How we use personal information

Privacy promise

1. We promise to keep your information safe.
2. We promise not to sell it.
3. We give you ways to manage and review your marketing choices at any time.
4. We keep a record of when and how we get consents and what you were told at the time.

How the law protects you

The law says we must have one or more of these reasons to collect your data:

1. To fulfil a contract with you
2. When it is our legal duty
3. When it is in our legitimate interest (which we must define)
4. When you consent.

Transparency means you have the right to be informed about how we will use your data.

Groups of personal information:

1. Financial – Your financial position, status and history.
2. Contact – Where you live and how to contact you.
3. Socio-demographic – Details about your work, nationality, education (especially students.)
4. Transactional –Details of payments you make to us.
5. Contractual – Details about the products or services we provide to you.
6. Communications – What we learn about you from letters, emails and conversations between us.
7. Open data and public records – E.g. Electoral Information, Internet, Newspapers.
8. Documentary data – E.g. copies of ID.
9. Consents – How you agree we can contact you.
10. National identifiers – E.g. National Insurance Number.

We collect Data from Third Parties such as social networks, fraud prevention agencies, public information services.

We may share this information with:

1. HMRC, Regulators and other authorities
2. Credit Reference Agencies
3. Fraud Prevention Agencies
4. Any party linked to you (e.g. Joint Tenant)
5. Workmen needing to enter your house
6. Utility companies and Council Tax
7. Companies you ask us to share data with (e.g. Homelet, Leaseguard)
8. If you use direct debits we will share your data with the Direct Debit scheme.
9. If we sell our business, we will only do this if they agree to keep your information safe.

Credit reference agencies

We will share information with CRA’s and they will give us information about you. The data we exchange can include:

1. Name, address date of birth
2. Application form details
3. Financial situation and history
4. Public Information
5. Legal Right to Rent

We will use this information to:

1. Assess if you can afford the property
2. Make sure what you have told us is the truth
3. Help detect and prevent fraud
4. Track and recover debts

On a joint tenancy, CRA’s may link your data to other joint tenants. You can ask CRA’s to break the link, but you normally have to prove you no longer have a financial link with them.

If you do not provide data we may not be able to offer you a tenancy.

How long we keep information:

1. We will keep it as long as you are a client
2. After you stop being a client we may keep data for up to 10 years for one or more of the following reasons:
   

   (a)	To respond to questions or complaints or
   (b)	To show why we have treated you fairly or
   (c)	For historical research and statistical purposes.
   (d)	In the case of legal action of any kind

You can access personal information by writing to us at (BMH Property Management, 15 Sea View Street, Cleethorpes, DN35 8EU).

You can also ask us to correct any information you believe to be incorrect.  We do not have to provide information where the request is disproportionate or has already been given previously.

What if you ask us to stop using your personal information?

This is also known as “The right to be forgotten”.  There may be legal or other reasons why we need to keep or use your data. In such cases we can restrict the use of your data to legal claims or to exercise legal rights.

You can withdraw consent by writing to us at (BMH Property Management, 15 Sea View Street, Cleethorpes, DN35 8EU).

You can complain to us if you are unhappy with how we have used your personal information at (BMH Property Management, 15 Sea View Street, Cleethorpes, DN35 8EU).

You can also complain to the Information Commissioner’s office at www.ico.org.uk  Find out on their website how to report a concern.

Additionally

Vital interests – We can pass on details in an emergency e.g. medical care if you are physically or legally incapable of giving consent.

Fees

We supply a copy of information free of charge. We can charge a reasonable fee when a request is manifestly unfounded, or excessive, particularly if it is repetitive. We may charge a fee where we have already supplied the information.

We must supply information without delay and in any event within one month. This can be extended by up to 2 months if during that month the request is considered complex and/or numerous, and if we do we have to explain why.

We must verify the identity of the person making the request using “reasonable means”

Data protection impact assessment

This will allow an organisation to identify and fix problems at an early stage.

Further guidance see ICO Conducting privacy impact assessments code of Practice.