We are a small company with no data protection officer - all data protection is being handled to the best of abilities by our HR Manager and E-Commerce Marketeer.
I am trying to implement a BRC Standard but due to the new GDPR regulations, I am wondering how much detail should we be expected to hold regarding customer complaints? Should we forgo the customer details section and simply categorise the customer (i.e. consumer, retailer, distributor) for trending?
How much detail are you holding in your complaints forms/logs following the new regs coming into force?
Our customer services team will need to hold the customers details somewhere to respond to the complaint, but would the QMS records need to hold this data too?
Apologies - inexperience and unavailable resources has lead me here!