1. Introduction
We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and share personal data about residents, applicants, visitors, suppliers, and website users. It also tells you about your privacy rights and how the law protects you.
2. Scope & Who the Policy Covers
This policy applies to personal data we process when you:
Apply for accommodation or support services with us
Reside in or visit our properties
Use our website or contact us via email/phone
Work with us as a supplier, contractor or partner
3. What Data We Collect
We may collect and process the following kinds of personal data:
Identity data: name, date of birth, gender, title, etc.
Contact data: address, phone number, email address
Tenancy & residence data: tenancy history, accommodation details, support plan information
Financial data: payment information, billing and invoices
Technical and usage data: IP address, browser type, device, website usage
Support and wellbeing data: where relevant, details of support needs, health issues (only when necessary)
Marketing & communications data: preferences in receiving communications
4. How We Collect Your Data
We collect data:
Directly from you (e.g., application forms, tenancy agreements, website contact form)
From third parties (e.g., local authorities, social services, referral agencies)
Automatically through our website (cookies, analytics)
5. Why We Use Your Data — Purposes & Legal Basis
We will use personal data to:
Provide accommodation, support services and manage tenancies (legal basis: contract / legitimate interest)
Communicate with you (contract, legitimate interest)
Process payments and billing (contract / legal obligation)
Comply with our legal obligations (legal basis: legal obligation)
Improve our services, perform analytics and manage IT (legitimate interest)
Where relevant, obtain consent for marketing but you may withdraw consent at any time
6. Sharing Your Data
We may share your personal data with:
Local authorities, social services, health & -care providers (where you have consent or it is required)
Service providers and suppliers who assist us (e.g., IT support, maintenance)
Regulatory bodies and law enforcement when required by law
We require all third parties to handle your data securely and in accordance with applicable data-protection law. GOV.UK+1
7. International Transfers
We do not typically transfer your personal data outside the UK/EEA. If we do, we will ensure appropriate safeguards (e.g., standard contractual clauses) are in place.
8. Data Retention
We will retain your personal data for as long as is necessary for the purposes set out in this policy, including to satisfy legal, regulatory, tax or accounting requirements. After this, data will be securely deleted or anonymised.
9. Your Rights
Under UK GDPR you have rights including:
Access your personal data
Correct inaccurate data
Erase your data (“right to be forgotten”) where lawful
Restrict processing
Object to processing
Data portability
To exercise any of these rights, please contact us at the email above. We will respond within the statutory time-limits.
10. Cookies and Website Tracking
We use cookies and similar technologies to provide and support our website. For full details refer to our Cookie Policy (link). Cookies help us improve functionality, understand usage and customise the website experience.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Access to your data is restricted to those who need it to perform their roles.
12. Children
Our services are not primarily aimed at children under 16. If we become aware that we hold personal information about a child under 16 without appropriate consent, we will take steps to delete that information.
13. Changes to This Policy
We may update this policy from time to time (e.g., to reflect changes in law, services or technology). The “Last updated” date will be revised. We encourage you to read this policy periodically.
14. Complaints
If you have concerns about how we process your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO) (see ico.org.uk for detail