Data & privacy rights
If a company has mishandled your personal data — leaked it, ignored your request to see it, or used it in ways you never agreed to — UK data-protection law gives you real rights. ConsumerSuit helps you understand which ones apply to your situation and prepare the letters to act on them.
This page is about your rights against other organisations. For how ConsumerSuit itself handles your data, see our Privacy Policy.
Problems we can help with
- A data breach — your personal information was lost, leaked or exposed, and you've suffered distress or worse as a result.
- An ignored subject access request (SAR) — you asked an organisation for a copy of the data it holds on you and it didn't respond, responded late, or held things back.
- Misuse of your data — your information was used for something you never agreed to, shared without a lawful basis, or kept long after it should have been deleted.
- Ignored rights requests — you asked for data to be corrected or deleted, or objected to how it's used, and were brushed off.
- Unwanted marketing — persistent marketing after you opted out or never opted in.
The law behind it
Your rights come from the UK GDPR and the Data Protection Act 2018. Among other things they give you the right to access your data, to have it corrected or erased, to restrict or object to its use, and to have it handled lawfully, fairly and securely. Where a breach of these rules causes you material damage or genuine distress, Article 82 UK GDPR gives a right to compensation.
Two different routes — this matters. The Information Commissioner's Office (ICO) regulates organisations and can investigate and enforce, but it does not award you compensation. Compensation for distress under Article 82 is pursued separately, through the County Court. A complaint to the organisation and to the ICO, and a claim for compensation, are different things — and you can do both.
How ConsumerSuit helps
- Reads your situation and identifies which data-protection rights are in play and whether the facts support a breach.
- Drafts your complaint to the organisation citing the specific rights it has failed.
- Helps you escalate to the ICO where appropriate, and points you to the separate County Court route for an Article 82 distress claim, with a realistic sense of the range.
- Shows the deadlines and what evidence strengthens your case.
Check this against your own documents. ConsumerSuit is an AI self-help tool for England & Wales; it can be wrong or incomplete and doesn't represent you. Compensation amounts are estimates of your position, not a prediction of what a court will award. For advice on your specific circumstances, consult a qualified solicitor or the ICO.
Check your data claim →