Your Right to Raise a Concern
Under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025, you have the right to raise a concern about how Ecohomes Care Ltd collects, uses, stores or shares your personal data.
Ecohomes Care Ltd is the Data Controller for all personal information we hold about our clients, their families, and our staff. We take our data protection responsibilities seriously and are committed to handling all concerns promptly and fairly.
ICO Registration: Ecohomes Care Ltd is registered with the Information Commissioner's Office (ICO) as required by law. Our ICO registration number ZC133741.
What You Can Raise a Concern About
You can raise a data protection concern if you believe we have:
- Collected personal data about you without a lawful basis
- Used your data for a purpose you were not told about
- Shared your data with someone without your knowledge or consent
- Kept your data for longer than necessary
- Failed to keep your data secure
- Not responded to a request to access, correct or delete your data
- Used your data to make an automated decision that affected you
- Any other breach of your data protection rights
How to Contact Us
You can raise a data protection concern using any of the following methods. Please include "Data Protection Concern" in the subject or heading so we can handle it correctly.
Subject: "Data Protection Concern"
Mon–Fri, 9:00am – 5:00pm
Fort Dunlop, Unit 115-119
Fort Parkway, Birmingham B24 9FE
Mark it as a data protection concern
What Happens Next — Our 5-Step Process
Once we receive your concern, we follow this process. We are legally required to respond within 30 calendar days under the Data (Use and Access) Act 2025.
Acknowledgement — within 5 working days
We will acknowledge receipt of your concern in writing, provide a reference number, and confirm the expected response date.
Investigation — within 30 calendar days
Our Director (or designated Data Protection lead) will review what personal data we hold about you, how it was collected, stored and used, and whether any breach has occurred. We may contact you for further information during this stage.
Response — within 30 calendar days
We will send you a written response explaining our findings. If we have breached your data rights, we will explain what we are doing to put it right. If we do not uphold your concern, we will explain why clearly.
Remedial Action (if required)
Where a breach is confirmed, we will take immediate steps to correct it — this may include deleting data, updating our systems, retraining staff, or notifying the ICO where legally required.
ICO Escalation (if not resolved)
If you are not satisfied with our response, you have the right to escalate your complaint to the Information Commissioner's Office (ICO) — see details below.
⚠ Legal requirement: We are legally obliged to respond to your data protection concern within 30 calendar days under the Data (Use and Access) Act 2025. If you do not receive a response within this period, you may escalate directly to the ICO.
Your Data Rights
As well as raising a concern, you have the following individual rights under UK GDPR which you can exercise at any time:
Right of Access (Subject Access Request)
You can request a copy of all personal data we hold about you. We will respond within one month, free of charge.
Right to Rectification
You can ask us to correct any inaccurate or incomplete information we hold about you.
Right to Erasure
You can ask us to delete your data where it is no longer necessary, or where you withdraw consent — subject to any legal retention requirements.
Right to Restrict Processing
You can ask us to pause processing your data while a dispute is being considered.
Right to Object
You can object to us using your data for direct marketing purposes. We must stop immediately with no exceptions.
Right to Data Portability
Where we process your data based on consent or contract, you can ask for it in a machine-readable format.
To exercise any of these rights, contact us using the details above. We will respond within one calendar month.
Escalating to the ICO
If you are not satisfied with how we have handled your concern, or if we have failed to respond within 30 days, you have the right to complain directly to the Information Commissioner's Office (ICO) — the UK's independent data protection authority.
Mon–Fri, 9am–5pm
The ICO does not charge a fee to make a complaint. You should normally try to resolve the issue with us first before contacting the ICO, but you are free to contact them at any time.
How We Keep Your Data Safe
Ecohomes Care Ltd takes the following measures to protect personal data:
- All digital systems are access-controlled with secure login credentials
- Client health data is never stored on our public website
- All third-party suppliers we use have Data Processing Agreements in place
- Staff receive data protection training before working with clients
- Our website uses HTTPS encryption and GDPR-compliant cookie consent
- We are registered with the Information Commissioner's Office (ICO)
- This policy is reviewed annually and updated to reflect changes in the law
For full details of how we collect and use personal data, please read our Privacy Policy.
This procedure is maintained in accordance with the UK GDPR, Data Protection Act 2018, and Data (Use and Access) Act 2025. Last reviewed: July 2026. Ecohomes Care Ltd, Company No. 15230160, registered in England & Wales.