Data Protection - Subject Access Request

You are entitled (as a Data Subject) to be told if we hold any information about you and if so, to be provided with a copy of that information. This is called a Subject Access Request (SAR) and this gives you the right to Access, granted under the Data Protection Act.

Please note, information is subject to our Data Retention Policy and can only be provided if we still hold any relating to you and exemptions do not apply.

For more information on the right of subject access, please go to the Information Commissioner's Office (ICO) website.

 

  • What am I entitled to?

    When you make an application, we will:

    • tell you whether we hold any of the requested data on you.
    • give you a copy of any requested data, subject to exceptions.

    Exceptions

    The current data protection legislation confirms we are not required to provide with information:

    • from References we give for the purposes of an individual's education, training or employment or the provision of a service by us.
    • that we are required to publish and is publicly available.
    • that would obstruct an official or legal inquiry, investigation or procedure.
    • that would enable prejudices of the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties.
    • that would impact public or national safety.
    • that would infringe on the rights and freedoms of others.

    If my data falls under an exception, does this mean I won't get the full document?

    You will receive the data you have requested, providing that it does not fall under one of the exceptions. If it falls under any of the exceptions mentioned, then we could either:

    • not disclose the data/documents.
    • remove information from documents by 'redacting data' to take away any information that belongs to another living person.
  • How long do you have to comply?

    We will fulfil your request within one calendar month of the day after you submit your request. Therefore if your request was made on 29 March, we would complete it by 30 April.

    Please note: there is a discretionary extension of up to three months for requests that are manifestly unfounded or excessive.

  • Is there a cost?

    SARs are free unless your request is manifestly unfounded, excessive or you require duplicate copies. In this situation, we reserve the right to charge a reasonable fee of £25 per complete copy for the administrative costs of complying with such requests.

  • How will you verify my identity?

    Before we are able to process any requests, we must be sure of your identity.

    We will need proof of your identity and proof of address, which can be one of the following:

    • Passport.
    • Birth certificate.
    • Driving licence.

    And one of these:

    • This year's rent/service charge statement.
    • A utility bill from within the last three months.
    • A Government of Local Authority letter from within the last year.

    If you don't have any of the above, please contact us on the details below so we can discuss alternatives.

  • Enforced subject access

    Under the Data Protection Act (2018) and the General Data Protection Regulations (GDPR), it is an offence for a person to require you to apply for information from us for the purposes of:

    1. Recruitment

    2. Your continued employment (this includes works carried out under a contract of services or office holder, apprenticeships, volunteering and work placements)

    3. For any contract for the provision of services.

    If you have been required to complete this form for any of the above reasons, the person asking you to do so may have committed an offence. If this is the case, please contact us.

  • Can I make a request for another person's data?

    We will only accept requests for another person's personal data if they give consent to do so or you have legal represented powers i.e. power of attorney. You will be asked to provide evidence of this. 

    Can I make a claim for a deceased relative or friend's data?

    The Data Protection Act only applies to the living and therefore this is not a subject access request. 

    We would provide you with that information if you can provide your legal right for us to do so.

  • How do I make a request?

    There is no formal requirement of how a request should be made. To help us process your request more effectively, you can complete our optional form below, which will send it through to our Subject Access team. This form is to provide the data subject with information they are entitled to under the Data Protection Act. It applies to any information that can directly or indirectly identify a living person.

    When making a request, either verbally or in writing, please provide as much information as possible including timeframes, types of data and nature of the data to enable us to give you what you are seeking.

    If you have any queries please email DPO@SW9.org.uk

  • Sharing your data with third parties for customer surveys

    We will share your name and contact details with appropriate third parties who will carry out email or telephone customer satisfaction surveys on our behalf to enable us to improve our services - this also includes surveys for development, including buying a new home.

    If you do not want to be included in these surveys, please email optout@networkhomes.org.uk 

    We'd love for you to take part in the surveys and have your say. We love to hear when we're doing great, but we also want to know your feedback about any areas which you think need improving.

    We aim to not contact anyone who is signed up to the telephone preference service and you will be given an opportunity at the time of any call to not participate.

    If you have any queries please email DPO@SW9.org.uk

    You can complete an online form on the Network Homes website

  • Terminology

    Data subject - this is the person on whom the information is being requested is related to.

    Representative - this is someone requesting the data on behalf of the data subject. We will only be able to provide data to a representative who has authority through formal written consent, which must be attached below, or though legal routes such as power of attorney covering the information requested. 

    You can check our privacy policy here.