Housing and Care 21 (“We”) are committed to protecting and respecting your privacy. This privacy notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
Please read the following carefully to understand our views and practices regarding your personal data and how we treat it.
Who are we?
We are the data controller. We are an exempt charitable housing association. We are incorporated under the Industrial and Provident Societies Act 1965 (Registration number IP16791R) and under the Housing and Regeneration Act 2008 (Number L0055). Housing & Care 21 is also a registered society under the Co-operative and Community Benefit Societies Act 2014.
We take privacy seriously
This privacy notice tells you what to expect when Housing and Care 21 collects your personal information. Please click here to view our Data Protection Policy.
Housing and Care 21 complies with the General Data Protection Regulation (GDPR) 2018 in relation to personal information that you give to us and ensures that it is not misused. The Regulation defines a set of rules and guidelines we must follow when handling your information, these are referred to as the General Data Protection principles. These principles state that personal information shall be:
a) processed lawfully, fairly and in a transparent manner in relation to individuals;
b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal information that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal information are processed; personal information may be stored for longer periods insofar as the personal information will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals;
f) processed in a manner that ensures appropriate security of the personal information, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How we use your personal information
The personal information you provide us with will be retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law. We do not share personal information with third parties except as necessary to carry out our business or as required by law or other legal processes, and we never sell your personal information or pass it to marketing companies. Personal information collected by us may be transferred to other wholly-owned subsidiary companies where it is necessary to meet the purpose for which it was submitted.
Information we may hold about you
The information we hold on our records concerns our relationship with you. For example:
- We hold names & dates of birth, photographic ID and information about your previous housing circumstances to assess housing applications and help prevent tenancy fraud.
- We hold contact details for you so we can communicate with you by your preferred means, and keep you informed about services we offer which may be useful to you.
- We record information about your needs (for example if you have a carer or social worker; if you need adaptations in your home; if you need large print or translated text) to ensure that we take account of any support needs in our dealings with you, and to improve our communications with you.
- We record information to enable us to provide housing management services. For example, we record reports of anti-social behaviour; complaints; change in circumstances (for example when your employment status changes etc.) and information about housing options (e.g. if you have a medical need which means you need to move).
- We keep financial records about the amount of money you have paid us; any amount(s) outstanding and action is taken to recover the money you owe.
- We may hold information about you if you are engaged with our additional guidance and support services. For example, in connection with access to training and employment we may hold information about your job history and skills and experience, or if we support you to improve your financial circumstances, we may hold information about your household income and expenditure.
- We may capture your image on our CCTV systems if you visit a property, office or court which is covered by this facility. Any CCTV recordings will be held in accordance with our document retention policy before being erased.
- We record the findings of surveys and other research to help us improve our service to customers. The information you provide will be anonymous unless you agree that we can use your details.
This list is not exhaustive, as we hold records of most contacts we have with you, or about you, and we process this information so we can deliver services to you. Generally the information we hold will have been provided by you (on application or enquiry forms or when we communicate with you), but we may also hold information provided by third parties where this is relevant to your housing circumstances e.g. from social workers and health professionals (such as doctors and occupational therapists).
We will only ask for personal information that is appropriate to enable us to deliver our services. In some cases you can refuse to provide your details if you deem a request to be inappropriate. However, you should note that this may impact our ability to provide some services to you if you refuse to provide information that stops us from doing so.
Sharing your information
Housing and Care 21 will only disclose your personal information to third parties with your consent, however, we may sometimes need to share information without your consent to comply with any legal obligation or to fulfil the purposes for which it was submitted.
We will not transfer your personal information outside of the EU unless there is adequate protection in place, i.e. membership of the Privacy Shield Scheme.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:
- Within Property Sales and Lettings – we process data using consent (where necessary), legitimate interests or a contractual obligation as a legal basis to process your data in the following instances:
o Online Enquiry Forms
o General Sales Enquiries via email or telephone
o Corporate Enquiries via email or telephone
o Enquiries in writing
o Enquiries via the telephone
- • Within the Communications Team – we process data using consent (where necessary), legitimate interests or a contractual obligation as a legal basis to process your data in the following instances:
o Conference participants
o Resident information
Promotional Offers from Us
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or have received services from us and, in each case, you have not opted out of receiving that marketing.
We will get your express opt-in consent before we share your personal data with any company outside Housing and Care 21 for marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by contacting the Data Protection Officer at any time.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a service or other transactions.
Right to data portability
When processing your personal information to fulfil a contract to which you are a party, you have the right to request electronically held personal information to enable easy transfer to another organisation. Where it is technically feasible you may request that the information be transferred directly between organisations. Once the request is made, the information should be provided to you within 1 month.
Right to be forgotten
You have the right to have the information we hold on you deleted where the use of that information would no longer meet the requirements of the General Data Protection Regulation. Once the request is made, the information must be deleted within 1 month.
Where the information in question has been made public or transferred to a third party, we must also take reasonable steps to inform those third parties about the request for deletion including any links to, or copies of that personal information.
The above does not apply when it is necessary to keep the information in relation to legal proceedings, to comply with a statutory obligation, or to perform tasks in the public interest.
Right to rectification, to object and to the restriction of processing
- Rectification: you have the right to have inaccurate and incomplete information about you rectified and completed.
- Right to object: in certain circumstances, you have the right to object to your personal information being processed. Depending on the legal basis for processing, this may either be an absolute right (i.e. direct marketing), or may be subject to us being able to demonstrate compelling legitimate grounds which would override your own interests, or where the information is needed for the purposes of legal claims.
- Right to restriction: you have the right to request that information is no longer processed (other than it being stored) in particular circumstances, such as when we are dealing with the correction of any inaccurate information; the processing is unlawful but you object to its erasure; or the information is no longer needed but you require the information to be kept for the purposes of a legal claim.
Where we are relying on consent to process your personal data, you have the right to withdraw consent at any time, so long as, the information is not part of a statutory or contractual requirement/obligation. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. We would like you to be aware that this may affect the quality of service we can provide to you. For example, we need to know the composition of your family so that we can allocate a suitably sized property to you.
You have the right to object to direct marketing from the association, this may include post repair surveys, tenant satisfaction questionnaires, tenant profiling etc. To withdraw consent at any time, please contact the Data Protection Officer.
How can I see the information you hold about me?
Housing and Care 21 recognises its responsibility for protecting the privacy of your personal information. You have a legal right to see the personal information we hold about you; this is called a subject access request and by law we have 1 month to respond to you. We will seek to comply with your request however there may be some circumstances where it may not be possible to comply with your request fully, i.e., we may refuse or charge for requests that are manifestly unfounded or excessive. If your request is refused, we will write to you within 1 month to advise, you will then have the right to complain to the supervisory authority and to seek a judicial remedy.
If you wish to submit a subject access request, please contact the Data Protection Officer or click here.
How long does the Group keep your information?
We have a document retention policy in place which outlines how long we keep different types of information for: please click here to view the Document Retention Schedule. This policy is regularly reviewed based on good practice guidance issued by the National Housing Federation.
Information we collect via our website
We collect various types of information from visitors to our websites.
We do not pass on any personal information you have given us to any other site, the system will record information if volunteered to us by you, for example on the online forms. This will be treated as confidential.
Our website contains links to other websites. This privacy notice applies only to our site. If you move to another site that collects information you should read their privacy statement.
Change of Purpose
We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact the Data Protection Officer.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
What we may need from You
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Changes to this Privacy Notice
We keep our privacy notice under regular review and will place any updates on our website; you will be notified of any major changes to this policy.
You have the right to complain to the Information Commissioner’s (ICO) Office if you think there is a problem with the way in which Housing and Care 21 are handling your information. To contact the ICO, please call 0303 123 1113 or visit their website at https://ico.org.uk/. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
The role of Data Protection Officer is carried out by the Senior Information Governance Officer. If you have any questions about the administration of your personal information please contact us on 0300 790 1326, by email at firstname.lastname@example.org or post:
Data Protection Officer,
Housing and Care 21,
51-53 Hagley Road,