Help, privacy requests and complaints

You may complain if you believe Acta's handling of your personal information infringes the UK GDPR or Part 3 of the Data Protection Act 2018.

1. Submit: use the electronic form below or contact the privacy address. Explain what happened and the resolution sought.
2. Acknowledgement: the form immediately supplies a reference. Acta will acknowledge any complaint within 30 days of receipt.
3. Assessment: Acta will make proportionate enquiries, identify the controller responsible and request only identity information reasonably necessary.
4. Progress: Acta will act without undue delay and keep you informed where investigation remains open.
5. Outcome: Acta will explain its findings, action taken and any right to challenge the outcome or complain to the ICO.

You may also complain to the Information Commissioner's Office. Contacting Acta first does not remove your ability to approach the ICO.

• Access: obtain confirmation, a copy of your personal information and required supplementary information.
• Rectification: correct inaccurate information and complete information that is materially incomplete.
• Erasure: request deletion where information is no longer required or another legal ground applies.
• Restriction: ask Acta to limit use while accuracy, lawfulness or an objection is considered.
• Objection: object to processing based on legitimate interests, including associated product analytics.
• Portability: receive eligible information you supplied in a structured, commonly used and machine-readable format.
• Consent: withdraw consent for an optional activity without affecting earlier lawful processing.
• Automated processing: request meaningful human review where a solely automated significant decision is involved. Acta's ordinary triage outputs are recommendations reviewed by users.

Acta normally responds within the applicable period of one calendar month beginning with the latest of receiving the request, receiving identity information reasonably requested under Article 12(6), or receiving any lawful fee. For an access request that reasonably needs clarification, the clarification period does not count toward the deadline. A two-month extension may apply to complex or multiple requests; Acta will explain any extension within the initial month.

Rights are not absolute. If Acta cannot comply fully, it will explain the legal reason and complaint route. When Acta processes content for a customer controller, Acta may refer the request to that organisation and assist it under the processing agreement.

Use one form per issue. Provide enough detail to locate the information, but do not include passwords, identity documents, bank details or unrelated email content. Acta will ask separately if proportionate identity evidence is required.

• Signed-in users can remove stored workspace data with Delete my data.
• Forwarded intake email and workspace data can be deleted through an account request.
• Signing out ends the session but does not delete the workspace.