This statement explains what personal information we collect from you and how we use, store, share and process it.
We have procedures to collect, store and process your information safely and securely.
We follow the legal requirements of the Data Protection Act 2018 and UK General Data Protection Regulation.
This statement applies to Gentoo Group and its activities. This includes information we collect from:
- gentoogroup.com
- My Gentoo
- Mutual Exchange
- Your Gentoo Voice
- HomeHunt
- recruitment portal
- website forms
- application forms
- telephone calls, which we may record for training and to check quality
- CCTV in our offices, buildings and neighbourhoods
- website statistics
- surveys
- emails and letters
- social media, like Facebook and Twitter
- third party providers, like Capita who supply our online payment system
When you leave our website or online services, we have no control over the information another website may collect. Check their policy or statement before using their website or services.
Personal information
This includes:
- your name and any other names you may have had
- date of birth
- sex
- nationality and information about your right to rent in England
- National Insurance
- contact details, including telephone numbers, email address, current and previous addresses
We also collect information about your:
- marital status
- ethnic group
- physical and mental health conditions
- health and mobility needs
- criminal history
Tenancy information
This includes information about:
- rent payments
- repairs
- when you contact us
- surveys you have completed
Exceptional situations
We may collect information in an exceptional situation, like COVID-19 or severe weather. This could be information to keep you, your family and our staff safe.
To help manage the situation, we will collect information recommended by:
- the government
- health professionals
- the Information Commissioner's Office
- other relevant organisations, depending on the situation
Website statistics
We use cookies to collect information about your computer and how you use the site. This includes:
- device information
- what people search for
- most viewed pages
You can choose to not accept analytics cookies. If you choose to not accept necessary cookies, the website or online service may not work correctly.
All information we collect, we store on secure servers in the UK. We encrypt all payments.
We store physical documents in our offices and buildings, and with an offsite storage provider.
We will keep your information for as long as we need it. This means we may keep it after you stop using our services.
Read our data retention and disposal schedule.
The main reason we collect your information is to provide you with services as part of your tenancy agreement. This could be to:
- confirm your identity and right to rent in England
- let you a property
- accept your rent
- repair your home
Other services include:
- help managing your money
- energy advice
- wellbeing support
- health and mobility assessments
- employment advice
- support for people aged 16 to 25
We also use your information to:
- tell you about changes to our services
- contact you to find out ways to improve our services
- prevent crime
- detect fraud
- protect people
We ask for your permission to use photography and images you are in. We store them for 2 years from the date they were taken, and you can withdraw your consent at any time.
We will never sell your personal information.
We share your information with third parties when we have your permission.
There are some situations where we do not need your permission. When this is the case, we will only share your information if:
- third party suppliers need the information to complete their work for us
- legally required, like to prevent crime, detect fraud or protect people
The National Fraud Initiative compares data between public and private bodies to prevent and detect fraud. We do not need your permission to share your information as part of this initiative. Read more about the National Fraud Initiative.
Right to be informed
You have the right to be informed about:
- how we use your information
- why we collect your information
- how long we keep your information for
- who we will share your information with
We must provide you with this type of information when we collect your details from you.
Right of access
You have the right to access the information we hold about you.
Access to information is free. If the information you request is excessive, we may charge you for that information. A request may be excessive if it:
- repeats earlier requests and a reasonable amount of time has not passed
- overlaps with other requests we have yet to respond to
When you request your information, we will send you the information within 30 days. This is called a ‘subject access request’ or ‘SAR’.
Right to rectification
You have the right to have your personal information updated when it is inaccurate or incomplete.
Right to erasure or right to be forgotten
You have the right to get us to delete your personal information.
But we cannot delete your personal information if we need it for legal or relevant reasons, like you are a current tenant or owe us money.
Right to restrict processing
You have the right to ask us to restrict processing your information. This would mean the only thing we could do with your information is store it unless we have your permission or need to process it:
- for a legal claim
- to protect the rights of someone else
- because it is important to the public interest
Right to data portability
You have the right to get your personal information from us in a reusable format for you to reuse in whatever way you need to.
Right to object
You have the right to object to the processing of your personal information in certain situations. This includes stopping us from using your information for direct marketing.
Rights related to automated decision making
You have the right to request that decisions about you involve a human. This includes using your information to profile you.
Contact the Information Commissioner's Office if you are not satisfied with how we have dealt with your request.
The company responsible for your personal information, or the data controller, is Gentoo Group. If you have any questions about this statement, send them to:
Data Protection Officer
Gentoo Group
Emperor House
2 Emperor Way
Doxford International Business Park
Sunderland
SR3 3XR
Telephone: 0191 525 5000
Email: dataprotectionofficer@gentoogroup.com
Gentoo Group Limited is a charitable community benefit society. Our registration number is 7302.
