For the purposes of the EU General Data Protection Regulation, Funding Affordable Homes (‘we’ or ‘us’) is the ‘data controller’ (i.e. the company who is responsible for, and controls the processing of, your personal data).
Personal data we may collect about you
We will obtain personal data about you (such as your name, address, etc) whenever you complete an online form. For example, we will obtain your personal data when you register to use this website, contact us for any reason, or sign up to a service.
How we use your personal data
We will only use your personal data where we are permitted to do so by applicable law. Under EU data protection law the use of personal data must be justified under one of a number of legal grounds. The principal ground which justifies our use of personal data is Legitimate Interests. Legitimate Interests are where we use your information to achieve a legitimate interest and our reasons for using its outweigh any prejudice to your data protection rights. We will use your personal data in the following ways:
- to help us identify you and any accounts you hold with us;
- research, statistical analysis and behavioural analysis;
- customer profiling and analysing your purchasing preferences;
- fraud prevention and detection;
- customising this website and its content to your particular preferences;
- to notify you of any changes to this website or to our services details of new services;
- invites to events;
- to reorganise or make changes to our business;
- security vetting; and
- improving our services.
Disclosure of your personal data
We may disclose your personal data to:
- other companies within our group;
- our agents and service providers; or
- law enforcement agencies in connection with any investigation to help prevent unlawful activity. Where or unless to do so would prejudice the prevention or detection of a crime, we will direct any such request to you or notify you before responding.
Keeping your data secure
We will use a range of commercially reasonable physical, technical and organisational measures to safeguard your personal data (including encryption) from unauthorised access, use, disclosure, alteration or destruction in accordance with data protection law requirements. Information that you provide to us is stored on our or our service providers secure servers and accessed and used subject to our security policies and standards or those agreed with our service providers.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.
We may monitor and record communications with you for the purpose of quality assurance, training, fraud prevention and compliance.
Information about other individuals
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
- give consent on his/her behalf to the processing of his/her personal data;
- receive on his/her behalf any data protection notices; and
- give consent to the transfer of his/her personal data abroad.
Transfers of data out of the EEA
We may need to transfer your personal data to countries located outside the European Economic Area. Any transfer of your data will be subject to agreements with third party service providers which include EU standard contractual clauses that will safeguard your privacy rights in accordance with EU data protection laws and give you an adequate level of remedies in the unlikely event of a security breach.
How long we keep your personal data
We will retain your personal data for as long as is necessary to fulfil the purpose for which the data was collected and any permitted linked purpose. Our retention periods are also based on our business needs and good practice.
What rights you have in relation to your personal data
If you have any questions about our use of your personal data, you should first contact us using the details provided below. You may have the right under certain circumstances and in accordance with EU or other applicable data protection laws to require us to:
- provide you with further details of the use we make of your information;
- provide you with a copy of information that we hold about you;
- update any inaccuracies in the personal data we hold;
- delete any personal data that we no longer have a lawful ground to use;
- object to any processing based on the legitimate interest ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and
- restrict how we use your information whilst a complaint is being investigated.
We are required to take reasonable steps to ensure that your personal data remains accurate. In order to assist us with this, please let us know of any changes to the personal data you have provided by contacting us at the address below.
While it is our policy to respect the rights of individuals, please be aware that the exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g the prevention or detection of crime) and some of these rights may be limited where we are required or permitted by law to continue processing your personal data, to defend our legal rights or meet our legal and regulatory obligations.
If you contact us to exercise any of these rights, we will check your entitlement and respond in most cases within a month.
If you are not satisfied with our use of your personal data or our response to any exercise of these rights, you have the right to complain to the Information Commissioner’s Office.
Our contact details
We welcome your feedback and questions. If you wish to contact us, you can write to us at 4th Floor, 3 Burlington Gardens, London, W1S 3EP.
How we may update this Privacy notice
This Privacy Notice was last updated in June 2018.