Complain about how we handle your data
This is the electronic complaint form required by the Data (Use and Access) Act 2025, which has applied since 19 June 2026. It also serves Article 77 GDPR. You do not need an account and you do not need to sign in — including if you are complaining that we hold data about you at all.
What happens next, with dates. We acknowledge your complaint by email within 30 days. That period is statutory, and we normally acknowledge within minutes because the acknowledgement is sent by the same step that records the complaint.
We then look into it and tell you the outcome, normally within 90 days. That figure is our own commitment rather than a legal limit — the Act sets no maximum for the outcome. If it is going to take longer we will tell you why before that point, not afterwards.
You do not have to use this form first. You can complain to the Information Commissioner's Office at any time, and if you are in the EU to your own supervisory authority. Using this procedure does not affect that right and is not a precondition for it.
Which data this covers
We are the controller for your account, your billing records and what this website records — so a complaint about any of those is one we answer ourselves.
For the job records, client details and photographs our customers keep inside Jobdeck, the customer is the controller and we are the processor. If your complaint is about data one of our customers holds about you, we forward it to them and tell you that we have. We do not answer on their behalf: a processor that acts on its own initiative has gone outside its instructions, which is itself a breach.
If you would rather write
Email hello@tonic-seo.com or write to Tonic SEO Ltd, London, United Kingdom. A complaint that arrives by post or by email is entered into the same register with the same 30-day clock, running from the day it arrived rather than the day somebody typed it in.