PRIVACY POLICY
Do we share your Personal Data with anyone?
We only share your personal data in ways that you would expect. We will never sell your personal data.
Your personal information will be accessed by the people in the campaign team which includes a digital campaign management company. Your personal data will be used within digital service providers for storage, sending emails, petition management, direct communications (SMS, WhatsApp), processing donation payments, and managing the campaign. All third parties we work with are bound by data protection agreements we have in place with them.
Where you have indicated that you are happy for your personal data to be shared with other campaigns we will do so although do not do this automatically. Should you click on links to other campaigns and their respective websites from our website or any communications we send you, we are not responsible for sharing any information with them and you do so voluntarily. Please see their privacy notice to know how they will use your personal data.
Where appropriate, we may share your personal information with our professional advisers including our lawyers and auditors, and project partners, where it is strictly necessary. It is also possible that we may be required to share your data to comply with applicable laws or with valid legal processes, such as in response to a court order.
We may also share your personal data if we choose to transfer the management of the campaign to another charity, or where the company responsible for the campaign merges parts of its business or sells our assets in the future. Or we may seek to acquire other businesses or merge with them. During any such process, we may share your data with other parties. We will only do this if they agree to keep your data safe and private.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded by implementing at least one of the following safeguards:
Transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK (the UK also recognises the European Commission list of adequate countries. For further details, see European Commission: Adequacy of the protection of Personal Data in non-EU countries)
Specific contracts/agreements approved by the UK which give personal data the same protection it has in the UK. For further details, see UK International Data Transfer Agreements. We will also assess in-country standards as part of this process.
Your data and third party advertising
In some instances, we may share your data with audience advertisers and advertising networks, such as Meta, that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with anonymised, aggregated information about our users.
For example we may use your email address to create a Facebook Custom Audience or a Lookalike Audience. This enables us to show you this campaign’s content when you visit Facebook. We provide your email address to Facebook to enable them to determine if you are a registered account holder with Facebook. We may also use your email address to create a Lookalike Audience, where targeted ads are sent to people on Facebook who have similar characteristics to people on our Custom Audience list. For Facebook Custom Audience and Lookalike Audience your email is sent in an encrypted format that is deleted by Facebook.
There are two ways to prevent this use of your data, you can either contact Reset Tech UK directly (see details below on how to do this) or you can do this via Facebook, see here.
Updating your preferences will not guarantee that you never see campaign content on social media, since the social media site may select you based on other criteria and without your data having been provided by Reset Tech UK.
How long we keep your Personal Data?
Petition signers and email list(s):
Retained for 12 months after the campaign concludes
You can request deletion at any time by emailing us
Donors:
Retained for 6 years (required for tax, audit, and anti-money laundering purposes)
You can request anonymisation after this period
First-hand accounts used in campaign materials:
Where this has not been published and you change your mind, we will delete all footage and recordings of you
Once the material has been made public, we will be unable to delete the data contained should you ask us to delete it. We will delete any raw footage we may still hold and should it be possible, we will remove digital media from the locations we control
WhatsApp community:
Retained for 12 months after you leave the group
You can request deletion at any time
We are unable to delete any data another member has copied
Journalists and Supplier:
Retained for 12 months after the campaign concludes
This information may be retained for longer by the organisation responsible for the campaign (please refer to that organisation’s privacy notice for further information)
Cookies
As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies to enhance your experience of our website.
Our website uses cookies for collecting user information which may include IP address, operating system, and browser information. We use persistent cookies to track returning visitors. They expire after 12 months and enable us to compare website traffic from month to month.
Cookies are text files, which identify a user’s computer to our servers. Cookies in themselves do not identify the individual user, just the computer used. You can learn more about cookies by visiting http://www.allaboutcookies.org/.
You can manage and delete cookies through your web browser. Each browser manages cookies differently, but you can learn more about cookie settings in the most common browsers using the links below:
You can also prevent your data from being used by Google Analytics by using the Google Opt-out Browser Add-on, available at this link.
Your data protection rights
You have the following rights in respect of your personal data:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances including where we are processing your data based on consent.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. To express your rights contact us at: TBC
Security of Your Data
We take the protection of your information extremely seriously. We use a combination of physical, technical, operational, and administrative safeguards to prevent unauthorised access, use, or disclosure of your personal data, as required by law and in line with recognised industry best practice. We regularly review these measures to ensure they remain effective and appropriate. Your information is protected by:
Secure storage on encrypted servers
Password-protected access restricted to authorised staff
Encrypted payment processing for donations
Regular security reviews
However, no system is 100% secure. We cannot guarantee absolute security, but we implement industry-standard protections.
How to Complain
If you have concerns about how we use your data:
Contact us first at TBC - we'll do our best to resolve it
Contact the ICO if you remain unhappy:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 Website: https://www.ico.org.uk
Contact us
For questions about this privacy notice or how we handle your data:
Email: TBC Campaign: Support the BBC
Changes to This Privacy Notice
We may update this notice from time to time. We will post changes on this page with an updated revision date. Significant changes will be communicated to you via email.
Last updated: August 2026
Uses | Lawful Basis |
|---|---|
| To run the Better with the BBC campaign, encourage the UK government to keep the TV Licence for the BBC intact. | UK GDPR Article 6.1(f) Legitimate interest. |
| To add you to a petition when you add your details to the petition(s) we run. | UK GDPR Article 6.1(f) Legitimate interest. |
| To add you to the Better with the BBC WhatsApp campaign group. Unless otherwise stated, where you have provided your telephone number, this indicates to us that you want to be part of the WhatsApp group. NOTE: Although we manage the WhatsApp community groups and ensure their settings reduce how identifiable you will be to others in the group(s) and have clear guidelines in the community notes, anything you write in the group(s) should be treated as publicly available information. Please do not write anything you would not want made public about you, as we are unable to control how other people may use this information. You can remove yourself at any time. | UK GDPR Article 6.1(f) Legitimate interest. |
| To analyse the effectiveness and reach of the campaign from the information we have gathered throughout the campaign. | UK GDPR Article 6.1(f) Legitimate interest. |
| To reply to any communications you have with us and share any relevant information with individuals involved to further the campaign. | UK GDPR Article 6.1(f) Legitimate interest. |
| To respond to you when you contact us, comment on our posts or message us on social media. | UK GDPR Article 6.1(f) Legitimate interest. |
| To moderate comments and interactions on our social media pages, including removing abusive or unlawful content. | UK GDPR Article 6.1(f) Legitimate interest. |
| To understand how our campaign content is performing, using aggregated statistics provided by social media platforms. | UK GDPR Article 6.1(f) Legitimate interest. |
| To show campaign advertisements on social media platforms. | UK GDPR Article 6.1(f) Legitimate interest. |
| To keep you informed of the campaign and provide you with more ways you are able to get involved. You can opt out at any time via an unsubscribe link in emails sent to you. | UK GDPR Article 6.1(a) Consent. |
| To add your information to Meta’s platform so we are able to create “lookalike” audiences similar to yourself. Your data is only used to help Meta understand what they need to find people with similar profiles to yourself, your data is not held by Meta for any further reason and not used for anything else. Further information can be found here: https://www.facebook.com/legal/terms/customaudience | UK GDPR Article 6.1(a) Consent. |
| To show campaign advertisements to people with similar interests to our supporters, using the platforms' "lookalike" audience tools, when you have agreed to this in the platform settings. This is based on Meta’s ‘consent or pay’ model for showing advertisements to Facebook and Instagram users. To use the platforms for free a user must consent although where a user pays, they will not be shown advertisements. More information can be found here: https://about.fb.com/news/2025/09/facebook-and-instagram-to-offer-subscription-for-no-ads-in-the-uk/ Google collects advertising consent through acceptance of cookies on other organisation’s websites to know whether you allow yourself to be targeted for advertising. | UK GDPR Article 6.1(a) Consent. (collected by the relevant platform). |
| To allow you to be recorded by us so your story can be told within the campaign. This is to support the campaign, raise awareness of the issue and to encourage others to support the campaign. This will be published on our website, digital locations, including social media, and possibly broadcast media (TV/Radio). | The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Where you share special category data as a Contributor, our condition for processing is explicit consent as per Article 9.2(a). |
| To capture and hold a contributor and digital rights release waiver for the footage we take of you when you are recorded for the campaign. | UK GDPR Article 6.1(f) Legitimate interest. |
| Monitor the website and keep it secure, it helps us understand how we might improve the website through the number of visits, visitor patterns and behaviour. | UK GDPR Article 6.1(f) Legitimate interest. |
| To identify Personal Data and take relevant action upon submission of a data subject rights request. | Processing is necessary for compliance with a legal obligation to which the controller is subject under UK GDPR Article 6.1(c). The legal obligation is the separate obligation under the UK GDPR to comply with the exercise by a data subject of their rights and the separate obligation on a controller to use personal data in a manner that ensures appropriate security. Special categories of personal data would be used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g). |
| To be able to assess any impact on individuals of a Personal Data Breach | Processing is necessary for compliance with a legal obligation to which the controller is subject under UK GDPR Article 6.1(c). The legal obligation is the separate obligation under the UK GDPR to comply with the exercise by a data subject of their rights and the separate obligation on a controller to use personal data in a manner that ensures appropriate security. Special categories of personal data would be used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g). |
| To deal with any legal claims and any ongoing litigation cases. | Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f). |
The ‘Better with the BBC’ is a grassroots campaign which is being run by Reset Tech UK Community Interest Company (Reset Tech), which is the data controller for the use of personal data within the campaign. Reset Tech is a global non-profit public policy network. We operate in the US, UK, Germany, and Australia.
For more information about Reset Tech and how Reset Tech handles personal data outside this campaign, please see our website and our privacy notice.
This privacy notice is to inform you of how we use your personal data when you interact with the campaign. We have identified the following ways you might interact with us. You may be one (or multiple) of the following:
Supporter – you have signed a petition we are running. You do this by clicking ‘Sign the Petition’ on our website. When you sign our petition, you can opt in to receive updates via email. You don’t have to opt in to our newsletter to sign the petition.
Subscriber - if you want to sign up for the newsletter and not for the petition, you can do so by clicking ‘Stay in Touch’; this will also receive invitations to take part in quizzes and surveys.
WhatsApp Group participant - you can separately join the Better with the BBC WhatsApp Groups by clicking ‘Join the Community’ and using the invite link.
Stakeholder - you may have given your time or expertise to our campaign.
Contributor – this is where you want to share your story with us in an interview or recording that will be used in the campaign literature and social media locations
Journalist – you are a member of the media we are interacting with to help our campaign.
Website Visitor – any visitor to this website.
People who see our ads - anyone who sees our ads for the campaign on social media.
People who engage with us on social media - this includes people who visit, follow, or interact with our social media campaign profiles, for example, by clicking through from one of our ads or our website, searching for us directly, or liking, commenting on, sharing, or messaging us about our posts.
For questions about the campaign or concerns about this privacy notice, contact us at: hello@reset.tech
What is personal data
Personal data is any information that can be used to identify you, or any other living person. Some personal information is more sensitive than other information (for example, information about your health, your sexual orientation or sex life, your political affiliation, or your race and ethnicity). We try to minimise our collection of sensitive personal information. We will always make sure we collect and use such information lawfully.
What Personal Data do we collect and where do we get it from?
If you choose to become a Supporter, we collect your personal data directly from you, which includes your name, email address, the petition you may have signed and whether you have indicated you are happy to receive further information about the campaign. It is not mandatory to provide your telephone number; if you do, we will use it to add you to the Better with the BBC WhatsApp campaign group. We ask you to provide your postal code when you sign the petition, as it intended for people living in the UK.
As a Subscriber, we collect your personal data directly from you. We ask you to provide us with your name, email, and postal code. We ask you to provide your postal code so we can understand where people are keeping up to date with our campaign.
If you want to become a WhatsApp Group participant, we ask you for your telephone number. And we will process any messages that you send to the group.
If you are a Stakeholder we may keep records of our communications with you and other information you have shared with us, as well as information you have shared publicly in a professional context.
If you are a Contributor, we collect your personal data directly from you or from others around you who are helping to tell your story. It is very important to us that any story you share should be your own. If you share another’s story (for example, your child or parent), make sure you have their permission to do so. We will collect your name, preferred name, email address, home address, availability to participate, and how you or the person you are telling us about was affected. This may include sensitive information or special categories of personal data concerning the circumstances of the story.
If you are a Journalist, we will collect social media handles, job title, employer, work history and the names of any other organisation you represent that either you have provided or is publicly available and which has been made available clearly in a professional remit. We may also collect publicly available information on websites or in articles you have written or have been written about you, and thoughts and opinions you may have about the campaign.
As a Website Visitor, we will collect:
Information about the device used to access our website, operating system, your visits and use of the website, including your IP address, internet log information, location, browser type and version, referrer and activity, and details of visitor behaviour patterns
Your activity and preferences when visiting our website, including through the use of cookies (see “Cookies”, below)
The information you provide in any of the forms you complete on the website, when you share your story to become a Contributor or sign up to become a Supporter.
People who engage with us on social media. If you follow our Campaign on social media, interact with our posts, contact us, or take part in campaign actions, we process the information you provide or generate through that interaction, such as your name, username, email address and the content of your messages or comments. We use this to respond to you, send you updates you have asked for, and understand how our campaign is performing.
People who see our ads. We use advertising tools on social media platforms to show campaign messages to people who may be interested in our campaign. In many cases we do not receive any personal information about the people who see our ads; the platform selects the audience and shares only aggregated statistics with us. We may use features to reach specific audiences.
To show these ads, we use the advertising tools provided by each platform. Depending on the campaign, this may involve showing ads to broad audiences based on general characteristics, showing ads to people who have visited our website, or other features. We do not target ads based on sensitive characteristics such as political opinions, religious beliefs, health or sexual orientation.
For some of this activity, we and the platform act as joint controllers, and the platform processes your data under its own privacy policy. You can manage your ad preferences directly in each platform's settings. Here are the platforms we advertise on, and a link to their Privacy Notice:
Meta: https://www.facebook.com/privacy/policy?locale=en_GB
Google: https://policies.google.com/privacy?hl=en-GB
For example, we may use your email address to create a Facebook Custom Audience or a Lookalike Audience. This enables us to show you this campaign’s content when you visit Facebook. We provide your email address to Facebook to enable them to determine if you are a registered account holder with Facebook. We may also use your email address to create a Lookalike Audience, where targeted ads are sent to people on Facebook who have similar characteristics to people on our Custom Audience list. For Facebook Custom Audience and Lookalike Audience your email is sent in an encrypted format that is deleted by Facebook.
There are two ways to prevent this use of your data, you can either contact Reset Tech directly (see details below on how to do this) or you can do this via Facebook, see here.
Updating your preferences will not guarantee that you never see campaign content on social media, since the social media site may select you based on other criteria and without your data having been provided by Reset Tech.
How we use your Personal Data and our Lawful Basis
We will only use your personal data in a way that you expect us to use it. We have aligned our uses to the lawful basis for your awareness as we need a lawful basis for processing personal data, and an additional condition for processing more sensitive special category data.
The ‘Better with the BBC’ Campaign
Do we share your Personal Data with anyone?
We only share your personal data in ways that you would expect. We will never sell your personal data.
We share your personal information with different entities within Reset Tech (as we have shared systems and staff).
Your personal information will be accessed by the people in the campaign team which includes a digital campaign management company. Your personal data will be used within digital service providers for storage, sending emails, petition management, direct communications (SMS, WhatsApp), processing donation payments, managing the campaign on social media and managing the campaign more generally. All third parties we work with are bound by data protection agreements we have in place with them.
Where you have indicated that you are happy for your personal data to be shared with other campaigns, we will do so, although we do not do this automatically. Should you click on links to other campaigns and their respective websites from our website or any communications we send you, we are not responsible for sharing any information with them and you do so voluntarily. Please see their privacy notice to know how they will use your personal data.
Where appropriate, we may share your personal information with our professional advisers, including our lawyers and auditors, and project partners, where it is strictly necessary. It is also possible that we may be required to share your data to comply with applicable laws or with valid legal processes, such as in response to a court order.
We may also share your personal data if we choose to transfer the management of the campaign to another charity, or where the company responsible for the campaign merges parts of its business or sells our assets in the future. Or we may seek to acquire other businesses or merge with them. During any such process, we may share your data with other parties. We will only do this if they agree to keep your data safe and private.
Will we transfer your data internationally? Yes. Reset Tech is a global network, and our entities share systems. We also use vendors in different countries. We try as hard as we can to keep your personal information secure when shared internationally, including carefully vetting our vendors, entering into agreements guaranteeing the security of personal information and your rights, and - of course - only transferring personal data which is necessary.
You acknowledge and agree that, as a result, your personal information may be processed, used, stored, or accessed in other jurisdictions and may be subject to the laws of those jurisdictions. For example, information may be disclosed in response to valid demands or requests from government authorities.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded by implementing at least one of the following safeguards:
Transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK (the UK also recognises the European Commission list of adequate countries. For further details, see European Commission: Adequacy of the protection of Personal Data in non-EU countries)
Specific contracts/agreements approved by the UK which give personal data the same protection it has in the UK. For further details, see UK International Data Transfer Agreements. We will also assess in-country standards as part of this process.
How long do we keep your Personal Data?
Petition signers and email list(s):
Retained for 12 months after the campaign concludes
You can request deletion at any time by emailing us at the contact details above or below.
First-hand accounts used in campaign materials:
Where this has not been published and you change your mind, we will delete all footage and recordings of you
Once the material has been made public, we will be unable to delete the data contained should you ask us to delete it. We will delete any raw footage we may still hold and should it be possible, we will remove digital media from the locations we control
WhatsApp community:
Retained for 12 months after you leave the group in case there are any legal concerns or disputes where personal data may be needed as evidence
You can request deletion at any time
We are unable to delete any data another member has copied
Journalists and Supplier:
Retained for 12 months after the campaign concludes
This information may be retained for longer by the organisation responsible for the campaign (please refer to that organisation’s privacy notice for further information)
Cookies
As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies to enhance your experience of our website.
Our website uses cookies for collecting user information which may include IP address, operating system, and browser information. We use persistent cookies to track returning visitors. They expire after 12 months and enable us to compare website traffic from month to month.
Cookies are text files, which identify a user’s computer to our servers. Cookies in themselves do not identify the individual user, just the computer used. You can learn more about cookies by visiting http://www.allaboutcookies.org/.
You can reject non-essential cookies (tend to be analytics cookies) by clicking no in the cookies banner.
You can manage and delete cookies through your web browser. Each browser manages cookies differently, but you can learn more about cookie settings in the most common browsers using the links below:
You can also prevent your data from being used by Google Analytics by using the Google Opt-out Browser Add-on, available at this link.
Your data and third party advertising
In some instances, we may share your data with audience advertisers and advertising networks, such as Meta, that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with anonymised, aggregated information about our users.
For example we may use your email address to create a Facebook Custom Audience or a Lookalike Audience. This enables us to show you this campaign’s content when you visit Facebook. We provide your email address to Facebook to enable them to determine if you are a registered account holder with Facebook. We may also use your email address to create a Lookalike Audience, where targeted ads are sent to people on Facebook who have similar characteristics to people on our Custom Audience list. For Facebook Custom Audience and Lookalike Audience your email is sent in an encrypted format that is deleted by Facebook.
There are two ways to prevent this use of your data, you can either contact Reset Tech UK directly (see details below on how to do this) or you can do this via Facebook, see here.
Updating your preferences will not guarantee that you never see campaign content on social media, since the social media site may select you based on other criteria and without your data having been provided by Reset Tech UK.
How long we keep your Personal Data?
Petition signers and email list(s):
Retained for 12 months after the campaign concludes
You can request deletion at any time by emailing us
Donors:
Retained for 6 years (required for tax, audit, and anti-money laundering purposes)
You can request anonymisation after this period
First-hand accounts used in campaign materials:
Where this has not been published and you change your mind, we will delete all footage and recordings of you
Once the material has been made public, we will be unable to delete the data contained should you ask us to delete it. We will delete any raw footage we may still hold and should it be possible, we will remove digital media from the locations we control
WhatsApp community:
Retained for 12 months after you leave the group
You can request deletion at any time
We are unable to delete any data another member has copied
Journalists and Supplier:
Retained for 12 months after the campaign concludes
This information may be retained for longer by the organisation responsible for the campaign (please refer to that organisation’s privacy notice for further information)
Cookies
As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies to enhance your experience of our website.
Our website uses cookies for collecting user information which may include IP address, operating system, and browser information. We use persistent cookies to track returning visitors. They expire after 12 months and enable us to compare website traffic from month to month.
Cookies are text files, which identify a user’s computer to our servers. Cookies in themselves do not identify the individual user, just the computer used. You can learn more about cookies by visiting http://www.allaboutcookies.org/.
You can manage and delete cookies through your web browser. Each browser manages cookies differently, but you can learn more about cookie settings in the most common browsers using the links below:
You can also prevent your data from being used by Google Analytics by using the Google Opt-out Browser Add-on, available at this link.
Your data protection rights
You have the following rights in respect of your personal data:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances including where we are processing your data based on consent.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. To express your rights, contact us at:
Reset Tech UK Community Interest Company
c/o Sedulo, Office 605, Albert House
256-260 Old Street
London EC1V 9DD
Website: reset.tech
Security of Your Data
We take the protection of your information extremely seriously. We use a combination of physical, technical, operational, and administrative safeguards to prevent unauthorised access, use, or disclosure of your personal data, as required by law and in line with recognised industry best practice. We regularly review these measures to ensure they remain effective and appropriate. Your information is protected by:
Secure storage on encrypted servers
Password-protected access restricted to authorised staff
Encrypted payment processing for donations
Regular security reviews
However, no system is 100% secure. We cannot guarantee absolute security, but we implement industry-standard protections.
How to Complain
If you have concerns about how we use your data:
Contact us first. We have a Data Protection Officer and you can contact them at dpo@reset.tech.
We will work with you to resolve your questions or concerns.
Contact the ICO if you remain unhappy: