Homes England: privacy notice
How we collect and process your personal data, tell you about your rights and how the law protects you.
Applies to England
Documents
Details
It is important that you read this privacy notice together with the specific section of the notice that governs the processing activity that is relevant to you, in addition to any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
How we keep your personal data secure
Homes England takes the security of all the data we hold very seriously. We adhere to internationally recognised security standards. Our Information Security Management System (ISMS), utilises ISO/IEC27001:2013 as a framework and the Plan-Do-Check-Act (PDCA) model is adopted.
We have policies, procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure.
Disclosures of your personal data
We may share your personal data with third parties including third-party service providers, regulatory bodies, the police and other government departments and agencies. Where we do so, we will require all third parties to respect the security of your personal data and to treat it in accordance with the law.
We or our third parties may transfer your personal data outside the EU. Where we do so, we have put in place measures to ensure your personal information is provided with adequate protection in accordance with data protection legislation.
For more information about the purposes for which we may share your data with third parties, please refer to the relevant section of this privacy notice that governs each specific processing activity.
Retention
Homes England will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider:
- the amount, nature, and sensitivity of the personal data
- the potential risk of harm from unauthorised use or disclosure of your personal data
- the purposes for which we process your personal data and whether we can achieve those purposes through other means
- the applicable legal or regulatory requirements.
By law we have to keep basic information about our customers and suppliers for tax and VAT purposes for a certain period after the last transaction.
In some circumstances you can ask us to delete your data: see the Data Rights section for further information.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Our role as data controller
The Homes and Communities Agency, trading as Homes England, is a ‘data controller’ for the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Act 1998 (as updated, amended and re-enacted from time to time). This means that we are responsible for deciding how we hold and use your personal data.
Data protection officer
The contact details for our data protection officer are as follows:
By post:
Data Protection Officer
Homes England
2nd Floor
The Lumen
St James’ Boulevard
Newcastle upon Tyne NE4 5BZ
Email: DPO@homesengland.gov.uk
Phone: 0300 1234 500
Data rights
Under the data protection legislation, with effect from 25 May 2018, you have certain rights with regard to your personal data. Homes England must respond to a request to exercise these rights within one month. If you would like to request details of the personal data we hold about you, please contact the Data Protection Officer.
Under certain circumstances and with effect from 25 May 2018, by law you have the following rights in regard to your personal data:
- right to be informed – you have the right to request details of how your personal data is processed. This privacy notice is a proactive document designed to meet this right.
- right to request access – you can request copies of the personal data we hold about you. This is commonly known as a ‘subject access request’ or SAR. The purpose of this request is to establish the accuracy of the personal data we hold and to check we are processing it lawfully.
- right to request correction or rectification – if you think that some or all of the personal data we hold on you is incorrect or incomplete, you can ask for it to be corrected.
- right to request erasure – you have to right to ask us to delete your personal data if you think that we do not have a legal reason to continue to process it.
- right to request suspension of processing – this enables you to request we suspend processing your personal data; for example while we establish the accuracy of the data.
- right to object – you have the right to object to the processing of your personal data for direct marketing purposes.
- right to request data portability – you can request that your personal data is transferred to a third party directly in a readable format.
In the limited circumstances where you may have been asked for, and provided, your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
To withdraw your consent, please contact the Data Protection Officer. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another lawful basis for doing so.
Complaints
If you are unhappy with how any aspect of this privacy notice, or how your personal information is being processed, please contact the Data Protection Officer.
If you are still not happy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
By post:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Email: icocasework@ico.org.uk
Phone: 0303 123 1113
Updates to this page
Last updated 28 October 2024 + show all updates
-
Amends to the section on Homes England external events, to reflect additional information we collect and why we process your information.
-
A section has been added to the privacy notice on external events.
-
We have changed the wording to make our sharing of information with first charge lenders clearer. Sections 2.3 and 2.5 of the privacy notice have been updated.
-
Northern Ireland Assembly added to the Cladding Safety Scheme section as an organisation with whom we share data.
-
Clarifications to sections 12 (introduction) and 12.2 on our use of Fraud Prevention Agencies.
-
The Medium Rise Scheme is now called the Cladding Safety Scheme. Updated the name and other information in the notice related to this scheme.
-
Removed the 'Medium Rise Scheme: privacy notice' PDF and added the information into the main Homes England privacy notice.
-
Added separate privacy notice for the Medium Rise Scheme.
-
Added privacy notice for Help to Build: Equity Loan and removed the notice for Help to Build: register your interest.
-
Added privacy notice for Help to Build: register your interest and updated Equity Loan section.
-
First published.