Our commitment
Housing Direct handles personal data on behalf of public-sector bodies and the households they support. We are committed to processing personal data lawfully, fairly and transparently, and to the highest standards of security.
Controller & processor roles
For account and platform data we generally act as a data controller. When we process household and placement data on behalf of an authority, we generally act as a data processor under that authority's instructions, governed by a Data Processing Agreement (DPA).
UK GDPR principles
We apply the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.
Data Processing Agreement
Authorities and partners can enter into our DPA, which sets out the subject matter, duration, nature and purpose of processing, the types of data and categories of data subjects, and the obligations and rights of each party. Contact us to request the current DPA.
Subject access & rights requests
We support data subject rights including access, rectification, erasure, restriction, objection and portability. Where we act as processor, we will assist the relevant controller in responding to requests promptly.
Data breaches
We maintain incident response procedures and will notify affected controllers without undue delay on becoming aware of a personal data breach, supporting any required notification to the ICO and data subjects.
Sub-processors
We use vetted sub-processors to deliver the service (for example hosting and communications). All sub-processors are bound by contractual data-protection obligations. A current list is available on request, and we will give notice of intended changes.
International transfers
Household data is stored in the UK. Any transfer outside the UK is protected by appropriate safeguards such as the UK International Data Transfer Agreement or applicable adequacy regulations.
Certifications
Contact our DPO
Our Data Protection Officer can be reached at dpo@housingdirect.co.uk or by writing to the registered address marked for the attention of the DPO.