Firstly I would inform my manager/ deputy manager

Firstly I would inform my manager/ deputy manager, they will let me know if I need to put my complaint in writing or not. They will then plan to hold a meeting to discuss the grievance further. The person dealing with the complaint will decide the appropriate actions to take, but if I am not happy with the actions took in order to resolve the grievance I am allowed to take it further.
Employees personal data should be kept safe, secure and up to date by an employer. Data an employer can keep abound an employee includes name, address, date of birth, sex, education and qualifications, work experience, National Insurance number, tax code, details of any known disability, emergency contact details.