GDPR Rights & Data Protection
Your comprehensive guide to data protection rights under UK GDPR
Our GDPR Commitment
Social Home is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have implemented comprehensive measures to protect your personal data and respect your data protection rights.
This page provides detailed information about your rights under UK GDPR and how to exercise them. For more information about how we collect and process your data, please see our Privacy Policy.
Data Protection by Design: We implement privacy-first principles in all our systems and processes, ensuring your data is protected from the ground up.
Understanding GDPR
The UK GDPR is a regulation that protects the personal data and privacy of individuals within the UK. It gives you control over your personal data and requires organisations to be transparent about how they collect, use, and protect your information.
As a social housing property management platform, we handle sensitive personal data and are committed to the highest standards of data protection and privacy.
Our Commitment: We implement GDPR by design, meaning privacy protection is built into every aspect of our platform and processes.
Right to Access (Article 15)
You have the right to obtain confirmation from us as to whether we are processing your personal data, and if so, to obtain a copy of that data and information about how we process it.
How to Exercise
- • Submit a Subject Access Request (SAR)
- • Response time: Within 30 days
- • Cost: Free of charge
Right to Rectification (Article 16)
You have the right to have inaccurate personal data rectified, or incomplete personal data completed.
How to Exercise
- • Contact us with the corrections needed
- • Response time: Within 30 days
- • Cost: Free of charge
Right to Erasure (Article 17)
You have the right to have your personal data erased in certain circumstances, often referred to as ‘the right to be forgotten’.
When You Can Exercise This Right
- • Data is no longer necessary for the purpose collected
- • You withdraw consent and no other legal basis exists
- • You object to processing and no overriding legitimate grounds exist
- • Data has been processed unlawfully
- • Erasure is required by law
Request Deletion: Use our account deletion form →
Right to Restriction (Article 18)
You have the right to restrict the processing of your personal data in certain circumstances.
When You Can Exercise This Right
- • You contest the accuracy of the data
- • Processing is unlawful but you oppose erasure
- • Data is no longer needed but you need it for legal claims
- • You have objected to processing and verification is pending
How to exercise: Contact us at privacy@social-home.co.uk
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
This Applies When
- • Processing is based on consent or contract
- • Processing is carried out by automated means
How to exercise: Submit a data portability request to us at privacy@social-home.co.uk
Right to Object (Article 21)
You have the right to object to the processing of your personal data in certain circumstances.
You Can Object To
- • Processing based on legitimate interests
- • Processing for direct marketing purposes
- • Processing for scientific/historical research or statistical purposes
How to exercise: Contact us with your objection and we will review your request
Automated Decision Making (Article 22)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
How We Use Automated Decision Making
- • Risk assessment for property management decisions
- • Automated compliance checking
- • Maintenance priority scoring
How to exercise: Request human intervention in automated decisions affecting you
How to Exercise Your Rights
Contact Methods
- Email: privacy@social-home.co.uk
- Post: Office 6288, 58 Peregrine Road, Ilford, England, IG6 3SZ
- Contact form: Get in touch
- Online: Data subject rights form
What We Need
- • Proof of identity
- • Specific right details
- • Data description
- • Your relationship with us
Response Times
Standard: 30 days
Complex: Up to 60 days
Free: No charge
Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities, including:
Our DPIAs are available for review upon request and involve consultation with our privacy team and, where appropriate, the Information Commissioner's Office.
Data Breach Response
In the event of a personal data breach, we will:
We maintain comprehensive breach response procedures and conduct regular breach simulation exercises.
International Data Transfers
When we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place:
Complaints & Oversight
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: ico.org.uk
Email: casework@ico.org.uk
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
You can also seek a judicial remedy through the courts if you believe your data protection rights have been infringed.
Cookies & Tracking
We use cookies and similar technologies in compliance with the Privacy and Electronic Communications Regulations (PECR). You can control your cookie preferences through your browser settings or our cookie consent tool.
We do not use cookies for advertising purposes and limit tracking to essential functionality and analytics to improve our services.
Data Protection by Design
We implement data protection by design and by default in all our systems and processes:
Contact Information
For all GDPR-related inquiries, please contact us:
Kunda House Limited
Email: privacy@social-home.co.uk
Contact form: Get in touch
Address: Office 6288, 58 Peregrine Road, Ilford, England, IG6 3SZ
Need to Delete Your Account?
If you wish to exercise your right to erasure, please use our account deletion form to request the removal of your personal data.