Privacy policy

Summary


This privacy notice will help you understand how we collect, use and protect your personal information. If you have any queries about this privacy notice or how we process your personal information, please contact our Data Protection Officer: DPO@Homegroup.org.uk or get in touch with us by one of the other methods set out at the end of this notice.

Who we are


The organisation responsible for processing your personal information is Home Group Limited, charitable registered society no. 22981R, One Strawberry Lane, Newcastle upon Tyne NE1 4BX. This means that we are a data controller under The United Kingdom General Data Protection Regulation (also known as UK GDPR) and The Data Protection Act 2018.

This privacy notice also covers our subsidiary companies Home in Scotland Ltd, Home Group Repairs Partnership Limited, Home Group Developments Ltd and our property sales brand - Persona.


The personal information you have provided, we have collected from you or we have received about you from third parties may include:

  • name, address and address history, date of birth, and gender (and proof of your identity/photo ID)
  • contact details, including telephone number and/or email address
  • financial information, including pay slips, bank details and credit/debit card details (although we do not retain complete payment card information)
  • details about your family and dependents (e.g. your marital status and number of children) and anyone authorised to act on your behalf if applicable
  • proof of housing eligibility, any interest or equity in other property
  • information about your living circumstances (e.g. your employment details, income details and home ownership)
  • profile data including your preferences (for example when you are applying to buy a property from us), feedback and survey responses
  • criminal convictions, information about alleged anti-social behaviour or fraud
  • health details and medical history
  • information about disabilities or vulnerabilities
  • details about your race, ethnicity, religious beliefs, sex life, sexual orientation
  • other personal information required to enable us to provide you with the service or support you have requested
  • aggregated data such as statistical or demographic data which does not identify you individually

We may collect information about you in the following ways

  • when you apply for one of our properties or services or a job by completing an application form either manually or online
  • when you register to receive information from us
  • when you call, write, email, text or meet with us or respond to a survey or enter a competition
  • when you log a repair request or pay your rent and/or service charge
  • when you set up a Direct Debit
  • automated technologies or interactions – when you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal - information from you by using cookies and other similar technologies
  • when you contact us on social media or use our Live Chat service
  • when you make a complaint or provide feedback
  • when you contact our Customer Service Centre
  • when we operate CCTV/sound recording systems for the detection and prevention of crime and to capture evidence of breach of tenancy or anti-social behaviour (appropriate notices will be displayed - - in locations with recording equipment in operation)
  • when we take photographs at our events, at our properties and in our communities for general publicity use (we will only use photographs in which you can be identified if you have given us your written consent)
  • when we receive information about you from third parties including local authorities, benefit offices, the police, statutory agencies, medical services and support organisations, financial institutions, credit agencies, councillors, MPs or other representatives acting on your behalf
  • phone calls to our Customer Service Centre (CSC) are recorded for training and monitoring purposes and our recordings are usually kept for a period of three months.

We process information about you in order to understand, deliver and improve the service you require for example to manage your tenancy, to provide you with care and support, to sell you one of our properties or to manage your job application.

The legal basis for processing your information is usually that the processing is necessary for a contract we have with you (e.g. your tenancy, lease or support agreement) or in relation to discussions before entering into that contract.

We also sometimes need to process your information in order to comply with the law for example when we need to inform the relevant authorities about a benefits fraud.

In other instances, we may have a legitimate interest to process your information for our internal business and administrative functions. Other types of legitimate interest we might have in processing or sharing your personal information may include preventing loss of revenue and fraud prevention. For example we may pass your details to a debt collection agency if you have not paid your rent or service charge (in pursuit of our legitimate interest in preventing loss of revenue).

The table below sets out the broad categories of information we process and the legal basis for processing it.

Type of personal information

Reason for processing this information

Legal basis for processing

Contact details e.g. name, address, telephone number and email address

In order to contact you and for our contractors to contact you. We may appoint a research company to carry out research on our tenants or communities in order to improve Home Group.

Performance or preparation to perform a contract with you and legitimate interests

Proof of Identity e.g. photo ID, NI number, DOB

Proof of housing eligibility e.g. right to rent.

Legal obligation

Financial information e.g. proof of income, bank account, credit/debit card details

To assess your eligibility for housing or support etc. and enable you to pay your rent and set up a Direct Debit. We may contact customers to support them with money advice, benefit advice and wellbeing advice.

Performance or preparation to perform a contract with you and legitimate interests

Information about your family, marital status, children, employment details etc.

To assess your eligibility for housing or support

Performance or preparation to perform a contract with you and legitimate interests

Information about rent arrears, ASB etc

To provide a tenancy reference to another landlord

Performance or preparation to perform a contract with you and legitimate interests

Criminal convictions

To assess your eligibility for housing, for support or for a job etc.

Legitimate interests, legal obligation (including for the prevention of crime and protection of individuals)

Details of your preferences when you are applying for a property with us e.g. how many bedrooms etc.

To tailor the search to your requirements

Performance or preparation to perform a contract with you

Information about your race, ethnic origin, religion, sex life or sexual orientation

For monitoring purposes and to comply with employment law

Legal obligation and to carry out obligations and exercise rights in the specific field of employment , social security and social protection law or explicit consent

Information about your health and medical history, including details of prescribed drugs

To assess your needs or working capacity and to ensure appropriate medical assistance is sought in an emergency

Performance or preparation to perform a contract with you and to assess the working capacity of the employee, to provide and manage health and social care services or pursuant to a contract with a health professional

Explicit consent

Vital interests

Information about potential anti-social behaviour and/or violence

To safeguard our staff and contractors

Legal obligation and legitimate interests

Information about disabilities or vulnerabilities

To assess your needs or working capacity or to safeguard staff

Legal obligation, performance or preparation to perform a contract with you and to assess the working capacity of the employee, to provide and manage health and social care services or pursuant to a contract with a health professional

Explicit consent

Emergency contact details

In case of emergency

Vital interests

Explicit consent

Marketing and communications

To keep our records updated and to study how you use our products and services

Legitimate interests


We may analyse your personal information to help us assess your needs. This will allow us to contact you with information that is relevant to the services we offer to you or to assist in delivering our customer promise.

For example, during the winter months we may use your personal data (which we already retain in accordance with our contractual requirements of delivering a services to you), such as age and vulnerabilities alongside property data such as EPC rating and property size to consider the support we can offer to customers who are potentially susceptibility to winter fuel poverty. This directly helps us deliver on our promise to provide you with a safe place to live by providing necessary support if required.

We may also use financial information and other factors to contact customers to support them with money advice, benefit advice and wellbeing advice.

We may make use of additional information about you when it is publicly available from external sources to help us do this effectively. We may also use the personal information you have provided directly to us.

Any personal information we use for analysis/profiling will be processed in line with our legal basis for processing that is listed in more detail within this notice.


Where relevant, given the nature of the services provided to you, we may also share your information with the following categories of third parties:

  • our contractors and sub-contractors and other organisations acting on our behalf, including our maintenance contractors, social and health care professionals, our careline providers, our out of office telephone service contractor, our market research contractors, customer communication platform providers (such as Sendgrid and Twilio), online payment solution providers (such as WorldPay), - our mass mailing partners (such as Critiqom)
  • we may appoint a research company to carry out research on our customers or communities in order to improve a Home Group service, know more about our customers/communities or establish if there are any gaps in what we are doing, on these occasions if contacted individuals can refuse to participate in the research without prejudice and can opt out of future research by contacting DPO@Homegroup.org.uk
  • doctors, mental health teams
  • next of kin, family members
  • managing agents
  • other landlords
  • local authorities, Choice Based Lettings (CBL) organisations
  • social services
  • the police and other emergency services
  • government agencies and departments and regulatory bodies
  • utility companies and council tax offices to ensure billing details are correct
  • mortgage brokers, financial advisors, surveyors and valuers relating to a property sale
  • auditors
  • commissioners
  • tracing agents, debt collection companies and credit reference agencies
  • other bodies for the prevention or detection of fraud

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We only permit our third party service providers to process your personal information for specified purposes and in accordance with our instructions.


We are committed to ensuring that your information is kept secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and operational procedures to safeguard and secure the information we collect online.

When you make a payment online, for example when you pay your rent or service charge, we use a third party online payment solution provider such as WorldPay to process the payment. These companies use an SSL (Secure Socket Layer) technology to protect your personal information. SSL is currently the preferred method to securely transfer credit card and other sensitive information over the internet. This encryption ensures that information sent during any transaction is protected against any unauthorised interception.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.


We will not transfer or store your personal information outside of the European Economic Area (EEA) unless:

  • the country that we send the information to is approved by the Information Commissioner's Office as providing an adequate level of protection for personal information; or
  • the recipient has agreed with us standard contractual clauses approved by the Information Commissioner's Office, obliging the recipient to safeguard the personal information; or
  • another situation exists where the transfer is permitted under applicable data protection legislation.

We may need to collect certain personal information by law, or under the terms of a contract we have with you.

If you choose not to give us this personal information, it may in certain limited circumstances delay or prevent us from meeting our obligations to you. It may also mean that we cannot perform the services you have asked for. In some circumstances, it could mean that we will need to terminate our relationship with you.

We will always tell you at the time we try to collect such personal data, if your refusal to provide that data may impact on our ability to provide services to you.


We may use your personal information to tell you about relevant products and services. This is what we mean when we talk about ‘marketing’.

The personal information we have for you is made up of what you tell us, and data we collect when you use our services, or from third parties we work with.

We study this to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

We will only send you electronic marketing messages if we have your consent to do so and you can ask us to stop sending these marketing messages by following the unsubscribe link in any marketing email you receive.

Whatever you choose in relation to marketing, we may still need to contact you for other reasons to enable us to provide the products and services you have asked for and to tell you about changes to your existing contract with us.

We may ask you to confirm or update your marketing and contact choices, if you take out any new products or services with us in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our business.

If you change your mind about your marketing contact preferences you can update your choices at any time by following the unsubscribe link in any marketing email you receive or by contacting DPO@Homegroup.org.uk.


We will only keep your information for as long as necessary to fulfil the purpose we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and in accordance with our retention and disposal guidelines.

Please contact DPO@Homegroup.org.uk to request a copy of our Retention Guidance


Under the legislation you have the following rights in respect of your personal information:

  • to obtain access to, and copies of, the personal information we hold about you i.e. to make a Subject Access Request (SAR)
  • to require that we cease processing your personal information if the processing is causing you damage or distress
  • where we rely on your consent to process your personal information, you can withdraw your consent at any time by contacting our DPO at DPO@homegroup.org.uk
  • to require us not to send you marketing communications
  • to require us to erase your personal information
  • to require us to restrict or for you to object to our data processing activities
  • to receive from us the personal information we hold about you which you have provided to us in a reasonable format specified by you, including for the purposes of you transmitting that personal information to another data controller (right to data portability)
  • to require us to correct the personal information we hold about you if it is incorrect

Please note that these rights may be limited by the legislation and we may be entitled to refuse requests where exceptions apply. You can find out more about your rights from the Information Commissioner’s Office.

Should you wish to exercise any of your rights, please contact our DPO by emailing DPO@homegroup.org.uk or using the contact details below under "how to contact us".


All of our websites use cookies. To find out more about how we use cookies, please see our cookie policy.

Our websites may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave one of our websites, we encourage you to read the privacy notice of every website you visit.

Our websites are not intended for children and we do not knowingly collect information relating to children.

If you take a specific product from us, we have additional privacy information about those products. You can find out more by clicking the relevant links below.

Customers using our Persona website

Persona is the sales brand and registered trade mark of Home Group Limited.

By using the Persona website to access our services, including making an enquiry about or reserving one of our properties, you will be required to provide us with your personal information, including your name, address and contact details.

If you provide any personal information relating to a third party (for example a joint purchaser or person living with you), you confirm that you have their consent to provide to us their personal information.

Customers using My Home Account

When you create a My Home Account, we collect personal information about you to enable you to do things online such as pay your rent, report a repair, request help, set up and manage Direct Debits, manage your account, make a complaint or compliment, apply to rent a home or buy a home.

The type of information we collect about you and what we need it for is covered in our overarching privacy notice.

When you give us personal information, we take steps to ensure that it is treated securely. Any sensitive information, such as credit/debit card details is encrypted and protected with the following software – 128 Bit encryption on SSL. When you are on a secure page, a lock icon will appear within the URL.


Where we have given you a password or you have chosen one yourself, to enable access to certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Customers who contact us via social media

When you contact us via social media such as Facebook, Twitter and Hotjar for example, we use a third party system called Orlo to manage your queries. The system keeps a record of the conversation so that we can effectively manage customer service.

Customers using our Live Chat service

When you use our Live Chat facility, we collect information about the type of device you are using e.g. IOS or android etc.

We also capture the IP address. During the course of the chat conversation, we may obtain personal information from you such as name, address, date of birth to help provide a resolution to your query.

This information is then transferred to our primary housing management system OpenDoor to assist with raising repairs, obtaining information etc.

A record of the chat is recorded within EICC (the live chat system), for training and quality purposes recoding a verbatim copy of the chat conversation.


We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about how we use your personal information very seriously. We encourage you to contact us with any concerns about how we collect and use your personal information. We would also welcome any suggestions for improving our procedures and policies.

This privacy notice does not provide exhaustive detail of all aspects of our collection and use of personal information. We are happy to provide any additional information or explanation needed.

Any requests for additional information should be sent to DPO@Homegroup.org.uk or using the contact details below under "how to contact us".

Any complaints will be dealt with in accordance with our complaints policy. You also have the right to make a complaint to the Information Commissioner’s Office at any time.


We keep this privacy notice under regular review. This privacy notice was last updated on 27/05/2022.


If you want to request information about our privacy notice or exercise any of your data protection rights, please contact us in any of the following ways:

Email our Data Protection Officer: DPO@homegroup.org.uk

Email our customer service centre (non-urgent enquiries) using the enquiry form

Telephone our customer service centre (urgent enquiries): 0345 141 4663

Write to our Data Protection Officer at:

Home Group
One Strawberry Lane
Newcastle upon Tyne
NE1 4BX


Say hello

If you would like to book a meeting space, contact roombookings@onestrawberrylane.co.uk

If you have a question about anything else, contact hosts@onestrawberrylane.co.uk