PRIVACY POLICY

What this notice is about

This Privacy Notice tells you what information we obtain and hold about you whether you are initially applying to us for a tenancy or if you become a tenant or guarantor. The privacy notice explains what information we collect, why we collect it, and what we do with it, as well as who we share it with.  We collect and handle personal information about our tenants and prospective tenants along with any guarantors to enable us to provide accommodation.  This includes dealing with applications for tenancies, checking the suitability of tenants, along with any guarantors (including credit, immigration and similar referencing checks), arranging lettings, property management (including dealing with repairs), rent collection, dealing with any complaints, maintaining our accounts and records, tenancy terminations and administering tenancy deposits.

We call this information “your information”.  It is also referred to as “data”.

If there is no guarantor, please disregard any reference in this notice to guarantor or guarantee.

Please update us if any information supplied by you changes

Why we are giving you this notice

We are required by data protection law to give you this notice.  We must be open with you about why information is collected about you and then what is done with it.  You have various legal rights relating to this information, which is spelt out in more detail in this notice

If you are already a tenant, resident or guarantor some of the items in this notice may not be relevant to you.  Different information will be relevant to you whether you are a tenant, resident or guarantor.

In order to collect or use information about you there must be a legal basis or gateway for doing so.  This notice identifies the relevant gateway for the various types of information we collect and hold about you. A detailed explanation of these gateways is given in this notice.

Under data protection legislation we can only process data “as necessary” and only to the extent that it is needed.  For example, we can use your bank details regarding payments and other limited purposes only.  However, in certain instances, as necessary, we can share any of your data, e.g. with our own professional advisers.  We may also share any of your data, as necessary, with the police/law enforcement agencies or regulatory authorities.

References to a tenant in this notice, also includes a guarantor if there is one.  This is because a guarantor underwrites a tenant’s obligations so references to your tenancy are to include your guarantee.

The data we collect/hold about you

We use different ways to collect data about you, including the information you supply to us when applying for a tenancy. If you fail to provide this information we may not be able to proceed.

As necessary personal data is processed by us and includes:

  • Identity and contact details

  • Personal/background information including employment details

  • Bank details

  • Verification and credit status

  • Deposit (if any) including return on tenancy termination

  • Tenancy details including renewals, joint tenants, other residents and guarantors

  • Immigration/right to rent checks (England only)

  • Rent and other payments

  • Recovery of arrears, claims or possession proceedings

  • Repairs/health and safety/housing conditions

  • Breach of tenancy terms/nuisance/anti social behaviour

  • Council Tax liability

  • Water charges payable

  • Utilities and services provided

  • Welfare Benefits

  • Termination of tenancy

  • Audio and CCTV recordings (if any)

  • Complaints

  • Insurance

  • Health or disability

  • Emails texts and other communications and via our website where we operate one.

  • Website and online portal information.

We also generate and use data internally, e.g. our rent records.

We also collect and receive data about you from third parties.  This may be information given to us by other tenants or neighbours.  It can include information from a guarantor where there is a guarantor for your tenancy or from a joint tenant or other residents.  Public bodies such as local authorities or the police, or other law enforcement agencies may give us information about you.  This can include the Department for Work and Pensions or the local authority where you are receiving Universal Credit or housing benefit.  Information may be given to us from the Council Tax Department or Utility companies or service providers.  We obtain information about you when we carry out credit checks or take up references. 

Sharing data with others

We will share information we hold with others, where this is necessary and comply with data protection legislation whilst doing this. Information can be shared with other landlords and agents including where you apply to another landlord for a tenancy; contractors/ suppliers; utilities and service providers; tradespeople; financial organisations (including banks and insurance companies); debt collection and tracing agents; public and government bodies (including those who administer benefits, such as the Department for Work and Pensions or the local authority); courts; police and law enforcement agencies; taxation authorities; local authorities in relation to Council Tax and regulatory functions; letting and managing agents; and any future owner of the property. We may need to share information with your next of kin for example, in an emergency. It may be necessary for us to share information with a future owner of the property if we are selling. We also may share information with professional advisers such as lawyers and accountants or an advice agency, which involves sharing information about you with them. If you live in a flat we give information to the freeholder or managing agent for the block of flats. We also send notifications to and have correspondence with any tenancy deposit scheme protecting any tenancy deposit, which has been paid.

Joint tenants and guarantors

Where you have a tenancy jointly with someone else or there is a guarantor for your tenancy, as necessary, we will share information either with the joint tenant or the guarantor (or both).  This relates to your performance of your responsibilities under the tenancy agreement including information about any rent arrears or other breach of the tenancy terms.  It can also relate to issues around the termination of the tenancy and any claims we may have as a result

Immigration/right to rent checks

By law, in England, we are required to check your immigration status before we rent a property to you.  This means that you are legally obliged to produce certain documentation, (e.g. a passport) to us. We are required to see original documentation and keep copies of it.  We also check this documentation as part of our process to verify your identity at the outset of the tenancy

Search engines, websites, etc

As necessary, we obtain information about you, which is publicly available via search engines such as Google, Facebook and other websites.  This will include information about you, which you yourself made public.  When doing so, we make sure that we comply with applicable guidelines under data protection legislation.

Special categories of data/sensitive personal data

 In limited situations we will process information about your health or any disability.  This data is given special protection under data protection law.

Children

In cases where you rent a property where a child resides, information will be given to us about resident children; usually by an adult such as a parent on their behalf.

Obligation to process data

We have a legal obligation to carry out gas safety checks under gas safety legislation. We may need to handle data for this purpose, e.g. to give the contracted gas safety engineer access to the property. We may pass over details of your occupancy to the relevant Water Company to enable them to collect water charges as it is in their legitimate interests to receive this information.

Legally, we must also hold and process information relating to any tenancy deposit which you pay to us including sharing your information with a deposit scheme by which any deposit is protected.

Under any statutory licensing schemes applicable to the property we may be required to give information to the local housing authority relating to your occupation of the property. Similarly, there are various regulatory requirements, which may mean that we need to give information about you to public or local authorities or other regulatory authorities

Utilities

Again, in line with advice from the Information Commissioner we consider that it is in the legitimate interests of utility companies to receive information about occupants of the property to enable them to bill you for utilities (unless these are included within your rent).

Council Tax

Likewise, we notify local authorities of your occupancy relevant to the collection of Council Tax. In any event they are entitled to serve notice upon us requiring this information if they choose to do so

Why we collect data and the legal basis for processing your personal data

We must tell you why we collect and hold information about you.

We must also have a legal basis before we are allowed to collect or process your personal data. Processing personal data includes recording, storing, altering, using, sharing or deleting data. We only need one of these “gateways” and for our purposes they are.

  • Your consent. Consent may be requested in certain cases, e.g. to obtain a reference but generally we do not rely on your consent to process your personal data.

  • To perform our contract so that we can carry out our responsibilities under the tenancy agreement with you, including anything you request us to do with a view to you becoming a tenant (or resident).

  • Compliance by us with a statutory or other legal obligation.

  • Where this is in your vital interests, e.g. if there is a life-threatening situation.

  • Where we are pursuing our own legitimate interests or those of a third party. This will not apply if our interests are overridden by your interests or your fundamental rights and freedoms.  We must carry out a balancing exercise therefore to decide whether we can rely on this gateway to ensure that it applies.  In each case we have done this and we do not consider your interests, rights or freedoms outweigh our own or those of the third party concerned.

This notice identifies the relevant gateway applicable in each case. In some cases, we will rely on more than one gateway depending on the particular purpose for which we are using your data.

Additionally, any data must be processed by us, fairly and openly.

Why we process your data

The various purposes for which it may be necessary for us to process various categories of your information include:

  • In our legitimate interests for deciding on the suitability of a proposed tenant/resident

  • In our legitimate interests for verifying the credit worthiness/suitability of tenants/residents

  • Our legal obligation to check immigration status/right to rent. This is also to verify identities;

  • To perform our tenancy contract to deal with joint tenants and residents who are linked to the tenancy

  • To perform our contract to complete the tenancy agreement

  • In our legitimate interests to secure rental payments/performance of tenant obligations, e.g. deposits and guarantors

  • For contractual performance for rent collection and collection of other payments including banking details

  • For contractual performance for managing the tenancy and the property

  • For contractual performance and/or in our legitimate interests for record keeping

  • For contractual performance for arranging repairs and maintaining the condition of the property and keeping it in a safe condition.

  • For contractual performance for monitoring and enforcement of tenant responsibilities

  • For contractual performance or in our legitimate interests for recovering debts and other payments due, including any possession proceedings

  • In our legitimate interests for administering liability for Council Tax

  • In our legitimate interests and those of the Water company for the payment of water charges

  • In our legitimate interests and those of the provider relating to arranging and paying for utilities and services

  • In our legitimate interests for dealing with welfare benefits (including Universal Credit and housing benefit) where payable in respect of the rent

  • In our legitimate interests in relation to tenancy termination including the return of any deposit

  • In our legitimate interests for processing complaints

  • For contractual performance or in our legitimate interests for dealing with health and disability issues relating to tenants/residents

  • In our legitimate interests for obtaining and holding audio and cctv recordings

  • To perform our legal obligations to provide information to public or local authorities who are legally entitled to require this information

  • In your vital interests for contacting next of kin etc., in an emergency

  • In our legitimate interests for the storage of emails, records of calls and other communications

  • In accordance with our legal obligations if you exercise your rights under data protection law

  • To perform our legal obligations for compliance with legal and regulatory requirements

  • In our legitimate interests for the establishment and defence of legal rights

  • In our legitimate interests for prevention, detection and investigation of crime and anti social behaviour and the security of any website or other means of electronic communication

We may change the purposes where this is compatible for the purpose for which we obtained the data originally.  We may process your information without your knowledge where this is required or permitted by law.

Retaining Communications

We will monitor, record and retain your calls, emails, text messages, social media messages and other communications.  This is in our legitimate interests to maintain an accurate record of these.  This may be necessary to manage your tenancy or the property or to deal with your application for a tenancy or to deal with tenants or prospective tenants or guarantors.  We need these records for our ongoing dealings with you, including our data protection obligations.

Length of storage of data

Data can only be stored on a time-limited basis and not indefinitely.  We will hold personal data about you for the duration of your tenancy and for seven years after your tenancy has ended.   This is the statutory limitation period six years plus a further year to allow for service of proceedings should proceedings commence later.  We are also required to retain information for up to six years for tax purposes.  If your tenancy application does not go ahead then we retain data for two years

Storage and security of data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed.  In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

All our information is stored securely electronically on servers or devices. Certain information is also retained on a secure basis in hard copy format.

Telephone calls

To protect our legitimate interests, telephone conversations may be recorded electronically for monitoring and to ensure that we have a record of what is said. You or others may leave messages when calling.

Your rights

Where we hold personal data about you, you are the data subject. Data protection legislation gives you a number of rights. To exercise any of these rights you should contact us. You can do so by email or telephone using the details above. You can also write to us at our address given at the top of this notice.

In particular you have a right to object to the processing of your information where we are processing this in our own legitimate interests or those of someone else. This applies if you feel that this impacts on your own interests or your fundamental rights or freedoms.

These rights are as follows 

  • Access – you have the right to make a request to be told what personal data we hold about you. This is a right to obtain confirmation that data has been processed and to have access to your personal data and the right to information details which should be provided with the privacy notice.

  • Correction/Rectification – if you consider any data we hold about you is inaccurate you can tell us so that where appropriate this can be corrected. Where a mistake is made in data processing then you can ask to have it rectified.  Any third parties who have received the data from us should then be told of the rectification and you should be informed by us of any such third parties.

  • Erasure – you have a right to ask us in certain circumstances to erase any data we hold about you (the so called right to be forgotten). Individuals can request the right to have personal data erased to prevent processing in specific circumstances, i.e. it is no longer necessary, consent has been withdrawn, there is an objection and where applicable your rights etc., override the legitimate interests to continue our processing, or data has been unlawfully processed.

  • You can object to our processing of data – this allows you to object to our processing of data about you. We must then stop processing data unless we can establish legitimate reason for continuing.  In particular this applies where we are relying on our own legitimate interests or those of a third party to process data but it can also apply in other situations.

  • Restricting processing – you can ask us to suspend processing of your personal data and we must then restrict processing of data. This includes where you are contesting the accuracy of a statement or the lawfulness of the processing.

  • Data portability – this allows individuals to reuse their personal data for their own purposes across different services allowing them to move, copy or transfer personal data more easily.

Withdrawal of consent

Where your consent provides us with the legal gateway to process data about you, you can withdraw this at any time by telling us by email or post using the telephone/addresses given above.

Complaints

We operate our own internal complaints policy and if you have any concerns about the way in which we collect or handle data please contact us.

Citispace Services Limited

11 Regent Street

LS2 7QN

info@citispace.co.uk