Data Protection Complaints Procedure

Effective: October 2026

DMForge is committed to handling personal data fairly, lawfully, and transparently. In compliance with the Data (Use and Access) Act 2025 and the UK General Data Protection Regulation (UK GDPR), this document sets out our formal complaints process for anyone who believes their personal data has been mishandled or whose data protection rights have not been respected.

1. How to Make a Complaint

You can submit a formal data protection complaint free of charge by contacting:

Please include:

2. Guaranteed 30-Day Acknowledgement

In accordance with the statutory requirement of the Data (Use and Access) Act 2025:

3. Our Investigation Procedure

Upon acknowledging your complaint, we follow a structured review process:

  1. Fact-finding: We examine system logs, data processing records, and third-party processor interactions (e.g. Firebase, Stripe, Meta Graph API).
  2. Assessment: We assess the processing against the lawful bases, retention policies, and security controls defined under UK GDPR and our Privacy Policy.
  3. Remediation: If we identify any deficiency or non-compliance, we immediately implement remedial measures (such as data rectification, erasure, or security hardening).
  4. Formal Outcome Notice: We issue a written decision explaining our findings, the actions taken, and the reasoning behind our determination without undue delay.

4. Escalation to the Information Commissioner's Office (ICO)

If you are dissatisfied with our response, or if you prefer to raise your concern directly with the supervisory authority, you have the right to lodge a complaint with the UK Information Commissioner's Office:

Last updated: October 2026 · Tibor Rames trading as DMForge · Contact: complaints@dmforge.org