Privacy Policy

1. Introduction

Attentive Housing UK Limited ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our supported living accommodation services.

We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is at [Registered Address].

2. Information We Collect

2.1 Personal Data from Property Owners and Landlords

• Name, address, and contact details
• National Insurance number and tax information
• Bank account details for rent payments
• Property ownership documentation
• Insurance and certification records
• Financial information for affordability assessments

2.2 Personal Data from Residents and Care Recipients

• Name, date of birth, and contact information
• National Insurance number and benefit information
• Medical and care needs information
• Mental capacity assessments
• Emergency contact details
• Risk assessments and support plans
• Records of care and support provided

2.3 Website and Digital Data

• IP address and device information
• Cookies and tracking data
• Website usage analytics
• Contact form submissions
• Email communications

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract: To perform our obligations under service agreements
• Legal obligation: To comply with CQC, safeguarding, and other regulatory requirements
• Vital interests: To protect the health and safety of residents
• Public task: To provide social care and supported living services
• Legitimate interests: For business administration and service improvement
• Consent: Where you have specifically agreed (e.g., marketing communications)

4. How We Use Your Information

4.1 Service Delivery

• Providing supported living accommodation services
• Managing property rentals and guaranteed rent schemes
• Conducting care assessments and support planning
• Arranging necessary care and support services
• Managing tenancies and housing benefit claims

4.2 Regulatory and Legal Compliance

• Complying with CQC registration and inspection requirements
• Meeting local authority commissioning obligations
• Safeguarding vulnerable adults
• Reporting to relevant authorities as required by law
• Maintaining health and safety records

4.3 Business Operations

• Processing payments and managing accounts
• Communicating about services and changes
• Improving our services and website
• Handling complaints and enquiries
• Marketing our services (with consent)

5. Sharing Your Information

We may share your personal data with:

• Local authorities: For commissioning, safeguarding, and housing benefit purposes
• NHS and healthcare providers: For medical care and health assessments
• Care Quality Commission: For regulatory compliance and inspections
• Professional advisers: Lawyers, accountants, and consultants (under confidentiality)
• Emergency services: Where required for health, safety, or legal reasons
• Banks and payment processors: For financial transactions
• Insurance providers: For claims and policy management

We do not sell personal data to third parties for marketing purposes.

6. International Transfers

We primarily process data within the UK. Any international transfers are subject to appropriate safeguards under UK GDPR, including adequacy decisions or standard contractual clauses.

7. Data Retention

We retain personal data for as long as necessary for the purposes outlined in this policy:

• Care records: 8 years after last contact (CQC requirement)
• Financial records: 7 years (HMRC requirement)
• Property management records: 6 years after tenancy ends
• Safeguarding records: Permanently or as directed by local authority
• Website analytics: 26 months
• Marketing data: Until consent is withdrawn

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion in certain circumstances
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a structured format
• Object: Opt out of certain types of processing
• Withdraw consent: Where processing is based on consent

Some rights may be limited where we have legal obligations to retain data (e.g., safeguarding or regulatory requirements).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure backup and disaster recovery procedures
• Regular penetration testing and vulnerability assessments

10. Cookies and Website Tracking

Our website uses cookies to improve functionality and user experience. For detailed information about our cookie usage, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent banner.

11. Children's Privacy

Our services are primarily for adults aged 18 and over. Where we provide services to young people (16-18), we ensure appropriate safeguards and parental involvement as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through our website and, where appropriate, by direct notification. The updated policy will be effective from the date published.

13. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us:

If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.