Customer Privacy Notice
Our privacy policy relating to our applicants for housing, members, tenant-members, and service providers can be downloaded here.
Website Privacy Notice
Who we are
The controller of your personal data is: Hackney Housing Co-operative, 117 Rendlesham Road London E5 8PA
.
Contact: hhc@hackneyhousingcoop.org.uk (for privacy questions).
What data we collect (visitors)
Even if you do not have an account, sign in, or submit forms, our website may automatically collect and process the following information when you visit:
- Internet Protocol (IP) address and related connection information (e.g., approximate location derived from IP, device/connection metadata).
- Technical and usage data, such as:
- date and time of your visit
- pages viewed
- time spent on pages
- referring/exit pages
- browser type and language
- operating system or device type
- Web server / traffic data used to operate, secure, and maintain the website.
These data items are processed because they may be considered personal data under UK data protection law (for example, IP addresses can identify or be linked to a device and potentially an individual).
Why we use this data (purposes)
We process visitor data for the following purposes:
- Service operation and technical performance
To make the website available and ensure it functions correctly. - Security and fraud prevention
To detect, prevent, and investigate attacks, misuse, or abnormal traffic (including where IP-based blocking or rate-limiting is used). - Monitoring and troubleshooting
To identify errors and maintain the stability of the website. - Analytics / aggregated insights (if used)
To understand general usage patterns and improve content and performance. Where analytics are used, they are typically based on technical logs and/or aggregated reporting.
Legal basis
We process personal data under UK GDPR/UK Data Protection Act 2018 on one or more of the following legal bases:
- Legitimate interests (Article 6(1)(f)) for operating the site, improving performance, and protecting against security threats.
- Legal obligation (Article 6(1)(c)) where applicable.
- Consent where you are presented with and accept any optional tracking/analytics choices (if you use any non-essential technologies). If your site does not use cookies or similar tools requiring consent, you can remove this line.
How long we keep data (retention)
We keep visitor IP and related technical/usage data for limited periods and only as long as necessary for the purposes listed above, typically:
- Web server access logs (including IP addresses): [e.g., 30 days]
Then deleted or anonymised in accordance with our record-keeping practices. - Security-related logs or incident data: kept [e.g., 90 days] unless retained longer for an investigation or legal requirement.
- Analytics/traffic data (if applicable): [e.g., 26 months] in aggregated form, or deleted sooner where feasible.
If you prefer to be less specific, you can use a wording like:
“Access and security logs are retained for a limited period (generally no longer than [X] days) and then deleted or anonymised.”
Who we share data with
We do not provide visitor IP/technical data to others for their marketing purposes.
We may share limited data with:
- Service providers that host or help operate the website (e.g., hosting providers, infrastructure providers, monitoring tools), acting as processors, under contract.
- Legal authorities when required by law, or where necessary to exercise or defend legal claims.
International transfers
If any service providers process data outside the UK, we will ensure appropriate safeguards are in place (for example, adequacy decisions or Standard Contractual Clauses) and that transfers comply with applicable UK requirements.
Your rights
Depending on how the information is processed and the context, you may have rights including:
- to request access to your personal data
- to request rectification (where applicable)
- to request erasure in certain circumstances
- to request restriction of processing
- to object to processing based on legitimate interests
- to lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, contact hhc@hackneyhousingcoop.org.uk