Legal
Data protection complaint
Last updated 8 October 2026
If you are unhappy with how Heberlis has collected, used or protected your personal data, tell us here. A person reads every complaint.
What happens next
- 1
We acknowledge it within 30 days. In practice at once: the form emails you an acknowledgement with a reference.
- 2
We investigate. what happened, and may ask you for more detail.
- 3
We tell you the outcome. in writing, and what we have done about it.
Complain online
By email
Write to hello@servolia.com with "Data protection complaint" in the subject.
By post
Data protection complaintsServolia LLC (trading as Heberlis)30 N Gould St, Ste RSheridan, WY 82801United StatesThe regulator
You may also complain to the data protection authority that covers you. Most, the ICO included, usually expect you to raise it with us first.
Which law protects you depends mainly on where you are. The UK and EU rules apply to us because we offer our services to people there; the UAE and Saudi laws also cover data about people in those countries that is handled from abroad.
The DIFC and ADGM financial free zones in the UAE have their own data protection laws and regulators. If your business is established in one of them, its regulator may be the one to contact.
Whatever law applies, we handle every request and complaint the same way. If you are unsure which authority to contact, write to us first and we will tell you which one we believe is competent; you can always contact an authority directly.
- In the United Kingdom: UK GDPR and the Data Protection Act 2018. Authority: Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint.
- In France or elsewhere in the EU: the EU GDPR, which applies to us because we offer our services to people in the EU. Authority: the CNIL in France, or the authority of the EU country where you live or work, cnil.fr/fr/adresser-une-plainte.
- In Spain: the EU GDPR and Spain's Organic Law 3/2018 on data protection (LOPDGDD). Authority: the Agencia Española de Protección de Datos (AEPD), aepd.es.
- In Belgium: the EU GDPR and the Belgian law of 30 July 2018 on the protection of personal data. Authority: the Belgian Data Protection Authority (APD / GBA), autoriteprotectiondonnees.be.
- In Morocco: Law No. 09-08 on the protection of individuals with regard to the processing of personal data. Authority: the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP), cndp.ma.
- In the United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL), in force since 2 January 2022. Authority: the UAE Data Office, the federal data regulator set up by Federal Decree-Law No. 44 of 2021, u.ae (data protection laws).
- In the Dubai International Financial Centre (DIFC): the DIFC Data Protection Law, DIFC Law No. 5 of 2020. Authority: the DIFC Commissioner of Data Protection, difc.com (Commissioner of Data Protection).
- In Abu Dhabi Global Market (ADGM): the ADGM Data Protection Regulations 2021. Authority: the ADGM Office of Data Protection, adgm.com (Office of Data Protection).
- In Saudi Arabia: the Personal Data Protection Law (PDPL), issued on 16 September 2021. Authority: the Saudi Data and Artificial Intelligence Authority (SDAIA), which takes complaints through its National Data Governance Platform, dgp.sdaia.gov.sa.
Your complaint is used only to handle it: it is not added to any list and never measured. See the privacy policy.