How to contact the Information Commissioner's Office (ICO)

The Information Commissioner's Office (ICO) is the independent authority that upholds information rights in the UK. You have the right to complain to the ICO about the way any organisation — including Credicorp — handles your personal data under UK GDPR.

When to contact the ICO

You can complain to the ICO if:

• You believe Credicorp has breached UK GDPR or the Data Protection Act 2018.
• You made a data rights request (subject access, erasure, correction) and we did not respond within the statutory time limit or you are not satisfied with our response.
• You believe we sent you marketing communications without a lawful basis.
• You believe we shared your data with a third party without a valid reason.

You do not have to complain to us first before going to the ICO, but the ICO typically expects you to have raised the matter with the organisation first and given them a chance to resolve it.

How to raise a data complaint with Credicorp first

Use our Data request form or contact us by email at privacy@credicorp.co.uk. We will respond within 30 days. If you are not satisfied with our response, or if 30 days have passed without a response, you can then go to the ICO.

How to contact the ICO

• Website: ico.org.uk/make-a-complaint — online complaint form available
• Phone: 0303 123 1113 (Monday to Friday, 9am–5pm)
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Live chat: available at ico.org.uk during office hours

What the ICO can do

The ICO can investigate your complaint, issue a decision, and require us to take action — for example, to delete data, correct it, or stop a particular processing activity. The ICO can also issue fines for serious breaches, though this is separate from any individual complaint resolution.

See also: What are my rights under UK GDPR?, How do I make a data subject access request?, How do I complain about how you handled my data?.