M&Y Maintenance and Construction Privacy Notice
M&Y Maintenance and Construction delivers repairs, maintenance and construction services across the North West. M&Y Maintenance and Construction’s primary customer base is Regenda Homes Limited and Redwing Living Limited, however, M&Y Maintenance & Construction also delivers a number of external contracts for private clients.
For further information on how Regenda Homes and Redwing Living manage your personal information, please see a copy of their Privacy Notices at https://www.regenda.org.uk/data-protection and https://www.redwingliving.co.uk/data-protection
This privacy notice tells you what to expect when M&Y Maintenance and Construction collects personal information. It applies to information we collect about:
- visitors to our websites
- job applicants and our current and former employees.
1. What is data protection?
The General Data Protection Regulation and Data Protection Act (2018) sets out rules for processing personal information. This applies to personal information we might hold about you on some paper files and on computers. The Act states that those who record and use personal information must ensure that it is handled properly. Therefore we are required to ensure that personal information is:
- processed in a lawful, fair and transparent way
- held only for the purposes we collected it for
- adequate, relevant and limited to what is necessary
- held only for as long as we need it
- kept secure.
The Act also allows you to find out what personal information is held about you. The Information Commissioner’s Office (ICO) is responsible for regulating, enforcing and promoting good practice and transparency in the access and use of personal information.
Organisations have to notify the ICO of all the purposes for which they will be processing information. We are a happy to supply you with a copy of the notification upon request or you can contact the ICO by calling 0303 1231113, or writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
You can find out more information online at www.ico.org.uk.
2. What information does M&Y Maintenance and Construction collect about its customers?
We begin the process of obtaining information about you directly from our client via our joint electronic housing management system. The information we have access to includes:
- name and address
- contact details
- details of your contact with us
- information on housing need for you
- access arrangements
- repairs, repair history and property information
3. Why do we have access to this information?
M&Y Maintenance and Construction has access to this information for a number of reasons, including:
- to provide a repairs and maintenance service
- to deliver the investment programme i.e. kitchen, bathroom and boiler replacements
- to engage with customers to get feedback on our services
- to communicate with your during the process of undertaking your repair or homes improvement
- to manage our automated appointment system, DRS
4. Sharing your information
We will not share your personal information without your consent, unless allowed by law. Examples of organisations we may share your information with, where appropriate are:
- Contractors or companies who provide materials i.e. kitchens, bathroom, boilers
- Health & Safety Executive (HSE)
5. Why does M&Y Maintenance and Construction process your personal data?
M&Y Maintenance and Construction needs to processes your personal data in order to provide a repairs and maintenance service for your landlord or deal with your enquiry.
6. How long do we keep your personal information?
All of your information, correspondence, and notes about your repairs will be held in your landlord’s secure housing management system and some information might be kept within our secure email and IT systems.
We keep your information for 6 years following the termination of your tenancy, in accordance with your landlords data retention guidelines. If your case has been subject to an insurance claim or other dispute we may keep the data for 16 years.
All personal data is securely destroyed when no longer required. Electronic files are deleted in such a way that they cannot be retrieved and all paper records are disposed of in confidential shredding bins.
Information is held in paper files and on our computer systems. Not all members of staff are able to access this information, only those who need to. We use the information to deliver a service to you. There may be occasions when we have to share information with others (detailed in section 5) to enable us to deliver our services and fulfil our legal and contractual obligations. We are legally required to share information in the following circumstances:
- prevention or detection of crime
- apprehension or prosecution of offenders
- assessment or collection of tax or duty owed to customs and excise
- in connection with legal proceedings
- to comply with the law.
8. Importance of accuracy
If any of the information we send is incorrect or inaccurate, please tell us so we can make the necessary changes.
9. Visitors to our websites
When someone visits www.my-maintenance.co.uk we use a third party services, Google Analytics and Hotjar to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
When you use our website, no user-specific data is collected by either M&Y Maintenance and Construction or any third party. We use Google Analytics for trend reporting and visitor behaviour to help us improve our website and search functionality.
9.1 Security and Performance of the M&Y Maintenance and Construction
M&Y Maintenance and Construction uses a third party service to help maintain the security and performance of the M&Y Maintenance and Construction website. To deliver this service it processes the IP addresses of visitors to the M&Y Maintenance and Construction website. This information is not used for identifying purposes, except for investigation if an intrusion occurs.
These are the cookies we use:
Google Analytics - to monitor website use and the type of browser that is accessing the website
Hotjar – to monitor website and page usage
10. People who contact us via social media
We use a third party provider, Hootsuite to manage our social media interactions.
If you send us a private or direct message via social media the message will not be shared with any other organisations.
11. People who call our Customer Contact Centre
When you call M&Y Maintenance and Construction Customer Contact Centre, these calls are not recorded.
Our Customer Contact Centre can offer a translation service for customers when English is not their first language, this is provided by a third party company, LanguageLine Solutions. This company does not retain any information from the calls or record them.
12. People who email us
M&Y Maintenance and Construction email is encrypted at rest and in transit, using several strong encryption protocols, and technologies that include Transport Layer Security/Secure Sockets Layer (TLS/SSL), Internet Protocol Security (IPSec), and Advanced Encryption Standard (AES). If your email service does not support the same encryption, you should be aware that any emails we send or receive may not be protected in transit.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software.
M&Y Maintenance and Construction use web beacons on our Websites and in our emails. When we send emails, we may track behavior such as who opened the emails and who clicked the links. This allows us to measure the performance of our email campaigns and to improve our features for specific customers. To do this, we include single pixel gifs, also called web beacons, in emails we send. Web beacons allow us to collect information about when you open the email, your IP address, your browser or email client type, and other similar details.
13. What are your rights
13.1 Right of access to your data
If we hold personal information about you, you have the right to ask us:
- what we use the information for
- to provide you with a copy of the information you are entitled to
- to supply you with details of the purposes for which we use the information and who it is shared with
- for incorrect information to be corrected.
To see the information we hold about you, you can ask M&Y Maintenance and Construction for a Subject Access Request form.
Once this form has been completed this should be sent to the Data Protection Officer at the address below, including:
- a detailed description of what information you are requesting
- two proofs of identity: one with your name and address (e.g. a recent utility bill) and one to confirm your identity (name and date of birth, e.g. a copy of your driving license or birth certificate).
We have one month from the date we receive the completed Subject Access Request form and appropriate identification to provide you with the information you are entitled to receive. You have the right to receive this information electronically if you wish.
13.2 Right to rectification
If you think that M&Y Maintenance and Construction is holding incorrect personal information about you, you have the right to have this personal information amended.
Once you have advised M&Y Maintenance and Construction of the details of the incorrect data and the required amendments, your data will be updated within 30 days. If your personal data cannot be amended, M&Y Maintenance and Construction will advise you in writing why this is the case.
13.3 Right to be forgotten
You have the right to have your personal information erased if it is no longer required to manage your tenancy or your enquiry.
13.4 Right to restriction of processing
You have the right to restrict the processing of your personal data if it is no longer required to manage your tenancy or to handle your enquiry. This means that M&Y Maintenance and Construction cannot further process your data, for example we cannot share your data with a third party.
13.5 Right to object
You have the right to object to the processing of your personal information if the data is not required to manage your repair or enquiry, or you have not given M&Y Maintenance and Construction permission to process your data, for example, for direct marketing.
14. Job applicants, current and former M&Y Maintenance and Construction employees
M&Y Maintenance and Construction is a subsidiary of Regenda Homes. Regenda Homes is the data controller for the information you provide during the employment recruitment process. If you have any queries about the process or how we handle your information please contact us.
The following explains how M&Y Maintenance and Construction uses the information you provide in your application, along with your rights, our reasons for requesting it and who will have access to it.
14.1 What information do we collect from you?
We collect information that is specifically provided by you as part of the application process. We will collect the following (but not limited to):
- Name, address, email, telephone number
- CV (if applicable)
- Equal opportunities monitoring information (defined as special categories data) - this information is purely for statistical analysis and monitoring purposes
- Answers to application questions
- Any other information you wish to provide in support of your application
We use your details and information presented so that we can assess your suitability for employment with us and carry out our statistical analysis.
14.2 Why do we collect this information and who do we share it with?
Details you provide in this application:
- Will be held on our computer systems and may be downloaded by us
- Will be used to deal with your application
- Will be made available to us and our processors
- Will be used for communication with you regarding the vacancy
- Will be used to satisfy legal requirements
- Will be used for statistical analysis
- Will be held and may be used to contact you about other vacancies
Our recruitment process requires that we contact the referees provided by you as part of our checks to ascertain suitability of employment. The content of the reference will not be shared without the referee's permission.
If you are successfully recruited, we will upload your details to our HR system, Cascade. As a member of staff you will sign a contract of employment and agree to additional terms on how your data is handled and stored.
14.3 How can you access the information we hold about you? Your rights
If you choose to register on our website, you may access your profile, correct and update your details, or withdraw your details at any time. To do this, you can access your personal profile by using the secure login. In all cases we will treat requests to access information or change information in accordance with applicable legal requirements.
You have the following rights in relation to the way in which we deal with your personal data:
- the right of erasure or to be forgotten
- the right to rectification if information is inaccurate or out of date
- the right of data portability (to obtain and reuse your personal data)
- the right to object to M&Y Maintenance and Construction processing your personal data
- the right to withdraw your consent with regards to the handling of your personal data
- you have the right to ask for a copy of the information we hold about you (Subject Access Request)
- You have the right to lodge a complaint with a supervisory authority - the ICO
Within your candidate account, you can also use the Download Data feature to generate an XML file of the current data we hold on you that you have provided and/or have access to within the account.
Where you exercise your right to object or withdraw your consent we may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so. In such a case, we will not process more personal data than is required under the circumstances.
14.4 Conditional offer
If we make a conditional offer of employment we will ask you for information so that we can carry out pre-employment checks. You must successfully complete pre-employment checks to progress to a final offer. We are required to confirm the identity of our staff, their right to work in the United Kingdom and seek assurance as to their trustworthiness, integrity and reliability.
You will therefore be required to provide:
- Proof of your eligibility to work in the UK – you will be asked to attend our office with original documents, and we will take copies.
- Proof of your qualifications, if required.
- You may be asked to complete a DBS application to declare any unspent convictions, depending on the nature of the role you apply for.
- We will contact your referees, using the details you provide in your application, directly to obtain references.
- We will also ask you to complete a questionnaire about your health. This is to establish your fitness to work and any adjustments we need to consider before you start. This is done through our current occupational health provider.
- Our Code of Conduct requires all staff to declare if they have any potential conflicts of interest. If you complete a declaration, the information will be held by our Business Assurance team.
If we make a final offer, we will also ask you for the following:
- Bank details – to process salary payments.
- Emergency contact details – so we know who to contact in case you have an emergency at work.
- Membership of Pension scheme – so we can send you a questionnaire to determine whether you are eligible to join the Social Housing Pension Scheme.
If you accept a final offer from us, your HR records will be held on Cascade which is an internally used employee database.
14.6 Health management
Corazon provide our Occupational Health service. If we make you a conditional offer, we will ask that you complete a questionnaire which will help to determine if you are fit to undertake the work that you have been offered, or advise us if any adjustments are needed to the work environment or systems so that you may work effectively.
We will send you a form to complete and return directly to Corazon. The information you provide will be held by Corazon who will provide us with a fit to work certificate or a report with recommendations. You are able to request to see the report before it is sent to us. If you decline for us to see it, then this could affect your job offer. If an occupational health assessment is required, this is likely to be carried out by Corazon.
14.7 How long is the information retained for?
If you are successful, Cascade will be the central reference for your data for the duration of your employment, plus six years following the end of your employment.
If you are unsuccessful at any stage of the process, the information you have provided until that point will be retained for 6 months from the closure of the campaign.
Equal opportunities information is retained for six months following the closure of the campaign for unsuccessful candidates. Successful candidates’ data will be stored via the Cascade system.
14.8 Fleet and mileage claims
The organisation is required to undertake statutory checks to ensure vehicles that our staff drive on behalf of the company are road worthy. To achieve this, we require staff to provide the following documents:
- Driving license details
- MOT (if applicable)
- V5 registration document (if applicable)
- Insurance details
This information is collected to ensure that any mileage payments paid to employees are done so in accordance with health and safety legislation, which requires us to ensure all travel undertaken for the business is compliant.
In addition, we carry out checks on all staff’s licenses through the DVLA to ensure they are legally able to drive both their own and company vehicles. This information includes:
- Driving convictions i.e. drink driving, speeding etc.
- Number of penalty points
This information is used to ensure all drivers are legally entitled to drive. In addition, we use this data to monitor staff who have a more than 6 penalty points on their driving license.
15. Complaints or queries
M&Y Maintenance and Construction tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of M&Y’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.
If you want to make a complaint about the way we have processed your personal information, you can contact us at firstname.lastname@example.org
16. Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last updated on 25 May 2018.
17. How to contact us
The Data Protection Officer
The Regenda Group
42 Henry Street
Telephone: 0151 703 3000