Skip to content
ComplaintsDesk Get free template
DUAA in force since 19 June 2026

Lightweight complaints software for UK businesses

DUAA intake, deadline tracking, and ICO-ready exports — without enterprise onboarding or six-figure GRC pricing.

Get free template View pricing

Acknowledgement due

18 days left

On track
Case #1042
Received 3 Jun
Investigation
In progress
Audit export
Ready

What the law requires

Accessible intake

Provide at least one electronic route — form, email, or portal — and accept complaints via any channel.

30-day acknowledgement

Confirm receipt within 30 calendar days. The clock starts the day after you receive the complaint.

Investigate promptly

Start enquiries without undue delay — not after the acknowledgement window ends.

Auditable records

Keep receipt, acknowledgement, correspondence, investigation steps, and outcomes.

Source: Data (Use and Access) Act 2025, s.103 and ICO guidance.

Built for complaints only

Not another full GRC suite. ComplaintsDesk focuses on the DUAA complaints workflow — from first submission to ICO-ready export — at a price SMEs can afford.

  • Branded public complaint form
  • 30-day acknowledgement countdown
  • Manual intake for phone, email, and social
  • Acknowledgement and outcome letter templates
  • Privacy notice snippet generator
  • ICO audit PDF/CSV export

Why not another GRC platform?

From £12/month

Enterprise GRC

£450–£8,000+/mo

  • Weeks of onboarding
  • ROPA, DPIA, vendor risk…
  • Complaints as a checkbox

ComplaintsDesk

£12/mo

  • 10-minute setup
  • Complaints workflow only
  • Built for DUAA from day one

Complaints-only pricing. No ROPA, no DPIA suite — just the workflow you need. View all plans →

Frequently asked questions

What is ComplaintsDesk?

ComplaintsDesk is software for UK organisations to receive, acknowledge, investigate, and resolve data protection complaints under the Data (Use and Access) Act 2025 (DUAA). It includes intake forms, 30-day acknowledgement tracking, and ICO-ready audit exports.

Who needs a DUAA complaints procedure?

Every UK data controller must have a process for handling data protection complaints — there is no small-business exemption. The obligation took effect on 19 June 2026.

Is ComplaintsDesk legal advice?

No. ComplaintsDesk provides software and templates to help you manage complaints. Always review outputs and seek qualified legal advice where needed.

Get your free DUAA complaints procedure template

Download our template and join the waitlist for ComplaintsDesk — intake forms, deadline tracking, and ICO-ready exports.

Get the template