Crosby Housing Association Ltd recognises the importance of respecting your personal privacy and the need to have in place appropriate safeguards surrounding the processing of personal data. As a company who has access to and controls your personal data (a ‘Data Controller’) we are required to provide you with certain information about how we collect, store, destroy and otherwise deal with (also known as ‘process’) your personal data. We are also registered with the Information Commissioner’s Office (‘ICO’) as a Data Controller.
Who is the data controller and what are their contact details?
The Data Controller is the company that decides the purpose for and the way in which any personal data is processed. Crosby Housing Association Ltd is a data controller and is registered with the ICO. Details are set out below:
Crosby Housing Association Ltd
10 Church Road
Waterloo
Liverpool
L22 5NB
ICO registration number: Z6786706
Registered as a Community Benefit Society with FCA registration number: 19175R
Housing Regulator registration number: L1719
If you are in any doubt as to who your Data Controller is please contact us in writing at the above address.
Do we have a Data Protection Officer?
Crosby Housing Association Ltd. does not have a designated Data Protection Officer. However, the Association can be contacted with queries and information requests in writing at:
Crosby Housing Association Ltd
10 Church Road
Waterloo
Liverpool
L22 5NB
What information do we collect/receive about you and how?
We hold personal data that may include your household’s names, dates of birth, contact details and records of any transactions such as payments or requests for information as well as sensitive personal data such as gender, ethnicity, religion or other beliefs, sexual orientation and medical history.
We may collect information about you in a variety of ways including (and this list is not exhaustive):-
Please be aware that if you provide us with personal information relating to members of your family or your associates we will assume that you do so with their knowledge and consent.
It is important that you notify us of any changes to your personal information as soon as possible so that we can contact you easily.
What is the lawful basis under which we use your data?
Processing personal data is lawful if the data subject (eg. you as our customer) has given consent or where the processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Processing of your data is lawful if you apply for housing with us, apply for a job with us or have been housed by us. We do not need your explicit consent to process your data in these circumstances.
Do I have to provide this information and what will happen if I don’t?
Where you are a tenant of ours we will use your personal data to contact you about your rent, repairs or other housing management issues. The consequences of not providing accurate and up to date personal data in this example may mean that we could not properly and effectively manage your tenancy under the agreement we have with you.
Who the personal information relates to
We collect and hold personal information about:
How will we use the information about you?
We use your personal information to:
Sensitive personal data
Certain personal information is classified as ‘special categories data’ and means any personal data which tells us about your ethnic origin, political opinion, religious or philosophical beliefs, trade-union membership or anything revealing your genetic data, biometric data or anything which has the purpose of uniquely identifying you, anything concerning health or data relating to a person’s sex life or sexual orientation, allegations of criminal offences and criminal convictions and offences.
We minimise our holding and use of special categories data but, given the services we provide, there are times when we use it to understand our customers and their needs better, for example when providing accommodation for disabled persons or those with problems around substance abuse, when resolving neighbourhood disputes involving alleged criminal activity or when helping someone to access care services. When we collect specific sensitive data we will notify you of how we will use it, including who it may be shared with, and seek your consent to this.
Will you be using my information to make any automated decisions?
We do not propose to use your personal data to make any automated decisions. Should our policy change, we will write to you and tell you this.
Who we will share/send your information to:
Your personal information will be kept secure and confidential and access to it by staff of Crosby Housing Association Ltd is managed and monitored. We may share information with contractors or agencies we work with such as Local Authorities, Social Services, Police, other social landlords and any other situation where we are required by law and/or where we believe it is in your or the public’s interest to do so.
We may share your data with companies who provide cloud-based information services and systems. Any third party asked to process your personal data on our behalf will be bound to strict terms and conditions outlined by us and will not be permitted to share your data with other organisations.
We will not transfer your data with any organisation outside of the European Economic Area.
The list below sets out specific examples of where we may share your information but this is not an exhaustive list. In processing your personal data we may:-
Changes to this privacy notice
This privacy notice will be updated from time to time to reflect any changes either to the way in which we operate or changes to data protection legislation. We will bring any significant changes to your attention.
How long will you store my personal data for?
We store personal data in line with guidance from the National Housing Federation, a copy of which is available on request. Examples are:
Applications for accommodation: kept for 6 years after offer accepted;
Tenancy files: kept for 6 years after the end of the tenancy;
Application forms for shortlisted job applicants: 1 year;
Application forms for non-shortlisted job applicants: 6 months.
How will my personal data be stored and kept secure?
The Associaiton applies technical measures to keep personal data stored securely on information systems, including controls over the organisation’s information network perimeter, such as firewall, anti-virus software and back-up/replication measures to prevent data loss. Access to personal data held on systems is controlled by password and can be monitored by audit records. Sharing of data with third parties is controlled by the use of secure transfer measures such as encypted email and secure file transfer protcols.
The data held on mobile devices (smart phones, tablets and lap-tops) used by staff are encrypted. Staff are equipped with lockable bags for carrying personal data files outside of the office and we apply a clear desk policy in our offices.
The technical measures are supported by training and awareness raising exercises to ensure that staff understand the risks and their responsibilities for keeping personal data secure.
Your rights in relation to the personal data you provide:
We have set out below some information on the rights you have under the General Data Protection Regulation effective from 25 May 2018. More information can be found by visiting the ICO website at www.ico.org.uk.
You have the right to:
Crosby Housing Association Ltd
10 Church Road
Waterloo
Liverpool
L22 5NB
If you have any cause for complaint about our use of your personal data, please contact us using the details provided in section 2 above and we will do our best to solve the problem for you. If we are unable to help you also have the right to lodge a complaint with the ICO; please go to www.ico.org.uk.
Accessing your information
You have the right to access any personal information we hold about you. There is a formal process for this known as a Subject Access Request (SAR). If you would like to make a SAR please send a request in writing to our registered office address above. We may require some proof of identity from you before releasing information. From 25th May 2018, we are required to provide this information within one month of receiving your request and will not normally make a charge for this service. However, we may make a charge where we consider the amount of information you have requested to be complex or if you make numerous requests, and we may then take up to three months to fulfil your request.
Website Privacy Policy
For more details on how we treat information that we gather about your activities on our websites please view our Website Privacy Policy here.
However you contact us, whether it be by phone, letter, email or in person, you can expect to receive a high quality, personalised service.
T: 0151 920 7300