The Information Commissioner's Office
It is also your right to make a complaint to the Information Commissioner’s Office and Capstone can be fined up to £5000 for each breach of the Data Protection Act (1997) and the rules and principles they must follow in order to ensure their own compliance with the Act.
This comes into play when you issue a s.7 Data Protection Act Subject Access Request.
Very often they will slip up or deliberately try to conceal information that is yours of right. If you think you have a strong basis for complaint to the ICO you can do so here. Click on the image for access.