How does it work?

Before we can start working on your request, we’ll need to complete some security checks to validate and confirm your identity. Once this is done and we’ve received your ID verification documents, we’ll process your request within a month. Your data will be provided in the format we’ve discussed with you – our preferred method is electronically, as it involves less risk.

If, after reviewing your data, you believe any details are incorrect, something is missing, or you’d like to query an entry, please email our Data Protection Officer.

Send us an email

Your personal data and how we handle it

When you signed up for your tenancy, we collected information from you, which is securely stored in our systems. Over time, we may have added to this information, for example, if you’ve informed us about changes to your finances or family circumstances.

We may also have received information from third parties, such as local authorities, the police, or benefit agencies. Under the Data Protection Act 2018, you have the right to access the information we hold about you. This is called a Data Subject Access Request (DSAR).

Should you disagree with our decision, you have a right to register a complaint with the Information Commissioner’s Office. To do so, kindly reach out to them at:

What is the right of access?

The right of access, often called subject access, allows individuals to obtain their personal data. This right helps you understand how and why we’re using your data and ensures we’re doing so lawfull

How we handle subject access requests (DSARs)

An individual can make a Data Subject Access Request (DSAR) verbally or in writing, including by sending a message via MyAccount. A request is valid as long as it’s clear the individual is asking for their own personal data. They don’t need to use specific wording, refer to legislation, or direct the request to a particular contact.

An individual may also ask a third party, such as a relative, friend, or solicitor, to make a DSAR on their behalf. Before responding, we must ensure the third party is authorised to act on the individual’s behalf. It is the responsibility of the third party to provide evidence of their authority.