICO will normally expect you to have raised your complaint with us first.

You can contact the ICO as follows:

5. Our ICO registration

We are registered with the Information Commissioner's Office under registration number ZC131659. You can verify our registration on the ICO's public register at https://ico.org.uk/ESDWebPages/Search.

6. Your other rights under UK GDPR

Alongside the right to complain, the UK GDPR gives you the following rights over your personal data:

  • The right to be informed about how we use your data — see our Privacy Policy
  • The right of access to the personal data we hold about you (subject access request)
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure of your data in certain circumstances (“right to be forgotten”)
  • The right to restrict or object to our processing of your data
  • The right to data portability
  • Rights relating to automated decision-making — we do not use automated decision-making or profiling

If you wish to exercise any of these rights, please contact us using the details in section 2 above. We will respond within one month. Under the DUAA, we may pause this timeframe to verify your identity if needed.

Last updated: 3 July 2026. This process complies with section 164A of the Data Protection Act 2018 (inserted by the Data (Use and Access) Act 2025) and ICO guidance. Reviewed annually.