This Privacy Notice explains how Havenmore Housing Association CIC collects, uses, stores and shares personal information. It applies to tenants, applicants, former tenants, representatives, family members, advocates, professionals and other people who contact us or are involved in our housing service.

UK GDPR Data Protection Act 2018 Tenant information Safeguarding and housing management

Who we are

Havenmore Housing Association CIC is the controller for the personal information we use for our housing services.

Information we collect

The information we collect depends on your relationship with Havenmore and the reason we need it.

We may collect:
  • name, address, date of birth and contact details;
  • tenancy, licence, room, property and move-in details;
  • rent, service charge, payment, arrears and Housing Benefit information;
  • appointee, attorney, deputy, advocate, family or representative details;
  • local authority, social worker, commissioner, care provider and professional contact details;
  • communication needs, accessibility needs and reasonable adjustments;
  • repairs, maintenance, access and property condition records;
  • complaints, feedback, incidents and safeguarding information;
  • risk information relevant to tenancy sustainment, shared living, property safety or safeguarding;
  • correspondence, call notes, emails, forms, documents and records of contact.

Where information comes from

We may receive information directly from you or from other people involved in your housing, care, support or placement.

Sources may include:
  • you;
  • family members, advocates or representatives;
  • appointees, attorneys or deputies;
  • local authorities, social workers, commissioners and Housing Benefit teams;
  • care and support providers;
  • NHS or mental health professionals where relevant;
  • contractors, maintenance providers and compliance suppliers;
  • police, safeguarding teams, emergency services or regulators where relevant;
  • publicly available sources where needed for lawful purposes.

Why we use information

We use personal information to provide, manage and improve our housing service.

We may use information to:
  • assess referrals and housing suitability;
  • manage tenancies, licences, rooms and properties;
  • issue tenancy information, rent schedules and housing documents;
  • manage rent, service charges, payments, arrears and Housing Benefit liaison;
  • arrange repairs, maintenance, inspections and safety checks;
  • manage access arrangements and reasonable adjustments;
  • respond to complaints, feedback, incidents and service requests;
  • respond to safeguarding concerns or emergencies;
  • work with authorised representatives and professionals;
  • meet legal, regulatory, financial, insurance and audit requirements;
  • monitor service quality and improve how we work.

Lawful bases

Under UK GDPR, we must have a lawful basis for using personal information. The lawful basis depends on the purpose.

We may rely on:
  • Contract: where information is needed to enter into or manage a tenancy, licence or housing agreement.
  • Legal obligation: where the law requires us to use or keep information, such as health and safety, safeguarding, company, tax, accounting or data protection duties.
  • Legitimate interests: where we need to manage housing services, protect property, recover rent, manage risk, handle complaints, improve services or communicate with relevant parties, and this is not overridden by individual rights.
  • Vital interests: where information is needed to protect someone’s life or immediate safety.
  • Consent: where consent is appropriate, for example some representative communications or optional communications. Consent can usually be withdrawn.

Special category data

Some information is more sensitive and has extra protection under data protection law.

This may include:
  • health information;
  • disability or accessibility information;
  • mental health or support-related information;
  • safeguarding information;
  • information about racial or ethnic origin, religion, sex life or sexual orientation where relevant and necessary;
  • information linked to vulnerability, risk or care and support needs.

Where we use special category data, we must have both a lawful basis under Article 6 UK GDPR and a special category condition under Article 9 UK GDPR. We will only use this information where necessary and proportionate.

Relevant conditions may include:
  • explicit consent where appropriate;
  • substantial public interest, such as safeguarding or protecting people at risk;
  • vital interests where someone cannot give consent and there is serious risk;
  • legal claims or legal obligations where relevant;
  • health or social care purposes where appropriate and lawful.

Who we share information with

We only share personal information where lawful and necessary.

We may share information with:
  • local authorities, Housing Benefit teams, social care teams and commissioners;
  • DWP or other public bodies where relevant to housing costs or benefits;
  • care and support providers where housing and support need coordination;
  • appointees, attorneys, deputies, advocates or authorised representatives;
  • contractors, maintenance providers and property compliance suppliers;
  • emergency services, police and safeguarding teams;
  • insurers, legal advisers, auditors, accountants and professional advisers;
  • regulators, courts, tribunals or public authorities where required or lawful;
  • IT, software, hosting and document management providers supporting our systems.

Safeguarding and emergencies

Safeguarding and emergency situations may require information to be shared quickly.

  • We may share information without consent where this is necessary to protect someone from harm, prevent a crime, respond to an emergency, or meet a legal duty.
  • We will seek consent where appropriate, but we may not do so where this would increase risk or delay protective action.
  • Safeguarding records are handled carefully and shared only with those who need to know.

Contractors and repairs

We may need to share limited information with contractors or suppliers so they can carry out repairs, maintenance, inspections or safety checks.

This may include:
  • name, address and contact details;
  • access arrangements;
  • communication or safety information needed for the visit;
  • information about the repair or property issue;
  • details of a representative or support contact where needed to arrange access.

We do not share more information than is needed for the work.

Representatives and authority

Some tenants want or need another person to help communicate, understand information or manage housing matters.

  • We may ask for consent or evidence of authority before sharing information or taking instructions from someone else.
  • This may include appointeeship, Lasting Power of Attorney, deputyship, advocacy arrangement or written consent.
  • Where mental capacity or safeguarding issues arise, we may need to involve relevant professionals or follow legal safeguards.

How long we keep information

We keep personal information only for as long as needed for the purpose it was collected and to meet legal, financial, insurance, safeguarding, audit and dispute-resolution requirements.

Retention depends on:
  • whether you are an applicant, tenant, former tenant, representative or professional contact;
  • the type of information;
  • legal limitation periods;
  • financial and accounting requirements;
  • safeguarding, complaint, incident or legal risk;
  • whether there is an ongoing dispute, claim or investigation.

Where information is no longer needed, we will delete it securely, anonymise it, or archive it in line with our retention controls.

How we keep information safe

  • We restrict access to people who need the information for their role.
  • We use secure systems and access controls.
  • We train staff on confidentiality and data protection.
  • We review and manage data risks where needed.
  • We take action where there is a suspected data breach.

Your rights

You have rights under data protection law. These rights may depend on the lawful basis and the circumstances.

You may have the right to:
  • ask for a copy of personal information we hold about you;
  • ask us to correct inaccurate information;
  • ask us to delete information in some circumstances;
  • ask us to restrict how we use information in some circumstances;
  • object to some uses of information;
  • withdraw consent where we rely on consent;
  • complain to the Information Commissioner’s Office.

We may need to confirm identity before responding to a rights request. Some rights are not absolute, and we may need to keep or use information where the law allows or requires it.

Questions and complaints

Contact us if you have questions about this Privacy Notice or how we use personal information.

If you are unhappy with how we handle your information, you can contact the Information Commissioner’s Office. The ICO is the UK regulator for data protection.

  • ICO website: ico.org.uk
  • ICO phone: 0303 123 1113