Watford Community Housing is committed to protecting the privacy of, and information security relating to, our Data Subjects (our customers). The purpose of this policy is to outline our approach to protecting the personal data we collect, process, hold and share as a Data Controller about our Data Subjects and how we communicate this to them.
We take our customers’ privacy seriously and are committed to protecting their information through a range of measures including policies and procedures which set out our approach to data protection and information security. We implement sufficient organisational and technical control measures to protect and safeguard all personal information under our control and keep up-to-date records of our processing activities, decisions taken about our processing activities and our privacy risk assessments.
Legislative and regulatory requirements
General Data Protection Regulation (2016)
Data Protection Act 2018 (together “Data Protection Law”)
Privacy and Electronic Communications Regulations (2003)
Regulator of Social Housing Governance and Viability Standard (para 1.1) : “Registered providers shall ensure effective governance arrangements that…… comply with all relevant law.”
Scope and definitions
This policy covers the personal information we process about our various Data Subjects (as defined below).
A company, organisation or individual who can decide why and how they will process personal data; they will decide whether to collect the data in the first place, what to collect, whom to share it with and how long to keep it.
The person the personal data is about. As a Group we have relationships with various Data Subjects including our tenants, leaseholders, shared owners, private market renters, staff, Board and Board Committee members, Gateway Membership Team, contractors and suppliers.
Data Protection Officer (DPO):
An independent data protection expert who advises on and monitors a Data Controller’s internal compliance with UK data protection law and advises them about their obligations under it, including through policy review and staff training/awareness. They may act as the central point of contact for enquiries from the controller’s Data Subjects. Our current DPO is The Data Protection People, a consultancy specialising in data protection matters. They can be contacted via the Watford Community Housing Technology and Information Services team. All written correspondence to our DPO should be directed care of our head office address, and will be passed on by the Chief Technology Officer or Performance and Regulation Manager.
Information about a living person who can be identified from either the information itself or other additional information we may have or receive which is held on computer or in a structured filing system (examples would include : names, contact information including emails and usernames, photographs, vehicle registration plates).
Roles and Responsibilities
Watford Community Housing Group Board:
Is responsible for the Group’s overall compliance with data protection law, the operational responsibility for which is delegated to the Audit and Risk Committee (ARC) (at Board level) and Executive Management Team (at Executive level).
Audit and Risk Committee:
Is the Group’s collective data protection champion, responsible for monitoring the Group’s overall compliance with Data Protection Law and relevant policies. As such it will approve key data protection policies for the Group and receive regular reports on compliance from the Director of Finance and Resources.
Executive Management Team:
Is responsible for the Group’s operational compliance with Data Protection Law and shall approve the main data protection policies for the Group.
Watford Community Housing Staff, Board and Board Committee Members:
Director of Finance and Resources:
Is responsible for regularly updating ARC as to the Group’s data protection compliance including any actual or potential breaches of Data Protection Law under this policy or otherwise.
Watford Community Housing Data Protection Officer:
Our DPO’s role is to ensure this policy is upheld and enforced through appropriate training and guidance to staff and the organisation as a whole.
Personal Data Processed by Watford Community Housing
Watford Community Housing maintains a register of all the personal information the organisation collects, holds, shares and otherwise processes about its various Data Subjects and how this occurs in the form of a Data Asset Register.
The Data Asset Register records how Watford Community Housing collects, stores and processes Personal Data for various purposes. Further information is set out in the Data Asset Register policy and procedure but in the main these purposes are as follows:
- Tenancy records to manage and support our various tenancies including where additional support is provided;
- Rent and service charge account information;
- Repair, maintenance and property adaptation records;
- Customer feedback and satisfaction;
- Records of tenancy changes (e.g. mutual exchange, succession or an application to purchase);
- Information about specific issues affecting our tenants/their household members (e.g. anti-social behaviour, safeguarding concerns, hoarding);
- Information about actual/suspected fraud;
- CCTV footage; and
- Information about our membership.
Leaseholders and Freeholders
- Information about the sale/purchase/assignment of a lease or its extension or about the sale of a freehold;
- Information relevant to a lessee’s mortgage or remortgage application;
- Information relevant to service/repairs/other charges;
- Rent review information.
- Information in connection with managing your business lease/tenancy.
- recruitment and administration records (e.g. performance / absence management and employee relations matters);
- contractual and other benefits (such as pension) information;
- payroll records and bank account information;
- family/next of kin information;
- nationality/immigration information and criminal background;
- driving licence/qualifications and insurance information; and
- information about personal characteristics (e.g. ethnic origin).
Contractors, Suppliers and Other Third Parties
- basic contact details and any other information they may share in routine correspondence with us.
General enquiries and other information received
This section relates to any information voluntarily sent by the Data Subject and not caught by any other section within this policy.
Watford Community Housing will process, store, retain and share personal information, where relevant and appropriate to do so for the purposes of responding to or managing any general enquiries or other information received, volunteered or sent to us by the data subject that is or may be connected to any of our activities.
Information received under this section will be processed, stored, retained or shared in accordance with your rights and our obligations as detailed under Data Protection Law and the general principles contained within this policy as well as our Data Protection Statements and Privacy Notices.
Informing Watford Community Housing Data Subjects about Privacy
Under Data Protection Law Watford Community Housing is required to give the organisation’s Data Subjects certain information in order to make the processing of Personal Data relating to them fair and lawful.
We provide this information under a ‘layered approach’ to ensure that we provide the information at more than one opportunity. We therefore provide this privacy information through the following documents: -
- a Data Protection Statement confirming who Watford Community Housing is (i.e. as Data Controller in the relationship), briefly explaining why we are collecting the Personal Data we are collecting and referring the Data Subject to the more detailed Privacy Notice applicable to them for more information;
- a Privacy Notice (previously called a ‘fair processing notice’) relevant to that Data Subject which, as stated above, explains more about how we process their Personal Data and manage their rights under Data Protection Law. Our core Privacy Notice is our comprehensive ‘Your Privacy Matters’ booklet provided to tenants and Watford Community Housing members;
Data Subjects’ Information Requests
Watford Community Housing recognises the rights of Data Subjects to make a request for a copy of their personal data or for it to be erased, transferred to another organisation, to stop being processed or corrected in some way. Anyone wishing to exercise their rights protected under Data Protection Law should follow the Watford Community Housing Information Rights Policy and Procedure a copy of which is available on request.
Website, Cookies and IP addresses
You can find more information about cookies at http://www.allaboutcookies.org/
An Internet Protocol (IP) address is a set of numbers which is automatically assigned to a visitor’s computer whenever they log on to their internet service provider or through their organisation's computer network. Their computer is identified by the IP address assigned to it during their session on the Internet.
Watford Community Housing and/or third-party companies acting on its behalf may collect IP addresses for the purposes of systems administration and to audit the use and activity of the website.
Watford Community Housing does not link a visitor’s IP address to any other personal information that may be held about them. Therefore, the visitor to the website remains anonymous to us.
Watford Community Housing’s website uses a technology called 'cookies'. Cookies are small computer text files placed in the visitor’s computer's memory by the computer which provides or 'hosts' the website. Cookies are not spyware or a computer virus but are used to make surfing the internet easier.
Watford Community Housing only uses Session Cookies on its website for the purpose of maintaining the site, to improve functionality and delivery of the webpage on the device that you are viewing the webpage from. They can also be used to track the total number of visits to the website for the purpose of improving the services that we offer.
Session cookies are temporary and are erased when you close your browser. They do not store any personal information about the visitor, their computer, visit or browsing history.
Watford Community Housing uses Google Analytics for our website, that also uses first party cookies, to improve the performance and user experience on our website and for our own marketing purposes to enhance the content on the site. These cookies use information in aggregate form and use the minimum default rather than recommended settings. This is to ensure that the minimum amount of information is received by Google and an approach taken to maximise your privacy protection.
Google stores cookie information on servers located in the United State and does not associate your IP address with any other data held by Google.
Visitors to the website have the ability to accept or decline cookies. By default all cookies are disabled. By accepting the cookies, you consent to the processing of data about you by Watford Community Housing and Google Analytics for the purposes set out above.
You also have the ability to accept or decline cookies through your internet browser software and can modify these settings to accept, decline and remove cookies if you prefer. Please refer to your internet browser’s instructions or help screen to learn more about these functions.
Other privacy matters relating to the website
Personal information is captured through the website when visitors voluntarily submit information about themselves, for instance when they submit a CV or a request for further information. This information is only used for the specific purpose for which it is submitted for.
Watford Community Housing's website may provide links to third party websites as a service to our users. The privacy statement described in this policy does not apply to those sites. Users should ensure they check the legal and privacy statement posted on each site they may link to.
We may occasionally update the privacy statements set out within this policy. We encourage visitors to periodically review the statements to stay informed about how we are helping to protect the information we collect. Visitors’ continued use of the website constitutes their agreement to the privacy statement and any updates thereto.
Data Subjects’ Right to Complain
If you feel that our handling of your Personal Data under this policy and/or that your right to privacy has been compromised, you should contact our Data Protection Officer (DPO) care of our head office address (Watford Community Housing, Gateway House, 59 Clarendon Road, Watford WD17 1LA).
If you are not satisfied with the response from Watford Community Housing or on its behalf, you have the right to lodge a complaint with the supervisory authority. In the United Kingdom this is the:
Information Commissioner's Office
0303 123 1113