I, Mark, am the Data Controller and Processor for Blue Waters Housing CIC.

The basis for holding your data is “Legitimate Interests.” This means the data I collect is necessary for fulfilling our contract, such as providing housing or support, and is data you would reasonably expect me to hold and use.

For those who enquire or make referrals, the data I hold includes basic information such as your name, email address, and phone number. It also includes information provided as part of the referral form, records including support plans and related documentation, emails, texts, and messages exchanged between us, as well as information from third parties like housing teams or commissioners.

Some of the data you provide may fall under “special category data,” as defined by the General Data Protection Regulation. This data is processed as necessary for medical diagnosis or providing health care in line with a contract with a health professional.

Data is not shared unless required, such as with your social or key worker, or under specific legal requirements, which will be discussed with you during the referral process.

The data is primarily used to provide housing and support through Blue Waters Housing CIC. It may also be shared for onward referrals or social prescribing with partner organizations.

Your data is securely stored in the following ways. Emails are held on my computer’s hard drive, exchange server, or secure cloud storage like Dropbox. Messages, including those sent via WhatsApp or Facebook Messenger, are stored on fingerprint or code-protected devices. Sensitive information like support plans is kept on a secure server or in a locked filing cabinet.

Your data will be retained for seven years as required by my insurer. After this period, paper records are shredded, and digital records are permanently deleted.

Data security is a priority. All data is stored securely, and transmissions are encrypted whenever possible. For accounting purposes, Excel spreadsheets are used. However, I cannot control data you send me via apps like Facebook, which may access such information independently.

In the event of a data breach, Blue Waters Housing CIC will notify the Information Commissioner’s Office (ICO) and any affected individuals within 72 hours while taking steps to minimize harm.

You have rights regarding the data I hold. You have the right to access, and I will provide your data within 30 days unless circumstances like holidays or illness delay the process. You have the right to rectification, so if your data is inaccurate, let me know, and I will correct it promptly. You also have the right to erasure, and you can request your data be deleted unless it is needed for specific purposes like research. Additionally, you have the right to restrict processing of your data, often as a temporary measure, and the right to data portability, where I can provide your data in a format to transfer to another organization. You also have the right to object to processing based on legitimate interests or certain types of research, though I do not engage in direct marketing or public tasks.

Regarding cookies, my website uses them to enhance your experience. Cookies are small data files stored on your device to record online preferences. While they help us understand website engagement, they do not collect personally identifiable information.

You can restrict or block cookies through your browser settings. For more guidance, visit www.aboutcookies.org. My website also uses Google Analytics, which collects information anonymously to analyze trends without identifying visitors. For more, see Google Analytics’ Privacy Policy.

If you have concerns about your data or its processing, feel free to reach out to me at Blue Waters Housing CIC.