Legal document
Complaining about how your data is handled
How to complain to Tradello, how to complain to the Information Commissioner, and what Tradello owes you by law when you do.
This page has not been through legal review
Every provision cited on this page was read from its primary source on 27 September 2026 and is cited by section number. Section 164A of the Data Protection Act 2018 came into force on 19 June 2026 and section 165(1) was omitted on the same date, so a page citing the older provision would be citing a repealed one.
This page states where our own complaint handling falls short of section 164A rather than describing a process we do not operate. None of the wording has been written or approved by a solicitor.
Your statutory rights are unaffected by anything on this page. The version you accepted is recorded against your purchase, so which wording applied to your order stays answerable. If you would rather wait for the reviewed wording before buying, nothing here expires.
You have two routes and you can use either
If you think we have handled personal data about you wrongly, you can complain to us and you can complain to the Information Commissioner’s Office, which is the UK regulator.
You do not have to come to us first, and complaining to us does not use up your right to go to the ICO. They are separate routes and you can use both at once if you want to.
Complaining to us
Use the complaint form, which needs no account and records the date your complaint reached us. Or write to the registered office at the foot of this page.
Write to us to make a data protection complaint at support@tradello.co.uk, or by post to the registered office.
It helps if you tell us:
- what happened, and roughly when;
- enough to find you — the name and work email address as they would have been published, and the organisation;
- what you would like us to do about it.
What we owe you by law when you complain
Section 164A of the Data Protection Act 2018 came into force on 19 June 2026 and applies to us. It says that a controller:
- must facilitate the making of complaints, by steps such as providing a complaint form which can be completed electronically and by other means — section 164A(2);
- must acknowledge receipt of a complaint within 30 days of receiving it — section 164A(3);
- must, without undue delay, take appropriate steps to respond and inform you of the outcome — section 164A(4), which includes making enquiries to the extent appropriate and keeping you informed of progress.
What we have built for that, and where we still fall short
A complaint is a separate object from a request and carries its own clock: thirty days to acknowledge under section 164A(3) of the Data Protection Act 2018, counted from the day it arrives, held in the case store and alerted on before the deadline rather than when it passes. One message can be both a request and a complaint, and each half keeps its own deadline rather than inheriting the longer one.
A complaint cannot be closed in our system without an acknowledgement recorded against it. That is deliberate: a closed file with no acknowledgement is a file that cannot evidence compliance with section 164A(3), whatever anybody remembers doing.
Where we still fall short, stated plainly: no individual inside this business has been publicly named as the owner of complaints, and no internal response timetable has been published. The case store records who took each complaint and when; what it does not do is publish a name in advance.
Nothing about our shortcomings reduces your rights. You can go straight to the ICO without waiting for us, and if we have not acknowledged you inside 30 days then we are in breach and the ICO route below exists precisely for that.
Complaining to the Information Commissioner
Every data subject has the right to lodge a complaint with a supervisory authority — Article 77(1) UK GDPR — and in the UK you may complain to the Commissioner under section 165(2) of the Data Protection Act 2018 if you consider there has been an infringement in connection with personal data relating to you.
The Commissioner must take appropriate steps to respond and must tell you about progress or the outcome within three months of receiving your complaint — section 166(1)(b) — and must keep telling you at three-monthly intervals if it takes longer.
- Helpline
- 0303 123 1113
- By post
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Complaining to the ICO is free and you do not need a solicitor to do it.
Other things you can do
Going to the regulator is not your only option and does not replace the others:
- Exercise a right directly. Asking to see what we hold, to have it corrected, to have it deleted, or objecting to us holding it at all, is often faster than complaining about it — see your data protection rights.
- Go to court. The right to complain is expressed to be without prejudice to any other administrative or judicial remedy. Nothing on this page affects that and nothing on this site asks you to give it up.
- Ask the publisher to change the record. If the problem is what a council or an authority published about you, the correction belongs at the source as well as with us, because we and everybody else re-read those publishers.
One thing we cannot yet confirm
We have not confirmed whether this company is registered with the ICO and paying the data protection fee. It is on the list of things being established and it is a fact, not a judgement, so it will be a short answer once somebody checks. It is here rather than omitted because a reader deciding whether to complain is entitled to know what we do and do not know about our own standing.