Privacy notice - current and former customers
How we collect your information
We collect information from customers from a variety of sources, including when you:
- apply for one of our properties or services (you may be asked to undergo a pre offer assessment)
- complete one of our application forms, tenancy agreements, licences or leases
- call us, write to us, e-mail or meet with us
- respond to a survey
- visit our offices or some of our other properties (we operate CCTV systems at our offices and at some of our properties for the detection and prevention of crime)
Phone calls to our 0300 123 2222 number are recorded for training and monitoring purposes and our recordings are held for a period of six months.
Calls are not recorded when you give us card details to make a payment for your rent or other service.
We may also take photographs at our events, at our properties and in our communities to use for general marketing and publicity. However, photographs of individuals will only be used for those purposes with your consent.
We may receive information about you from third parties including information from:
- your council, relating to your housing needs
- your benefits office, relating to your benefits
- prior landlords and credit agencies when you apply for housing
- Police, welfare or support organisations dealing with you
- Councillors, MPs or other representatives acting on your behalf / instruction
- financial institutions when you apply for our services
When one of our residential leasehold properties (e.g. a property previously sold by us under the right to buy) is sold on the open market the new leaseholder becomes one of customers.
The purchaser’s solicitor is required to notify us that a sale has taken place. They are not required to provide any information such as date of birth, gender, etc.
What data do we collect from customers?
Our customers include tenants, residential and commercial leaseholders and shared ownership customers. When you apply to become a customer we will ask for:
- your full name (and proof of your identity / photo ID).
- your date of birth.
- your National Insurance number (your unique identifier).
- your contact details (phone, e-mail or correspondence address).
- details of anyone authorised to act on your behalf (if applicable).
- basic details (name, gender and date of birth) of all household residents.
- banking details if you pay your rent by Direct Debit.
- proof of your to eligibility housing and if you have any interest or equity in any other property.
Whilst you are our customer we may process other personal information to manage your tenancy. This will vary on a case by case basis but may include:
- Financial information. We may use this to help resolve arrears payments and optionally to provide welfare, benefits and debt advice as a free service to help you budget and pay your bills.
- Red flag information. Where the safety of our staff is believed to be at risk, usually where a customer has threatened staff, we may record this information on your record so that risks to our staff can be minimised.
We may also ask for your consent to collect special categories of data as explained below.
If you provide us with personal information relating to members of your family or your associates we will assume that you do so with their knowledge and their consent to the collection and processing of the information.
It is important that you notify us of any changes to your personal information.
How we use personal information and the lawful basis for processing
Most of the information we require from you is used to enter into or manage a tenancy, leasehold agreement or other contract between you and us.
Please read your tenancy agreement, lease, licence or contract carefully for specific details as ‘performance of a contract’ is usually the lawful basis for processing your information as set out in data protection law.
The processing we conduct can be summarised as:
- managing your account charges and payments, including arrears
- managing the repairs, maintenance and adaptations of our properties
- ensuring tenancy (or contract) conditions are complied with, such as dealing with anti-social behaviour or fraud
- complying with relevant legislation and regulation.
The other lawful basis for processing your data (as defined in data protection law) that we regularly rely on is ‘legitimate interest’ (processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject).
Our legitimate interests may include the need to:
- eliminate discrimination or advance equality of opportunity
- prevent and detect crime
- conduct research and statistical analysis to help improve our business processes and the services offered to our customers
- evaluate our performance against other benchmarks.
When your personal data or information is used for statistical or research purposes it is anonymised or pseudonymised so that you cannot be identified. We conduct surveys regularly and periodically relating to our services in order to gauge satisfaction and make improvements based on feedback.
Where you believe that our legitimate interests are overridden by your interests, rights or freedoms as the data subject you have the right to object. Find out more about your right to object Your Data, Your Rights.pdf [pdf] 592KB
We also seek your consent to hold some information about your lifestyle.
We will always give you a ‘prefer not to answer’ option when we ask for information about your lifestyle. Please note however that this information helps us to improve services.
Other lawful bases
In exceptional circumstances there may be another lawful basis for processing your data for example ‘compliance with a legal obligation’ or to ‘protect the vital interests of a data subject or another person.'
Special categories of data
Under Data Protection law certain categories of personal information are classified as sensitive or special categories of data. These categories are data relating to:
- racial or ethnic origin
- political opinions
- religious or philosophical beliefs
- trade union membership
- data concerning health
- data concerning a natural person’s sex life or sexual orientation
We minimise the use of special categories of personal data but, given the services we provide there are times when we may have a legitimate interest in processing special categories of data and therefore, we may ask for your consent to collect and process this data.
We will always give you a ‘prefer not to answer’ option when we ask for any of the special categories of data above. Please note however that if you choose not provide the information we may not be able to provide all our services to you.
Providing us with special categories of data helps us deliver our services when providing accommodation for disabled people (including adaptations), people with substance abuse problems or when helping someone to access care services.
Collecting special categories of data also helps us ensure that we meet the Public Sector Equality Duty. This requires us, as a social housing provider, to give due regard to the need to eliminate discrimination, advance equality of opportunity and foster good relations. This mean that we may ask you for information about their ethnicity, religion or belief and so on but our responsibilities under the Public Sector Equality Duty do not over ride your right to privacy.
When we collect specific sensitive data we will notify you of how we will use it, and we will tell you who it may be shared with.
We do not process genetic or biometric data for the purpose of uniquely identifying a natural person.
Information relating to children
We recognise that under data protection law children are identified as ‘vulnerable individuals’ and deserving of ‘specific protection.'
We record some data about children if they are resident in one of our properties, including their name and date of birth. This is required for checking the property is not overcrowded and to assess other tenancy management issues where all householders and ages are required to be known.
We may receive and process data about children if we are involved in the housing and tenancy aspects of a welfare case as part of a multi-agency working solution.
Complaints and enquiries
If you make a complaint or enquiry we may collect and store personal information in relation to it. We will keep your information secure and use it only for the purpose it was collected. When the complaint is resolved or the enquiry is completed, we will retain the information in accordance with our Data & Document Retention Policy and then destroy it.
We operate CCTV systems at our offices and in public areas at some of our properties. Wherever CCTV systems are operating we will place a notice showing that the scheme is in operation and controlled by us.
Our CCTV systems deter crime and promote public safety by helping to identify and prosecute criminal offenders. These systems operate continuously and recordings are held for one month.
You can ask for a copy of any CCTV images taken of yourself by making a 'subject access request'. See Your Data, Your Rights.pdf [pdf] 592KB
We carry out an impact assessment for all locations where we user CCTV. This helps ensure that our use of CCTV is appropriate and proportionate to issues of crime and public safety we are seeking to address and minimises intrusion into individual rights to privacy.
Information we collect via our website
When you visit our website we collect standard internet log information, such as your IP address, host name, browser type and operating system.
Links to other websites
Our website may contain links to other websites of interest.
If you follow a link from our website to an external site, we recommend that you check the privacy notice of that site before giving any personal details.
Sharing your information
Your personal information will be kept secure and confidential. Usually we will not disclose personal data without consent but we may share information between our group of companies, with contractors or third parties and other agencies we work with, including local authorities, social services, the Police, other social landlords and other agencies when we believe it is in yours or the public’s interest to do so, or as required by law.
In particular, please be aware:
- Current or forwarding addresses may be shared with utility companies and Council Tax offices to ensure billing details are correct.
- If you default upon any tenancy/licence conditions information about you may be provided to authorised debt recovery agencies, to enable them to recover the debt. This may affect future applications for tenancies, credit and insurance.
- We may discuss your financial situation, rent payments (including any arrears) and any claims made for welfare benefits with; an external debt advice agency, Welfare rights advisor, the housing benefit department or the local authorities housing advice and homeless prevention team to make sure that benefits are paid correctly.
- We share limited personal data with our contractors who are carrying out services on our behalf. Our contractors are required to comply with the law to ensure data is managed appropriately and for specified purposes, including to run our out-of-hours telephone service or to complete emergency, responsive or planned property repairs.
- We may share your information with a language translation service if it is necessary to translate any information into or from a foreign language for you.
- We may need to share personal information with government departments and agencies, with our regulator and auditors, with utility companies or with other organisations and agencies where we are legally allowed to do so.
- We may need to share information with solicitors, agents, mortgage brokers, financial advisors, court agents, surveyors and valuers relating to a property sale.
How long we keep information
Information relating to your tenancy, lease or other contractual agreement will be kept for as long as the agreement is active or where money is owed on the account, and for a period not exceeding six years afterwards. The basic history of who occupied a property and when will be held forever.
When we dispose of information we do so securely.
See my data – our customer portal
The see my data service allows you to check your rent account whenever you want, wherever you are. Our see my data service is encrypted using SSL security.
SSL stands for Secure Sockets Layer, a global standard security technology that enables encrypted communication between a web browser and a web server. It is used by online businesses and individuals to decrease the risk of sensitive information (eg credit card numbers, usernames, passwords, emails, etc.) from being stolen or tampered with by hackers and identity thieves. In essence, SSL allows for a private “conversation” just between the two intended parties.
We want to offer you new ways to contact us and access our services at a time and a place to suit you, on top of the ways you can already contact us. This will include via an improved customer portal where you'll be able to view your account, request a repair and make a payment.
Data matching and analytics
Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information.
Computerised data matching allows tenancy fraud, fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency which requires further investigation.
No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.
We participate in the National Fraud Initiative (NFI) data matching exercise carried out by the Cabinet Office. Our participation in NFI will assist in the prevention and detection of fraud against Merlin and other organisations within the private and public sector.
We participate on a voluntary basis and provide the Cabinet Office with particular sets of data for matching as set out in the Cabinet Office’s guidance.
The use of data by the Cabinet Office in a data matching exercise is carried out with statutory authority. It does not require the consent of the individuals concerned under Data Protection law.
Data matching by the Cabinet Office is subject to a Code of data Matching Practice. Further information on the Cabinet Office’s legal powers and the reasons why it matches particular information is available.