The purpose of this notice
The privacy notice describes how we collect information and use the personal data we have about you. This is in accordance with the General Data Protection Regulation 2018 (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary regulation, as amended or updated from time to time in the UK called Data Protection Legislation.
Please read the following carefully to understand our practices about your personal data and how we will treat it.
Partners Foundation Ltd are a Voluntary Not for Profit Supported Housing Provider and Registered Social Landlord. Our registered address is 2nd Floor, CT3 Building, Wigan Investment Centre, Waterside Drive, Wigan, WN3 5BA
Under GDPR we are the ‘Data Controller’. This means we are responsible for deciding how we hold and use personal data about you. We are required under Data Protection Legislation to advise you of the information contained in this Privacy Notice.
Our data protection point of contact is Juli Round who is responsible for assisting with enquiries in relation to this privacy notice or our treatment of your personal data. Should you wish to contact our data protection point of contact you can do so by ringing 01706 759330, email firstname.lastname@example.org or write to us at the above address.
How we may collect your personal data.
We collect personal data about you, for example, when:
- You request a proposal from us in respect of the services we provide,
- Engage us to provide our services and during the provision of those services,
- You contact us by email, telephone or post.
The kind of data we hold about you.
The information we hold about you may include the following:
- Your personal details, such as your name, address, date of birth, national insurance number,
- Details of contact we have had with you or a third party on your behalf in relation to the services we provide,
- Details of services you have received from us,
- Our correspondence and communications with you and vice versa.
How we use personal data we hold about you
We may process your personal data for purposes necessary for the performance of our contract with you and to comply with our legal obligations.
We may process your personal data for certain additional purposes with your consent or with the consent of the person who represents you, and in these limited circumstances where your consent is required for the processing of your personal data you have the right to withdraw your consent at any time.
Situations in which we will use your personal data
We may use your personal data to carry out our obligations arising from any agreements entered between you and us.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
When assessing what retention period is appropriate for your personal data, we take into consideration the following:
- The requirements of the services we provide
- Any statutory or legal obligations
- The purposes for which we originally collected the personal data
- The lawful grounds on which we based our processing
- The types of personal data we have collected
- Whether the purpose of the processing could reasonably be fulfilled by other means.
Change of purpose
Where we need to use your personal data for another reason, other than for the purpose for which we collected it, we will only use it where that reason is compatible with the original purpose.
Should it be necessary to use your personal data for the new purpose, we will notify you and communicate the legal basis which allows us to do so before starting any new process.
We will share your personal data with third parties to enable us to perform the services we provide and to comply with agreements made between you and us, and where we are required to by law.
Transferring personal information outside the European Economic Area (EEA)
We will not transfer the personal data we collect about you outside the EEA.
We take the security of your personal data seriously. We have internal policies and controls in place to protect your personal data against accidental loss, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those who have a business ‘need to know’. They will only process your personal information on our instructions and they are subject to a duty of confidentiality, and are obliged to implement appropriate technical and organisational measures to ensure the security of information
If there is any suspected security breach, we will notify you and any applicable regulator of a suspected breach.
Rights of access, correction, erasure, and restriction
You have a duty to inform us of any changes.
It is important the personal data we hold about you is accurate and current. Should your personal data change, please notify us of any changes using the contact details above.
Under certain circumstances, by law you have the right to:
- Request access to your personal data. This means you can receive details of the personal data we hold about you and to check that we are processing it lawfully.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove personal data where you have exercise your right to object to processing.
- Request the restriction of the processing of your personal data. This enables you to ask us to suspend the processing the personal data about you or for it to be only used in certain circumstances.
Changes to this notice
Any changes we may make to our privacy notice in the future will be notified on the Partners Foundation website.