Shufti Pro Limited · Data Protection Office

Data Protection Complaint Form

Use this form to make a UK data protection complaint about how Shufti handled your personal information. We aim to acknowledge within 5 working days and respond substantively within one calendar month.

Form Complaint · v2.0 Email [email protected]

Form sections

·How to submit
A.About You
B.Your Complaint
C.Evidence (Optional)
D.Accessibility (Optional)
E.Privacy Information
·Submit

·How to Submit This Form

Online (recommended)	Submit this form below — jump to submit
Email	[email protected]
Post	Data Protection Office, Shufti Pro Limited, Coppergate House, 10 Whites Row, London E1 7NF

Before submitting: We encourage you to raise your concern with us informally first. Many concerns can be resolved quickly. If you have already done so and remain dissatisfied, please complete this form.

If we cannot resolve your complaint: You have the right to escalate to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113, or to the relevant supervisory authority in your jurisdiction.

A.About You (Complainant)

1) Full name * Please enter your full name.

2) Email address * Please enter a valid email address.

3) Phone number (optional) Helpful if we need to contact you.

4) Preferred method for replies *

Email Phone Post

Please choose a reply method.

5) Are you based in the UK? *

Yes No

Please indicate your location.

If No, country

6) Reference number (if you have one) e.g. a verification reference, SAR tracking reference, or support ticket number.

B.Your Complaint

You do not need to use legal terms or cite legislation. Please describe what happened in plain language.

1) Brief summary * Please summarise your complaint.

2) Category * (tick all that apply)

Access request (SAR) or other data rights request handlinge.g. delayed response, incomplete data, request refused Use or sharing of my datae.g. data shared with third parties without my knowledge Marketing or unwanted contacte.g. received emails I did not consent to Accuracy / incorrect data held about mee.g. identity records, screening results Retention / data kept for longer than necessary Security / suspected data breache.g. unauthorised access or disclosure Automated decision-making / AI decision challengee.g. a verification outcome you believe was incorrect OtherPlease describe in the "What happened" field below

Please choose at least one category.

3) What happened? * Please describe what happened.

4) When did this happen?

Is this an ongoing issue?

Yes No

5) How has this affected you? (optional)

C.Evidence and Supporting Information (Optional)

You may describe relevant documents or screenshots that support your complaint. Please do not send unnecessary identity documents or unrelated personal information, in line with data minimisation principles. To send actual files, please email [email protected] after submitting and quote your tracking reference.

Do you have attachments to provide separately?

Yes No

List attachments (optional)

D.Accessibility and Reasonable Adjustments (Optional)

If you need communications in a different format or require any other reasonable adjustments, please tell us here

E.Privacy Information for This Complaint Form

This section explains how Shufti Pro Limited processes the personal data you provide in this form.

Data controller: Shufti Pro Limited, Coppergate House, 10 Whites Row, London E1 7NF. Contact: [email protected].

Purpose of processing: We use the information in this form to receive, investigate, and respond to your data protection complaint, to keep you updated on progress, and to maintain an internal record of the complaint and its outcome for accountability and quality assurance purposes.

Lawful bases

Legitimate interests (Article 6(1)(f) UK GDPR): investigating and responding to complaints, maintaining records of complaint outcomes, and improving our data protection practices.
Legal obligation (Article 6(1)(c) UK GDPR): where we are required by applicable data protection law to receive and record complaints, cooperate with supervisory authorities, or demonstrate accountability under Article 5(2) UK GDPR.

Identity verification

We will only request verification of your identity where it is necessary to process your complaint, and we will do so in a manner proportionate to the nature and sensitivity of your request. We will not require government-issued identification as a blanket requirement.

How we handle complaints — our internal process

Acknowledgement: within 5 working days of submission.
Assessment: reviewed by the Data Protection team.
Investigation: records review and internal coordination as required.
Response: substantive written response within one calendar month (extendable by two further months for complex matters, with notification).
Escalation: you may escalate to the ICO or relevant supervisory authority if you remain dissatisfied.

Retention of complaint records

Complaint records are retained for up to 3 years from final resolution.
Where connected to legal proceedings: duration of those proceedings + up to 7 years thereafter.
Records are then securely deleted or irreversibly anonymised.

Supervisory authority

ICO: ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. EEA: edpb.europa.eu.

·Submit Your Complaint

By submitting this form you confirm that the information you have provided is accurate to the best of your knowledge.

Protected by reCAPTCHA · submit will enable once the security check loads.

Version 2.0 · Last updated: April 2026 · Shufti Pro Limited · Data Protection Office