Privacy policy - customer's representative, attorney and nominated guardian - collecting and retaining personal information
Loretto Housing will be the "data controllers" of the personal information that you provide to us in your role as nominated representative, power of attorney or court appointed guardian for one of our customers.
Loretto Housing forms part of Wheatley Group. The RSL subsidiaries within the Group are Wheatley Homes East, Wheatley Homes Glasgow and Wheatley Homes South.
Our Data Protection Officer is Ranald Brown who can be contacted on #wheatleydataprotectionofficer@wheatley-group.com.
What we need
We collect the following information from you as a nominated representative, power of attorney or court appointed guardian for our customers:
- Full name;
- Address;
- Contact details;
- Date of birth; and
- Proof of identity (Representation Mandate only).
We collect your personal information from you via a variety of sources, including:
- When one of our customers submits a completed Representation Mandate form;
- when one of our customers submits a valid Power of Attorney document; or
- when we receive confirmation from a court that you have been appointed as a guardian under a guardianship order for one of our customers.
Our landline phone calls to our Customer First Centre and to our Group Debt Recovery Team are recorded for training and monitoring purposes and our recordings are usually held for a period of one month.
We operate a CCTV system at our office premises and at various locations within the vicinity of our properties for the detection and prevention of crime, to fulfil our legal obligations to keep our staff safe and in pursuit of our legitimate interest to keep our properties safe and secure. Our CCTV cameras operate continuously and recordings are held for one month.
We may transfer information about you to other Wheatley Group subsidiaries for purposes connected to your role as a representative, attorney or guardian for one of our customers or the management of the company’s business.
Why we need your personal information
We need your personal information as we have a legitimate interest to note that you are our customer’s representative, attorney or guardian. We will use the information you provide to contact you to share information with you about the customer you are acting for.
If you are no longer acting for our customer, please advise us of this. We will note this for our records and cease to share information about that customer with you.
How we protect your personal information
Your personal information is stored on our paper and IT filing systems which may be copied for testing, backup, archiving and disaster recovery purposes. Access to your information is limited to those who require it to provide services to the person you represent. All data is held within the UK.
If any of your personal information is transferred out with the UK by any of our contractors, we will ensure that there are adequate safeguards in place to protect your personal information in accordance with applicable UK data protection legislation
How long we keep your personal information
We will only keep your personal information for as long as necessary in your role as representative, attorney or guardian and to safeguard us in the event of any claims, complaints, litigation, enquiries or investigations during or following the termination the person who you are representing’s tenancy.
Unless deleted or moved to Wheatley Group systems by a Wheatley staff member, emails sent and received by Wheatley staff are automatically deleted after 6 months. Any emails which are relevant to a customer’s file are added or summarised within Wheatley Group systems (e.g. our Group Housing Management system).
We have a data retention policy that sets out the periods for retaining and reviewing all information that we hold. You can request a copy by contacting us at InformationRequests@wheatley-group.com
Your rights
You can exercise any of the following rights by writing to us at InformationRequests@wheatley-group.com
Your rights in relation to your personal information are:
- you have a right to request access to the personal information that we hold about you by making a "subject access request";
- if you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information;
- you have a right to request that we restrict the processing of your personal information for specific purposes; and
- if you wish us to delete your personal information, you may request that we do so.
Any requests received by us will be considered under applicable UK Data Protection Legislation. If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner's Office at www.ico.org.uk
The accuracy of our information is important to us - please help us keep our records updated by informing us of any changes to your personal information
Changes to our Privacy Notice
Our Privacy Notice is regularly kept up to date and this version was updated on 21 August 2024. The latest full version is always available from our website.