In this section...

As a housing association Phoenix holds lots of personal information about our residents and other people who use our services. We use this information to manage tenancies and leases and to deliver other services that benefit our wider community.

We want everyone to understand what information we collect, how we use it and what you can do if you have any questions.

We promise:

  • to keep your personal information safe and secure
  • never to sell your personal information
  • to tell you how we use your personal information.

Full information and details of our privacy notice, recruitment privacy notice, website privacy notice and data protection policy and retention guidelines are available on this page.

Website Privacy Notice

This privacy statement sets out how Phoenix Community Housing collects and processes personal information about visitors to our website.

When someone visits our website we collect standard internet log information and details of visitor behavior patterns. We do this to find out information such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify any individual and you can disable the use of cookies on your computer if you do wish us to collect this information.

Use of cookies by Phoenix Community Housing

This website uses cookies. Cookies are small text files that are placed on your computer by our website when you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to Phoenix on how visitors are using the site, so that we can improve visitors’ experience of our website.

The cookies we use and why

JavaScript enabled
(has_js)
This cookie is used to register whether the visitor has JavaScript activated in their browser. This cookie is essential to the running and functionality of the Phoenix website.
Cookie Preference
(cookie-agreed)
This cookie is used to remember a user’s choice about cookies on www.phoenixch.org.uk. Where users have previously indicated a preference, that user’s preference will be stored in this cookie.
Cookie Consent  Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR compliance of the Phoenix website.
Google Analytics
(_ga, _gat, _gid)
These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
You can read Google's overview of privacy and safeguarding data here.
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
YouTube
(PREF*, YSC*, VISITOR_INFO1_LIVE*, remote_sid*, LAST_RESULT_ENTRY_KEY, LogsDatabaseV2:V#||LogsRequestsStore, ServiceWorkerLogsDatabase#SWHealthLog, TESTCOOKIESENABLED, VISITOR_INFO1_LIVE, YSC, ytidb::LAST_RESULT_ENTRY_KEY, YtIdbMeta#databases, yt-remote-cast-available, yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name, yt-remote-connected-devices)
We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode.
You can read more at YouTube’s embedding videos information page here. http://www.google.com/support/youtube/bin/answer.py?hl=en-GB&answer=171780
Twitter
(guest_id, personalization_id, lang, RichHistory, i/jot)
We embed a Twitter widget into our website to show you the latest Tweets from the official Phoenix Community Housing Twitter feed. We embed this feed using Twitter’s privacy guidelines, and you can find out what information Twitter collects and how it uses that information here.
https://dev.twitter.com/web/overview/privacy

HTTP Cookie

(respondentid#-#count, respondentid#-#, responder-#-#, __cf_bm, cf_clearance, LP-EA1E030787F7412A4WOF65E2C84D368118C6, Survey-Started-#, __cflb)

These cookies are used to track, personalise, and save information about each user's session to improve visitors' browsing experience.

How do I change my cookie settings?

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
You can also find out how to manage cookies on most popular browsers:

To find information relating to other browsers, visit the browser developer's website.

Online forms

You can access most of the pages on the Phoenix Community Housing website without supplying any personal information. However, you will need to supply personal information when completing certain forms.

We will use your personal information to respond to your enquiry. The personal information you provide will be stored and retained securely and treated in accordance with our Data Protection Policy, the General Data Protection Regulation and any succeeding acts. Our data protection policy and privacy notices are available on our website and on request by calling 0800 0285 700.

We may produce reports on the use of forms on our website to enable us to monitor and develop them. These reports will be based on anonymous data, which means that individuals will not be identified in the reports.

My Phoenix - Self Service Portal

Phoenix tenants can register to use our ‘MyPhoenix’ self service portal. When you sign up to the service, we will use the information you provide to confirm your identity as a Phoenix tenant and to set up an account for you.

The information you provide will be used to set up your account and to ensure the safety and security of your account. We will also use the information you provide to update your contact details on our secure housing management database. The information you provide will be stored and retained securely and treated in accordance with our Data Protection Policy, the General Data Protection Regulation and any succeeding acts.

Microsoft Teams Privacy Notice

We use Microsoft Teams to conduct virtual meetings and video calls and to deliver online training sessions and resident engagement events. Microsoft Teams is a secure and trusted platform. By participating in a Microsoft Teams meeting or event with Phoenix we will use your email address to invite you to the session. If your microphone and camera are turned on your voice and image will be shared and seen by other participants in the meeting. Sometimes part or all of an online meeting may be recorded - you will be told in advance if this is the case and will have the option to turn off your microphone and camera if you do not wish to be recorded.

For more information about our use of Microsoft Teams and your personal data, please read our Microsoft Teams Privacy Notice. If you have any questions or would like further information about how we use Microsoft Teams, please contact us

 

Group Privacy Statement

About us

Phoenix Community Housing Association Bellingham and Downham LTD (“Phoenix Community Housing”, “Phoenix”, “We”, “us”) is a Community Benefit Society (registration number 30057) with registered office at The Green Man, 355 Bromley Road, London, SE6 2RP.

Phoenix Community Housing is the parent of a wholly owned subsidiary Phoenix Agency Services LTD (Trading as Phoenix Repairs Service), registration number 8436155.

Data Protection People Limited have been appointed to act as our Data Protection Officer.

Registration with the Information Commissioner’s Office

Phoenix Community Housing is registered with the Information Commissioners Office with registration number Z1309257

Phoenix Repairs Service is registered with the Information Commissioners Office with registration number ZA249958

Aim of this notice

Your information is protected by law. Data Protection law allows us to collect and use your personal information if we have a lawful reason to do so. This privacy notice is to let you know how we handle your personal data under the Data Protection Act, General Data Protection Regulation (GDPR) and any acts or legislation that supersede them.

What is personal data?

Personal Data means any information relating to an identified or identifiable natural person. It includes name address, location data an on line identifier or one or more factors specific to the physical physiological, genetic, mental economic cultural or social identity of that natural person.

Our Privacy Promise
Phoenix Community Housing Association promises:

  • To keep your personal information safe and secure
  • Never to sell your personal information
  • To tell you how we use your personal information.

What information do we collect?

We collect information about you when you make an application to us or a request is made by you for one of our services. We also collect information when you voluntarily complete customer surveys, provide feedback or where there is general correspondence and communication. Further information may be collected during the course of your tenancy, lease or during the period we provide services to you.

The table below sets out what personal data we process, our purpose for doing so and the lawful purpose for processing it.

What personal data we process Our reason for doing so Our lawful justification
Applications for housing and updated details (if you have a tenancy or lease with us, our active housing application) about you and your children, including name, date of birth, address, contact details, identification (including National Insurance number employment details, details of any disabilities in your household related to your housing needs), other documents provided to us Allocating homes, delivering and managing our services as set out in your tenancy or lease, identifying you are who you say you are.
For the prevention and detection of crime.
Performance of a contract, Legitimate Interest
Legal Obligation
Details about you including name, date of birth, address, contact details, identification (including National Insurance number), current and past employment details, welfare benefits. Number of children, disability. To provide you with services at our Job Club.
To provide you with financial inclusion support
Consent
Details about your home, household and your housing needs and tenancy agreement. Allocating homes, delivering and managing our services as set out in your tenancy or lease Performance of a contract
Welfare benefit referrals, Housing benefit and Department of Work and Pensions notifications, rent and service charge statements Delivering and managing our services as set out in your tenancy or lease Performance of a contract Legal obligation
Applications for the Right to Buy and Right to Acquire and supporting documents To process your application
For the prevention and detection of crime.
Performance of a contract
Legal Obligation
Legitimate Interest
Rent and service charge information, including details of any arrears. Allocating homes, delivering and managing our services, making financial arrangements related to your home (setting up council tax payments), informing relevant local authority departments and the Department of Work and Pensions to enable you to claim benefits Performance of a contract, Legitimate interest
Financial information, including any credit checks, income details, bank details, housing benefit information and any guarantor details. To make financial arrangements related to your home, such as to enable automatic rent payment through direct debit, housing benefit payments, benefits direct from the Department of Work and Pensions and set up your council tax payments
To set up arrangements relating to your home, such as informing the Local Authority departments of your tenancy arrangements for council tax and housing benefit purposes
To help other people or companies to provide services or utilities to your home or to contact you. This may include where they need to contact you when you first move in to set up payments or about any unpaid bills while you live at your home and/or after you leave your home.
Performance of a contract, Legal Obligation, Legitimate Interest
References received about you (e.g. from your employer or previous landlord). Allocating homes, managing our services, administration Performance of a contract
Medical information & emergency contact details, next of kin & any advocate, Information about any accidents or incidents which involve you or your home.
(Any medical information shared will be limited to a need to know basis)

To provide information to our staff to enable them to provide services to you to meet your needs when managing and delivering the services set out in your tenancy or lease and to train and protect them where necessary
To deal with any medical or other emergencies and to carry out your wishes or Requirement’s such as any religious or cultural wishes;
To act in someone’s best interests such as where we have concerns about a person’s health or welfare and may need to involve agencies such as Social Services or the police. To ensure residents needs are met in the event of an emergency. 

Explicit Consent, Legal Obligation, 
Social Protection Law or Protecting Vital Interests in extreme circumstances.

Information about any complaints made by you or which relate to you. To handle any complaints.
Delivering and managing our services as set out in your tenancy or lease
Performance of a contract
Legitimate Interest,
Legal Obligation.
The way in which you conduct your tenancy if you are in breach of your tenancy conditions
If we deem there to be a risk to the safety of individuals, we may place a flag over your tenancy. When we do so, we will inform you and ensure that these flags are regularly reviewed.
Delivering and managing our services as set out in your tenancy or lease.
Delivering and managing our services
Performance of a contract
Legitimate Interest,
Legal Obligation.
Information regarding your marketing preferences. To deliver marketing materials such as information about our events and opportunities. Consent
Any photographs taken of you or your property. Monitoring defects, assessing any health & safety risks, managing and delivering services as set out in your tenancy or lease. Checking you are who you say you are Performance of a contract
Legitimate Interest,
Legal Obligation.
Any marketing materials  / photos/ videos of you and or your children taken at events. To promote our services, events or live streams.

Consent

Legitimate Interest

Ethnicity data, Sexual Orientation and Religious Beliefs To ensure fair and equal access for all to our services;
To help us put together statistics to give to our regulator or other government organisations, (in this instance your details will be anonymised)
Your consent for Equal Opportunities Monitoring
Convictions, proceedings and criminal acts To respond to legal claims, to deliver our services, safeguarding, The apprehension or prosecution of offenders.
To meet Social Protection Law, Legal obligation, Employment law, Prevention and detection of crime
Performance of a contract,
Legal Obligation.
Call Recordings To investigate complaints related to services we provide as set out in your tenancy agreement or lease.
To improve our services.
Performance of a contract,
Legal Obligation.
Survey responses
(this will be anonymised as soon as possible)

To check on and improve our services as set out in your tenancy agreement or lease.
To check on and improve our services

To assess any specific needs residents may have including emergency evacuation data. 

Performance of a contract,
Legal Obligation.

Legitimate interests. 

CCTV footage For the prevention and detection of crime. Legitimate interest

Applying for a job

If you apply to work for Phoenix, we will use your personal information to process your application and to produce and monitor recruitment statistics. We will not take up references without your prior permission. We will not share or disclose your information when you have applied for a job, unless you have given us your consent or we are required to by law. Where we are required to carry out a Disclosure and Barring Service (DBS) check we will comply with the law and your rights when carrying out these checks.

Please see our separate recruitment privacy notice.

What are Legitimate Interests?

A wide range of interests may be legitimate interests. They can be Phoenix’s interests or the interests of residents, third parties or commercial interests as well as wider societal benefits. When we rely on any legitimate interest, we will ensure that we take a balanced approach and have appropriate safeguards in line with your expectations. If we rely on any legitimate interest, we will tell you what that is.

Our legitimate interests include:

  • Having appropriate security, for our offices and on our sites. This includes CCTV and identification photographs.
  • Keeping our records up to date.
  • Collecting unpaid debt.
  • Recording threatening behaviour.
  • Official communications.
  • Working out which of our services may interest you and telling you about them.
  • Seeking your consent when we need it to contact you.
  • Sharing your information with local utilities providers in the event of unpaid debts.

Data Retention

We have data retention guidance which sets out how long we will keep personal data and in what circumstances. This is available on our website www.phoenixch.org.uk , by emailing data.protection@phoenixch.org.uk or by calling us on 08000285700.

How will we collect this information?

Information will be collected from you personally when you enter into an agreement / contract with us. This will be in the form of applications and any other forms which may be completed in order to apply for one of our properties or to update your details.

It is possible that we will receive referrals containing your information from public bodies or voluntary organisations, but this should be done with your consent and knowledge of why they are making the referral to our services.
We may generate further personal data regarding our tenants during the course of the tenancy. This could be in the form of general correspondence, or this may need to be generated to satisfy our statutory obligations.

Who will we share it with?

Where information is used for the reasons listed above, we may need to share the information about you and the people you live with other organisations. This will include:

Who we share your information with The purpose for sharing it Our justification for sharing
Companies which provide services or utilities to your home (such as the gas or electric companies) and the relevant Council Tax Department. Payment of these services

Legitimate interest,
Legal obligation

People who provide services on our behalf, such as a managing agent or contractors carrying out any repairs. Delivering Services in your tenancy agreement or lease Performance of a contract
A credit reference agency, your bank and mortgage company or other financial institutions and (where necessary) a debt collection and/or tracing agency. Allocating and managing properties and your tenancy or lease. Performance of a contract.
Where debt collection agencies are involved, this will be in our legitimate interest.
An agency who will add your rent payment history into your credit report To treat homeowners and tenants equally by including payment history to inform your credit reference. Consent
The Housing Benefit department and other Government departments which provide funding for your housing services. In particular, we may be legally required to give information about any changes in your financial circumstances to the Housing Benefit department. Legal requirement. Legal obligation.
Resident Panel Members, Designated Officer, the Housing Ombudsman
involved in the final stage of our complaints process.
Delivering Services in your tenancy agreement or lease Consent
Performance of a contract
A doctor, hospital, paramedic or health worker. Where you require medical attention and are unable to provide the information yourself. Your consent, in line with Social Protection Laws, Amendment 85
Our legal advisors, the courts and the police. This may include information about antisocial behaviour. Reducing ASB and fraud, the prevention and detection of crime. Handling legal claims
People or agencies who provide services to you or who work with us to provide services to you, such as your care/support provider. To deliver services Consent
The bodies involved with your care/support such as the relevant Local Authority departments, or Social Services and any alarm call centre. When the information is requested Explicit Consent
Our regulator or other bodies which look at how we provide services as your landlord & other people where we are legally required to provide information to them.
(Your details will be anonymised)
Legally required Legal obligation
Your next of kin or other people acting on your behalf in an emergency and a member of your church or religious leader, where you have requested this. When the information is requested Consent
To another landlord or housing association where you are looking to move or exchange your property (e.g. where they request your details &/or a reference from us). When the information is requested Consent
Relevant Local Authority departments (including housing benefit, council tax, elections, adult services, fraud teams, fire brigade etc.) Legal requirement Legal obligation
To relevant people and authorities such as the police, adult and child protection and social services. Social Protection, Prevention and Detection of Crime. Social Protection law, Prevention and Detection of Crime.
Companies who process information on our behalf such as an external mailing company (who send out our newsletter), our archiving company, our confidential waste disposal company. Providers of our information technology services or software, companies doing surveys or research on our behalf To enhance and deliver our services, maintaining records. Legitimate Interest.
Performance of a contract

Sub-Contract Processing

Phoenix contracts organisations to process personal data under written contracts or service level agreements which defines that they must meet our data privacy requirements. These organisations include but are not limited to:

  • The secure hosting of databases
  • The provision of email or text services
  • Carrying our services in your tenancy agreements and leases e.g. repairs
  • Carrying out or hosting the results of surveys
  • Processing payments for rents and service charges

International Transfers

Phoenix will not transfer your information outside of the European Economic Area without adequate safeguards. Phoenix does not transfer any personal data internationally, besides information transferred to SurveyMonkey and Campaign Monitor, which are both covered by the Privacy Shield.

If we did decide to transfer any personal data internationally, this will be in line with our internal procedure and the terms in this privacy notice will be updated.

Keeping your information secure

We store personal information both electronically and in paper form.

We implement security processes and technical security solutions to protect the personal information we hold from:

  • Unauthorised access
  • Improper use or disclosure
  • Unauthorised modification
  • Unlawful destruction or accidental loss.

When you contact us, we may ask you to provide us with some information so that we can confirm your identity. If other people (e.g. family members, support workers, solicitors) act on your behalf we will take steps to ensure that you have agreed for them to do so. This may include asking them to provide us with supporting information to indicate your consent. We do this to protect you and to make sure that other people cannot find things out about you that they are not entitled to know.

Employees and third parties who have access to, or are associated with the processing of your personal information, are also required to make reasonable efforts to safeguard it.

Automated Decision Making and Profiling

We do not make any decisions about you using automated means and we do not envisage this changing in the near future. If the situation does change, we will notify you in writing.

Phoenix does carry out profiling in the form of Rent Sense by Mobysoft in order to help facilitate rent payments and assist in the performance of the contract. To quote the RentSense website:

“RentSense is a series of complex algorithms that analyse a housing organisation’s tenants’ transactional history, which is coupled with a predictive analytical application that then predicts which tenants will and won’t pay their rent. It then produces a list of tenants, in priority order, that need contacting that week regarding their rent.”

Marketing

We ask for people’s consent to market information. Further direct marketing may be conducted by post or by telephone under our legitimate interests.

If you do not wish to receive marketing material, or you would like to edit your preferences, please contact us. Unsubscribe options will also be offered.

Please note, opting out of marketing does not remove the ability for Phoenix to contact you regarding the delivery of services related to your tenancy or lease.

Visiting our websites

When you visit one of our websites, we collect standard internet log information for statistical purposes.

  • We use cookies to collect information in an anonymous way, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. To find out more about how we use cookies please see our Website Privacy Notice.
  • We do not make any attempt to identify visitors to our websites. We do not associate information gathered from our sites with personally identifying information from any source.
  • When we collect personal information, for example via an online form, we will explain what we intend to do with it on the form

Our websites contain links to various third party websites. We are not responsible for the content or privacy practices of any external websites that are linked from our sites.

Changes

We will notify you of any changes to this privacy policy.

Access to your information and correction

You have the following rights regarding your personal data:
 

Rights available Description of rights
Right to be informed Individuals have the right to be informed about the collection and use of their personal data.
Right of access You have the right to obtain confirmation from Phoenix as to whether or not personal data concerning you are being processed, and, where that is the case, access to that personal data.
Right to rectification You have the right to oblige Phoenix to rectify inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed by providing a supplementary statement.
Right to erasure (right to be forgotten) You have the right (under certain circumstances, but not all) to oblige Phoenix to erase personal data concerning you. This will never include current tenancy or lease details necessary to fulfil our contractual obligations, or any information we are required to process under law.
Right to restriction of processing You have the right (under certain circumstances, but not all) to oblige Phoenix to restrict processing of your personal data. For example, you may request this if you are contesting the accuracy of personal data held about you.
Right to data portability You have the right (under certain circumstances, but not all) to oblige Phoenix to provide you with the personal data about you which you have been provided in a structured, commonly used and machine-readable format.
You also have the right to oblige Phoenix to transmit that data to another controller.
Right to withdraw consent If the lawful basis for processing is consent, you have the right to withdraw that consent. If you wish to withdraw your consent, contact us immediately.
Right to object to direct marketing Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
Rights in relation to automated decision making and profiling Phoenix does not perform any automated decision-making based on personal data that produces legal effects or similarly significantly affects you.

Phoenix is not a scheduled body under the Freedom of Information Act and therefore does not have to respond to any requests under the Act.

For more information about any of your rights, please visit: https://ico.org.uk/for-organisations/guide-to-the-general-data-protectio...

Contacting Us

Please contact us if you have any questions in relation with this notice or the information we hold about you:

The Green Man,
355 Bromley Road, London,
SE6 2RP.

data.protection@phoenixch.org.uk

0800 0285 700

If you are not satisfied with the response you receive you have the right to lodge a complaint with the supervisory authority and the right to judicial remedy. In the United Kingdom this is:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
(t) 0303 123 1113
(e) casework@ico.org.uk

Other relevant documents
Staff Privacy Notice
Recruitment Privacy Notice
Data Protection Policy
Website Privacy Notice
Terms and Conditions of Gold Membership Scheme

Recruitment Privacy Notice

This notice explains how Phoenix Community Housing Association (referred to in this notice as we, us or our) collects and uses information during the recruitment and selection process.  This notice covers the following:

The table at the end of this notice provides an overview of the data that we collect, the purposes for which we use that data, the legal basis which permits us to use your information and the rights that you have in relation to your information.

We may update this notice from time to time.

What is personal data?

Personal data is any information that tells us something about you. This could include information such as your name, contact details, date of birth, and references.

How do we collect personal data?

We collect personal data about you from various sources including:

  • from you when you contact us directly through the application and recruitment process
  • from other people when we check references or carry out background checks – if we do this we will inform you during the recruitment process of the exact checks that are carried out.

What information do we collect?         

We collect the following categories of information about you:

  • Personal contact details such as name, title, address, telephone number and personal email addresses
  • Date of birth
  • Equal opportunities monitoring information such as gender, race, ethnicity, religion, health and sexual orientation
  • Recruitment information (including copies of right to work documentation, references and other information in your CV or cover letter or otherwise provided as part of the application process)
  • Details of next of kin and emergency contacts.

How do we use your information?

We use your information for the following purposes:

  • To make decisions about your recruitment and appointment
  • To check you are legally entitled to work in the UK
  • To assess your qualifications for a particular job or task
  • To conduct data analytics studies to review and better understand job application rates
  • To carry out equal opportunities monitoring.

What is the legal basis that permits us to use your information?

Under data protection legislation we are only permitted to use your personal data if we have a lawful basis for doing so as set out in the data protection legislation. We rely on the following lawful bases to use your information for employment/engagement related purposes:

  • Where we need information to enter into a contract with you
  • Where we need to comply with a legal obligation
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

The table at the end of this notice provides more detail about the information that we use, the lawful basis that we rely on in each case and your rights.

Some information is classified as "special" data under data protection legislation. This includes information relating to health, racial or ethnic origin, religious beliefs or political opinions, sexual orientation and trade union membership.

This information is more sensitive and we need to have further justifications for collecting, storing and using this type of personal data. There are also additional restrictions on the circumstances in which we are permitted to collect and use criminal conviction data.

We may process special categories of personal data and criminal conviction information in limited circumstances. Where we process special category data about you, we also ensure we have an additional lawful basis from Article 9 of the UK GDPR, and where necessary a condition for processing from the Data Protection Act 2018.

How do we share your information?

We share your personal data in the following ways:

  • Where we use third party services providers who process personal data on our behalf in order to provide services to us. This includes recruitment agents and IT systems providers.
  • We will share your personal data with third parties where we are required to do so by law or to comply with our regulatory obligations.
  • With other entities in our group as part of our regular reporting activities and in the context of a business reorganisation or group restructuring exercise.
  • If we sell any part of our business and/or integrate it with another organisation your details may be disclosed to our advisers and to prospective purchasers or joint venture partners and their advisers.

Where we share your personal data with third parties we ensure that we have appropriate measures in place to safeguard your personal data and to ensure that it is solely used for legitimate purposes in line with this privacy notice.

How do we keep your information secure?

Your personal data is kept securely in restricted folders. We will ensure access to personal data is restricted to employees working within our group on a need to know basis. Training will be provided to any employees working within the group who need access to your personal data to ensure it is secured at all times.

For how long do we keep your information?

As a general rule we keep personal data about candidates for the duration of the recruitment and selection process and for a period of six months after candidates have been notified whether their application has been successful. However, where we have statutory obligations to keep personal data for a longer period or where we may need your information for a longer period in case of a legal claim, then the retention period may be longer.

Your rights in relation to your information

You have a number of rights in relation to your personal data, these include the right to:

  • be informed about how we use your personal data
  • obtain access to your personal data that we hold
  • request that your personal data is corrected if you believe it is incorrect, incomplete or inaccurate
  • request that we erase your personal data in the following circumstances:
    • if we are continuing to process personal data beyond the period when it is necessary to do so for the purpose for which it was originally collected
    • if we are relying on consent as the legal basis for processing and you withdraw consent
    • if we are relying on legitimate interest as the legal basis for processing and you object to this processing and there is no overriding compelling ground which enables us to continue with the processing
    • if the personal data has been processed unlawfully (i.e. in breach of the requirements of the data protection legislation)
    • if it is necessary to delete the personal data to comply with a legal obligation.
  • ask us to restrict our data processing activities where you consider that
    • personal data is inaccurate
    • our processing of your personal data is unlawful
    • where we no longer need the personal data but you require us to keep it to enable you to establish, exercise or defend a legal claim
    • where you have raised an objection to our use of your personal data.
  • request a copy of certain personal data that you have provided to us in a commonly used electronic format. This right relates to personal data that you have provided to us that we need to take steps to enter into a contract with you and personal data where we are relying on consent to process your personal data
  • object to our processing of your personal data where we are relying on legitimate interests or exercise of a public interest task to make the processing lawful. If you raise an objection we will carry out an assessment to determine whether we have an overriding legitimate ground which entitles us to continue to process your personal data;
  • not be subject to automated decisions which produce legal effects or which could have a similarly significant effect on you.

If you would like to exercise any of your rights or find out more, please contact us at data.protection@phoenixch.org.uk

The Table at the end of this notice provides more detail about the information that we use, the legal basis that we rely on in each case and your rights.

Complaints

If you have any complaints about the way we use your personal data please contact People Services who will try to resolve the issue. If we cannot resolve your complaint, you have the right to complain to the Information Commissioner.

Table: quick check of how we use your personal data

Purpose Data used Legal basis Which rights apply?

Recruitment decisions

 

 

 

Personal contact details, recruitment information, employment/engagement records.

Contract.  We process your data with a view to employing you and entering into a contract with you.

Legitimate interests. It is in our legitimate interests to evaluate whether you have the necessary skills and qualities to perform the relevant role.

The generally applicable rights plus the right to object.

Right to work checks

 

 

 

 

Information relating to your right to work status, national insurance number, passport number, nationality, tax status information, and personal contact details.

 

Legal obligation and to exercise our rights in the field of employment law, and to prevent unlawful acts. We have an obligation to ensure that those who work for us have the right to work in the UK as well as to establish the statutory excuse to avoid liability for the civil penalty for employing someone without the right to undertake the work for which they are employed.

The generally applicable rights plus the right to object.
Fraud and crime prevention

Information about criminal convictions and offences committed by you. Identity verification information.

Public interest and legitimate interest and to exercise our rights in the field of employment law, and to prevent unlawful acts. To ensure the prevention of fraud and crime is monitored.This will ensure a safe workplace for all.

The generally applicable rights plus the right to object.
Diversity monitoring Gender, marital status and dependents and information about your race or ethnicity, religious beliefs, health, sexual orientation. Public interest and to ensure the equality of opportunity or treatment. The generally applicable rights plus the right to object.
To deal with legal disputes

Personal contact details, references, information submitted as part of the selection process and interview notes.

Legitimate interest and for the establishment, exercise or defence of legal claims. To process personal data to make and defend legal claims to ensure that our legal rights are protected.

The generally applicable rights plus the right to object.

*The following generally applicable rights always apply: right to be informed, right of access, right to rectification, right to erasure, right to restriction and rights in relation to automated decision making.

Data Retention Guidelines

Our data retention guidelines set out the timescales for which documents should be held for.

Subject Access Request

Under Data Protection Regulations you have the right to know whether we hold information about you. This means that you can ask for a description of the personal data which we hold, what purposes we use it for and who that data may be disclosed to. You are also entitled to a copy of your personal data.

You can make a subject access request in person, on the phone and by completing and returning this form. You should receive a written response and a copy of any appropriate documents within one calendar month of us receiving this form.

Please be aware that requests may be refused where;
• The information may cause harm to your mental or physical condition;
• Your identity has not been confirmed;
• Where requests are manifestly unfounded or excessive.