Your privacy

We are committed to a privacy by design approach to personal data.

This means that we protect the personal data of all of our customers, colleagues, and everyone we work with by following good data protection practices and principles.  

To request your data

The easiest way to request your data is using your online account with us . On your account:

  • fill in the required fields 

  • upload any relevant documents or images 

  • complete the declaration and submit  

Accessing your data 

One of the rights you have under the Data Protection Act 2018 is the right to access. This gives you the right to: 

  • know if your data is being processed 

  • access your personal data 

  • access any other information we may hold about you, including past conversations about you or records of any incidents 

  • know that your data is being processed correctly within the law 

 You are able to ask for this information at any time.  This is called a subject access request (SAR). 

Information we cannot give to you  

There is some information we cannot legally give you. For example: 

  • if the information would affect a police investigation or criminal prosecution 

  • if your request would also mean giving you information about someone else 

We can also refuse to respond to excessive or repetitive requests. If we do this, we will always explain why, and inform you of your right to complain. 

Making a subject access request online 

Before making a subject access request please make sure that the information you are looking for isn’t already available when you log in to your online account.

In your online account you will find lots of information about your tenancy including your appointment history, your safety certificates and planned maintenance.

You should still have access to your online account even if you are no longer a Bromford customer. 

If you need other information you should submit a subject access request.  

Other ways to make a request 

We recommend submitting your SAR through the online portal so that we can easily verify your identity.

If you do not have an online account, or if you would prefer to use another method you can also submit your request by emailing  dpo@bromford.co.uk. 

After we receive your request 

When we receive your request you will receive a confirmation in your online account. If you have requested in a different way you will not receive a notification. Once the process has started the Data protection officer may contact you to clarify your request. 

We will get the information you have requested to you as soon as possible, usually within one month. 

Sometimes we may have to extend this by up to two months if you request a lot of information, or if your request is complex.If so, we will always let you know about this within a month of receiving your request, and explain why we need the extra time. 

We will either make the information available on your online account or send it to you electronically. If you need a printed copy, let us know, although we may not be able to provide this if there is a lot of data.

Costs

Making a subject access is normally free. However, we may charge an administration fee if you make repeated, unneeded or excessive requests.

We may also charge a fee if you ask for multiple copies of the same information. This does not mean that we will also charge for any other requests you make.