Privacy Policy

Everything You Need To Know About How I Use Your Data

What I Do With It

All the personal data I hold about you is processed by me in the United Kingdom. Without your permission, I won’t share it with anyone except the trusted suppliers who help me run my business:

Kit:

Sends my newsletter and emails.

LightBlue Software:

Manages my client bookings and projects.

FreeAgent:

Handles my invoicing and accounts.

Google:

Provides website analytics and, if you agree to marketing cookies, advertising.

Exaltis:

Builds and hosts my website.

Gmail:

Provides my business email.

Each supplier only uses your data to provide their service to me and must keep it secure. Client financial records are also shared with my accountant so I can meet my legal and tax obligations. My accountant is bound by professional confidentiality rules and data protection law.

Further Details:

If you’ve agreed to receive marketing emails from me, they’ll be sent through Kit (https://kit.com).

Kit and Google store some data in the United States. When your data goes there, it’s protected by the UK Extension to the EU-US Data Privacy Framework (the ‘UK-US data bridge’), which the UK Government recognises as giving an adequate level of protection. Kit is certified under this framework, and its Data Processing Addendum also includes the UK International Data Transfer Agreement as an extra safeguard. You can read Kit’s data protection documentation at https://kit.com/dpa and check its certification at https://www.dataprivacyframework.gov/list.

LightBlue Software is based in the UK, so your data stays under UK data protection law when they process it. Their data protection documentation is at https://www.lightbluesoftware.com.

Every reasonable step is taken to make sure your personal data is processed securely.

[/vc_column_text][/vc_column][/vc_row]

How Long I Keep It

Personal data is only kept for as long as I need it.

Newsletter Subscribers:

Your details stay on my list until you unsubscribe or ask me to remove you. After that, your email address may be kept on a suppression list so you aren’t added again by mistake. It won’t be used to contact you.

Enquiries:

If you get in touch about working with me but we don’t go ahead, I keep your details for 12 months in case you’d like to pick the conversation back up. After that, they’re deleted.

Clients:

If you work with me, your details and project records are kept for 6 years after the end of the financial year in which our work together finished. This lets me meet my legal and tax obligations to HMRC and deal with any questions about the work. Once that period ends, they’re securely deleted.

You can ask me to delete your data at any time. Where there’s a legal reason to keep some of it, such as tax records, I’ll tell you what I’m keeping and why.

Sensitive Personal Data

Sometimes it helps to let me know about a health condition or disability so I can understand how it affects you. That way, I can make reasonable adjustments to how I work with you. The law calls this ‘special category data’ (you may know it as ‘sensitive personal data’), and I need your explicit consent to process it.

This information is only collected from you and used to support you. It won’t be shared with any third parties, and it’s only kept as long as it’s needed for this purpose or until you tell me you no longer consent.

What Are Your Rights?

Under data protection law, you have a number of rights over your personal data.

Access:

At any point, you can ask me to confirm whether I’m processing your personal data and request a copy of what I hold. This is usually free, and I’ll respond within one month. When searching for your data, I’ll carry out reasonable and proportionate searches.

Correction:

If any of your data is wrong or incomplete, ask me to correct it.

Portability:

Data you’ve given me can be provided to you in a structured, commonly used electronic format, such as an Excel file, so you can move it to another organisation. Where it’s practical, I can also send it directly to them.

Deletion:

You’re entitled to have your data deleted if it’s no longer needed, if there’s no longer a legitimate reason for processing it, or if it has been processed unlawfully. Deletion can also be requested if I’m only processing your data because you consented and you now withdraw that consent.

Objection:

You can object to me processing your personal data. Please note this lets you raise an objection, which I’ll then consider. It doesn’t automatically mean all processing has to stop.

Restriction:

In some situations, you can ask me to limit how I use your data. Examples include while I check the accuracy of data you’ve challenged, or while I consider an objection you’ve raised.

Withdrawing Consent:

Wherever I rely on your consent, you can withdraw it at any time.

How To Complain About The Use Of Your Data

If you’re unhappy with how I’ve handled your personal data, including how I’ve responded to a request about any of the rights above, please tell me first so I can put it right. Email laura@laurapearman.com with ‘Data Complaint’ in the subject line, explaining what happened and what you’d like me to do about it.

Within 30 days, I’ll confirm I’ve received your complaint, although I aim to reply much sooner. Your complaint will then be looked into without undue delay, and I’ll keep you updated if I need more time or more information from you. Once I’ve finished, I’ll write to you with the outcome and any action I’ve taken.

Still not satisfied? You can complain to the Information Commissioner’s Office (ICO). Details of the ICO and its complaints procedure are at https://ico.org.uk.

Why I Need It

I need basic personal data to reply to your enquiries and to deliver any work we agree. If you’ve signed up through www.laurapearman.com, it also lets me keep you up to date with my services.

You can unsubscribe from my emails at any time using the link at the bottom of any email, or by emailing laura@laurapearman.com. Please note that if you do, I won’t be able to send you the updates you asked for.

[/vc_column_text][/vc_column][/vc_row]

My Lawful Basis For Using Your Data

Data protection law says I need a valid reason, called a ‘lawful basis’, for each way I use your personal data. Here are mine.

Newsletter subscribers:

I rely on your consent, which you give when you sign up. Withdraw it at any time by using the unsubscribe link in any email or by emailing me.

Enquiries:

When you get in touch about working with me, I use your details to reply and talk through your needs. The lawful basis here is taking steps at your request before entering into a contract.

Clients:

Your details are used to deliver the work we’ve agreed, which is necessary to perform our contract. Financial records are kept because I have a legal obligation to HMRC.

Website analytics and advertising:

Statistics and marketing cookies are only used with your consent, which you give through the cookie banner. You can withdraw it at any time using the cookie settings link at the bottom of every page.

Sensitive information:

If you choose to share health or other sensitive information so I can make adjustments for you, I’ll only use it with your explicit consent. More detail is in the Sensitive Personal Data section below.

Cookies And Website Analytics

Cookies are small files saved on your device when you visit a website. When you first arrive, a cookie banner lets you choose which ones to accept. Change your choice at any time using the cookie settings link at the bottom of every page.

Essential Cookies:

These keep the website working properly and securely, and they remember your cookie choices. The site can’t run without them, so they don’t need your consent.

Statistics Cookies:

With your agreement, I use Google Analytics to collect basic statistics about how people use my website, such as which pages are visited and how people found the site. This helps me improve the website.

Marketing Cookies:

If you agree, I may use Google Ads cookies to see whether my adverts lead to enquiries and to show my adverts to people who have visited my website before. Google may also use this data for its own purposes, in line with its privacy policy at https://policies.google.com/privacy.

Statistics and marketing cookies are only set if you agree to them. Saying no won’t affect how this website works for you.

What I Do With It

All the personal data I hold about you is processed by me in the United Kingdom. Without your permission, I won’t share it with anyone except the trusted suppliers who help me run my business:

Kit:

Sends my newsletter and emails.

LightBlue Software:

Manages my client bookings and projects.

FreeAgent:

Handles my invoicing and accounts.

Google:

Provides website analytics and, if you agree to marketing cookies, advertising.

Exaltis:

Builds and hosts my website.

Gmail:

Provides my business email.

Each supplier only uses your data to provide their service to me and must keep it secure. Client financial records are also shared with my accountant so I can meet my legal and tax obligations. My accountant is bound by professional confidentiality rules and data protection law.

Further Details:

If you’ve agreed to receive marketing emails from me, they’ll be sent through Kit (https://kit.com).

Kit and Google store some data in the United States. When your data goes there, it’s protected by the UK Extension to the EU-US Data Privacy Framework (the ‘UK-US data bridge’), which the UK Government recognises as giving an adequate level of protection. Kit is certified under this framework, and its Data Processing Addendum also includes the UK International Data Transfer Agreement as an extra safeguard. You can read Kit’s data protection documentation at https://kit.com/dpa and check its certification at https://www.dataprivacyframework.gov/list.

LightBlue Software is based in the UK, so your data stays under UK data protection law when they process it. Their data protection documentation is at https://www.lightbluesoftware.com.

Every reasonable step is taken to make sure your personal data is processed securely.

How Long I Keep It

Personal data is only kept for as long as I need it.

Newsletter Subscribers:

Your details stay on my list until you unsubscribe or ask me to remove you. After that, your email address may be kept on a suppression list so you aren’t added again by mistake. It won’t be used to contact you.

Enquiries:

If you get in touch about working with me but we don’t go ahead, I keep your details for 12 months in case you’d like to pick the conversation back up. After that, they’re deleted.

Clients:

If you work with me, your details and project records are kept for 6 years after the end of the financial year in which our work together finished. This lets me meet my legal and tax obligations to HMRC and deal with any questions about the work. Once that period ends, they’re securely deleted.

You can ask me to delete your data at any time. Where there’s a legal reason to keep some of it, such as tax records, I’ll tell you what I’m keeping and why.

Sensitive Personal Data

Sometimes it helps to let me know about a health condition or disability so I can understand how it affects you. That way, I can make reasonable adjustments to how I work with you. The law calls this ‘special category data’ (you may know it as ‘sensitive personal data’), and I need your explicit consent to process it.

This information is only collected from you and used to support you. It won’t be shared with any third parties, and it’s only kept as long as it’s needed for this purpose or until you tell me you no longer consent.

What Are Your Rights?

Under data protection law, you have a number of rights over your personal data.

Access:

At any point, you can ask me to confirm whether I’m processing your personal data and request a copy of what I hold. This is usually free, and I’ll respond within one month. When searching for your data, I’ll carry out reasonable and proportionate searches.

Correction:

If any of your data is wrong or incomplete, ask me to correct it.

Portability:

Data you’ve given me can be provided to you in a structured, commonly used electronic format, such as an Excel file, so you can move it to another organisation. Where it’s practical, I can also send it directly to them.

Deletion:

You’re entitled to have your data deleted if it’s no longer needed, if there’s no longer a legitimate reason for processing it, or if it has been processed unlawfully. Deletion can also be requested if I’m only processing your data because you consented and you now withdraw that consent.

Objection:

You can object to me processing your personal data. Please note this lets you raise an objection, which I’ll then consider. It doesn’t automatically mean all processing has to stop.

Restriction:

In some situations, you can ask me to limit how I use your data. Examples include while I check the accuracy of data you’ve challenged, or while I consider an objection you’ve raised.

Withdrawing Consent:

Wherever I rely on your consent, you can withdraw it at any time.

How To Complain About The Use Of Your Data

If you’re unhappy with how I’ve handled your personal data, including how I’ve responded to a request about any of the rights above, please tell me first so I can put it right. Email laura@laurapearman.com with ‘Data Complaint’ in the subject line, explaining what happened and what you’d like me to do about it.

Within 30 days, I’ll confirm I’ve received your complaint, although I aim to reply much sooner. Your complaint will then be looked into without undue delay, and I’ll keep you updated if I need more time or more information from you. Once I’ve finished, I’ll write to you with the outcome and any action I’ve taken.

Still not satisfied? You can complain to the Information Commissioner’s Office (ICO). Details of the ICO and its complaints procedure are at https://ico.org.uk.

What I Need

This privacy policy explains how Laura Pearman Creative uses and protects any personal data you share when you use this website or work with me. As the business that decides how your data is used, Laura Pearman Creative is known as the ‘Controller’. Laura Pearman Creative is registered with the Information Commissioner’s Office under registration number ZA770141.

Your privacy matters to me. If I ask you for information that could identify you, it will only be used in line with this policy.

From time to time I may update this policy, so it’s worth checking this page now and then. This version is effective from 5th October 2026.

Unless we agree otherwise, I only collect basic personal data about you, such as your name, email address, business name and your interests or preferences. Special categories of personal data (often called ‘sensitive personal data’) are not usually included.

Why I Need It

I need basic personal data to reply to your enquiries and to deliver any work we agree. If you’ve signed up through www.laurapearman.com, it also lets me keep you up to date with my services.

You can unsubscribe from my emails at any time using the link at the bottom of any email, or by emailing laura@laurapearman.com. Please note that if you do, I won’t be able to send you the updates you asked for.

My Lawful Basis For Using Your Data

Data protection law says I need a valid reason, called a ‘lawful basis’, for each way I use your personal data. Here are mine.

Newsletter subscribers:

I rely on your consent, which you give when you sign up. Withdraw it at any time by using the unsubscribe link in any email or by emailing me.

Enquiries:

When you get in touch about working with me, I use your details to reply and talk through your needs. The lawful basis here is taking steps at your request before entering into a contract.

Clients:

Your details are used to deliver the work we’ve agreed, which is necessary to perform our contract. Financial records are kept because I have a legal obligation to HMRC.

Website analytics and advertising:

Statistics and marketing cookies are only used with your consent, which you give through the cookie banner. You can withdraw it at any time using the cookie settings link at the bottom of every page.

Sensitive information:

If you choose to share health or other sensitive information so I can make adjustments for you, I’ll only use it with your explicit consent. More detail is in the Sensitive Personal Data section below.

Cookies And Website Analytics

Cookies are small files saved on your device when you visit a website. When you first arrive, a cookie banner lets you choose which ones to accept. Change your choice at any time using the cookie settings link at the bottom of every page.

Essential Cookies:

These keep the website working properly and securely, and they remember your cookie choices. The site can’t run without them, so they don’t need your consent.

Statistics Cookies:

With your agreement, I use Google Analytics to collect basic statistics about how people use my website, such as which pages are visited and how people found the site. This helps me improve the website.

Marketing Cookies:

If you agree, I may use Google Ads cookies to see whether my adverts lead to enquiries and to show my adverts to people who have visited my website before. Google may also use this data for its own purposes, in line with its privacy policy at https://policies.google.com/privacy.

Statistics and marketing cookies are only set if you agree to them. Saying no won’t affect how this website works for you.

What I Do With It

All the personal data I hold about you is processed by me in the United Kingdom. Without your permission, I won’t share it with anyone except the trusted suppliers who help me run my business:

Kit:

Sends my newsletter and emails.

LightBlue Software:

Manages my client bookings and projects.

FreeAgent:

Handles my invoicing and accounts.

Google:

Provides website analytics and, if you agree to marketing cookies, advertising.

Exaltis:

Builds and hosts my website.

Gmail:

Provides my business email.

Each supplier only uses your data to provide their service to me and must keep it secure. Client financial records are also shared with my accountant so I can meet my legal and tax obligations. My accountant is bound by professional confidentiality rules and data protection law.

Further Details:

If you’ve agreed to receive marketing emails from me, they’ll be sent through Kit (https://kit.com).

Kit and Google store some data in the United States. When your data goes there, it’s protected by the UK Extension to the EU-US Data Privacy Framework (the ‘UK-US data bridge’), which the UK Government recognises as giving an adequate level of protection. Kit is certified under this framework, and its Data Processing Addendum also includes the UK International Data Transfer Agreement as an extra safeguard. You can read Kit’s data protection documentation at https://kit.com/dpa and check its certification at https://www.dataprivacyframework.gov/list.

LightBlue Software is based in the UK, so your data stays under UK data protection law when they process it. Their data protection documentation is at https://www.lightbluesoftware.com.

Every reasonable step is taken to make sure your personal data is processed securely.

How Long I Keep It

Personal data is only kept for as long as I need it.

Newsletter Subscribers:

Your details stay on my list until you unsubscribe or ask me to remove you. After that, your email address may be kept on a suppression list so you aren’t added again by mistake. It won’t be used to contact you.

Enquiries:

If you get in touch about working with me but we don’t go ahead, I keep your details for 12 months in case you’d like to pick the conversation back up. After that, they’re deleted.

Clients:

If you work with me, your details and project records are kept for 6 years after the end of the financial year in which our work together finished. This lets me meet my legal and tax obligations to HMRC and deal with any questions about the work. Once that period ends, they’re securely deleted.

You can ask me to delete your data at any time. Where there’s a legal reason to keep some of it, such as tax records, I’ll tell you what I’m keeping and why.

Sensitive Personal Data

Sometimes it helps to let me know about a health condition or disability so I can understand how it affects you. That way, I can make reasonable adjustments to how I work with you. The law calls this ‘special category data’ (you may know it as ‘sensitive personal data’), and I need your explicit consent to process it.

This information is only collected from you and used to support you. It won’t be shared with any third parties, and it’s only kept as long as it’s needed for this purpose or until you tell me you no longer consent.

What Are Your Rights?

Under data protection law, you have a number of rights over your personal data.

Access:

At any point, you can ask me to confirm whether I’m processing your personal data and request a copy of what I hold. This is usually free, and I’ll respond within one month. When searching for your data, I’ll carry out reasonable and proportionate searches.

Correction:

If any of your data is wrong or incomplete, ask me to correct it.

Portability:

Data you’ve given me can be provided to you in a structured, commonly used electronic format, such as an Excel file, so you can move it to another organisation. Where it’s practical, I can also send it directly to them.

Deletion:

You’re entitled to have your data deleted if it’s no longer needed, if there’s no longer a legitimate reason for processing it, or if it has been processed unlawfully. Deletion can also be requested if I’m only processing your data because you consented and you now withdraw that consent.

Objection:

You can object to me processing your personal data. Please note this lets you raise an objection, which I’ll then consider. It doesn’t automatically mean all processing has to stop.

Restriction:

In some situations, you can ask me to limit how I use your data. Examples include while I check the accuracy of data you’ve challenged, or while I consider an objection you’ve raised.

Withdrawing Consent:

Wherever I rely on your consent, you can withdraw it at any time.

How To Complain About The Use Of Your Data

If you’re unhappy with how I’ve handled your personal data, including how I’ve responded to a request about any of the rights above, please tell me first so I can put it right. Email laura@laurapearman.com with ‘Data Complaint’ in the subject line, explaining what happened and what you’d like me to do about it.

Within 30 days, I’ll confirm I’ve received your complaint, although I aim to reply much sooner. Your complaint will then be looked into without undue delay, and I’ll keep you updated if I need more time or more information from you. Once I’ve finished, I’ll write to you with the outcome and any action I’ve taken.

Still not satisfied? You can complain to the Information Commissioner’s Office (ICO). Details of the ICO and its complaints procedure are at https://ico.org.uk.

What I Need

This privacy policy explains how Laura Pearman Creative uses and protects any personal data you share when you use this website or work with me. As the business that decides how your data is used, Laura Pearman Creative is known as the ‘Controller’. Laura Pearman Creative is registered with the Information Commissioner’s Office under registration number ZA770141.

Your privacy matters to me. If I ask you for information that could identify you, it will only be used in line with this policy.

From time to time I may update this policy, so it’s worth checking this page now and then. This version is effective from 5th October 2026.

Unless we agree otherwise, I only collect basic personal data about you, such as your name, email address, business name and your interests or preferences. Special categories of personal data (often called ‘sensitive personal data’) are not usually included.

Why I Need It

I need basic personal data to reply to your enquiries and to deliver any work we agree. If you’ve signed up through www.laurapearman.com, it also lets me keep you up to date with my services.

You can unsubscribe from my emails at any time using the link at the bottom of any email, or by emailing laura@laurapearman.com. Please note that if you do, I won’t be able to send you the updates you asked for.

My Lawful Basis For Using Your Data

Data protection law says I need a valid reason, called a ‘lawful basis’, for each way I use your personal data. Here are mine.

Newsletter subscribers:

I rely on your consent, which you give when you sign up. Withdraw it at any time by using the unsubscribe link in any email or by emailing me.

Enquiries:

When you get in touch about working with me, I use your details to reply and talk through your needs. The lawful basis here is taking steps at your request before entering into a contract.

Clients:

Your details are used to deliver the work we’ve agreed, which is necessary to perform our contract. Financial records are kept because I have a legal obligation to HMRC.

Website analytics and advertising:

Statistics and marketing cookies are only used with your consent, which you give through the cookie banner. You can withdraw it at any time using the cookie settings link at the bottom of every page.

Sensitive information:

If you choose to share health or other sensitive information so I can make adjustments for you, I’ll only use it with your explicit consent. More detail is in the Sensitive Personal Data section below.

Cookies And Website Analytics

Cookies are small files saved on your device when you visit a website. When you first arrive, a cookie banner lets you choose which ones to accept. Change your choice at any time using the cookie settings link at the bottom of every page.

Essential Cookies:

These keep the website working properly and securely, and they remember your cookie choices. The site can’t run without them, so they don’t need your consent.

Statistics Cookies:

With your agreement, I use Google Analytics to collect basic statistics about how people use my website, such as which pages are visited and how people found the site. This helps me improve the website.

Marketing Cookies:

If you agree, I may use Google Ads cookies to see whether my adverts lead to enquiries and to show my adverts to people who have visited my website before. Google may also use this data for its own purposes, in line with its privacy policy at https://policies.google.com/privacy.

Statistics and marketing cookies are only set if you agree to them. Saying no won’t affect how this website works for you.

What I Do With It

All the personal data I hold about you is processed by me in the United Kingdom. Without your permission, I won’t share it with anyone except the trusted suppliers who help me run my business:

Kit:

Sends my newsletter and emails.

LightBlue Software:

Manages my client bookings and projects.

FreeAgent:

Handles my invoicing and accounts.

Google:

Provides website analytics and, if you agree to marketing cookies, advertising.

Exaltis:

Builds and hosts my website.

Gmail:

Provides my business email.

Each supplier only uses your data to provide their service to me and must keep it secure. Client financial records are also shared with my accountant so I can meet my legal and tax obligations. My accountant is bound by professional confidentiality rules and data protection law.

Further Details:

If you’ve agreed to receive marketing emails from me, they’ll be sent through Kit (https://kit.com).

Kit and Google store some data in the United States. When your data goes there, it’s protected by the UK Extension to the EU-US Data Privacy Framework (the ‘UK-US data bridge’), which the UK Government recognises as giving an adequate level of protection. Kit is certified under this framework, and its Data Processing Addendum also includes the UK International Data Transfer Agreement as an extra safeguard. You can read Kit’s data protection documentation at https://kit.com/dpa and check its certification at https://www.dataprivacyframework.gov/list.

LightBlue Software is based in the UK, so your data stays under UK data protection law when they process it. Their data protection documentation is at https://www.lightbluesoftware.com.

Every reasonable step is taken to make sure your personal data is processed securely.

How Long I Keep It

Personal data is only kept for as long as I need it.

Newsletter Subscribers:

Your details stay on my list until you unsubscribe or ask me to remove you. After that, your email address may be kept on a suppression list so you aren’t added again by mistake. It won’t be used to contact you.

Enquiries:

If you get in touch about working with me but we don’t go ahead, I keep your details for 12 months in case you’d like to pick the conversation back up. After that, they’re deleted.

Clients:

If you work with me, your details and project records are kept for 6 years after the end of the financial year in which our work together finished. This lets me meet my legal and tax obligations to HMRC and deal with any questions about the work. Once that period ends, they’re securely deleted.

You can ask me to delete your data at any time. Where there’s a legal reason to keep some of it, such as tax records, I’ll tell you what I’m keeping and why.

Sensitive Personal Data

Sometimes it helps to let me know about a health condition or disability so I can understand how it affects you. That way, I can make reasonable adjustments to how I work with you. The law calls this ‘special category data’ (you may know it as ‘sensitive personal data’), and I need your explicit consent to process it.

This information is only collected from you and used to support you. It won’t be shared with any third parties, and it’s only kept as long as it’s needed for this purpose or until you tell me you no longer consent.

What Are Your Rights?

Under data protection law, you have a number of rights over your personal data.

Access:

At any point, you can ask me to confirm whether I’m processing your personal data and request a copy of what I hold. This is usually free, and I’ll respond within one month. When searching for your data, I’ll carry out reasonable and proportionate searches.

Correction:

If any of your data is wrong or incomplete, ask me to correct it.

Portability:

Data you’ve given me can be provided to you in a structured, commonly used electronic format, such as an Excel file, so you can move it to another organisation. Where it’s practical, I can also send it directly to them.

Deletion:

You’re entitled to have your data deleted if it’s no longer needed, if there’s no longer a legitimate reason for processing it, or if it has been processed unlawfully. Deletion can also be requested if I’m only processing your data because you consented and you now withdraw that consent.

Objection:

You can object to me processing your personal data. Please note this lets you raise an objection, which I’ll then consider. It doesn’t automatically mean all processing has to stop.

Restriction:

In some situations, you can ask me to limit how I use your data. Examples include while I check the accuracy of data you’ve challenged, or while I consider an objection you’ve raised.

Withdrawing Consent:

Wherever I rely on your consent, you can withdraw it at any time.

How To Complain About The Use Of Your Data

If you’re unhappy with how I’ve handled your personal data, including how I’ve responded to a request about any of the rights above, please tell me first so I can put it right. Email laura@laurapearman.com with ‘Data Complaint’ in the subject line, explaining what happened and what you’d like me to do about it.

Within 30 days, I’ll confirm I’ve received your complaint, although I aim to reply much sooner. Your complaint will then be looked into without undue delay, and I’ll keep you updated if I need more time or more information from you. Once I’ve finished, I’ll write to you with the outcome and any action I’ve taken.

Still not satisfied? You can complain to the Information Commissioner’s Office (ICO). Details of the ICO and its complaints procedure are at https://ico.org.uk.