Merge pull request #393 from communitiesuk/privacy-notice

Privacy notice

app/views/content/privacy_notice.md

@@ -0,0 +1,46 @@
+## How are we using your information?
+
+If your household has entered a new social housing tenancy, social housing providers will share your personal information with the Department for Levelling Up, Housing & Communities (DLUHC) for research and statistical purposes.
+
+## How is this information provided?
+
+The information is provided via ‘<%= t('service_name') %>’, a service funded and managed by DLUHC. It collects information on the tenants or buyers, tenancy or sale, and the dwelling itself. Some of this information is personal and sensitive, so DLUHC is responsible for ensuring that all data is processed in line with data protection legislation.
+
+## Why are we sharing this information?
+
+Information collected using this service is shared with other government departments and agencies. Data is shared with the Greater London Authority and the Regulator of Social Housing. Data providers can also access data for their organisations via the online service. Data is only shared for research and statistical purposes.
+
+## How does this affect you?
+
+It will not affect your benefits, services or any treatments you receive. The information shared is anonymous and handled in accordance with the law. We are collecting and sharing your information to help us better understand the social housing market and inform social housing policy.
+
+## If you want to know more
+
+Social housing lettings and sales data is collected on behalf of DLUHC for research and statistical purposes only. Data providers do not require the consent of tenants to provide the information, but tenants have the right to know how and for what purpose data is being collected, held and used.
+
+The processing must have a lawful basis. In this case the processing is necessary for the performance of a task carried out in the public interest to meet a function of the Crown, a Minister of the Crown, or a government department.
+
+You have the right to object and you have the right to obtain confirmation that your data is being processed, and to access your personal data. You also have the right to have any incorrect personal data corrected.
+
+The information collected via this service relates to your tenancy, the dwelling you are living in or buying, and your household. Some of the information may have been provided by you as a tenant when signing the new tenancy or buying your property. Other information has been gathered from the housing management systems of social housing providers.
+
+Data collected will be held for as long as necessary for research and statistical purposes. When no longer needed, data will be deleted in a safe manner. We are aware that some of the data collected is particularly sensitive. For example:
+
+* ethnic group
+* if previous tenure is a hospital or prison or approved probation hostel support
+* if household left last settled home because discharged from prison, a long stay hospital or other institution
+* if source of referral is probation or prison, youth offending team, community mental health team or health service
+
+All the information collected via this service is treated in accordance with data protection requirements and guidelines.
+
+Data is published by DLUHC in aggregate form on an annual basis as part of a report and complementary tables.
+
+You can visit <www.gov.uk/government/collections/rents-lettings-and-tenancies> to access the annual publications on lettings. Or visit <gov.uk/government/collections/social-housing-sales-including-right-to-buy-and-transfers> to view the publications on sales.
+
+The detail level data is anonymised and protected to minimise the risk of identification and held with the UK Data Archive for research purposes.
+
+## Making a complaint
+
+If you are unhappy with any aspect of this privacy notice, or how your personal information is being processed, contact the Department Data Protection Officer at: <dataprotection@communities.gsi.gov.uk>
+
+If you are still not happy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at [ico.org.uk/concern](https://ico.org.uk/concern).

app/views/layouts/_footer.html.erb

@@ -5,7 +5,8 @@
 
       <h3 class="govuk-heading-s govuk-!-margin-bottom-1">Online helpdesk</h3>
       <p class="govuk-body govuk-!-font-size-16">
-        <a class="govuk-link govuk-footer__link" href="https://digital.dclg.gov.uk/jira/servicedesk/customer/portal/4/group/21" rel="noreferrer noopener" target="_blank">CORE helpdesk (opens in a new tab)</a></p>
+        <%= govuk_link_to("CORE helpdesk (opens in a new tab)", "https://digital.dclg.gov.uk/jira/servicedesk/customer/portal/4/group/21", class: "govuk-footer__link", rel: "noreferrer noopener", target: "_blank") %>
+      </p>
 
       <h3 class="govuk-heading-s govuk-!-margin-bottom-1">Telephone</h3>
       <ul class="govuk-list govuk-!-font-size-16">
@@ -20,9 +21,16 @@
         </li>
         <li class="govuk-!-margin-bottom-0">We aim to respond within 2 working days</li>
       </ul>
+
+      <h2 class="govuk-visually-hidden">Helpful links</h2>
+      <ul class="govuk-footer__inline-list govuk-!-margin-top-6 govuk-!-margin-bottom-0">
+        <li class="govuk-footer__inline-list-item">
+          <%= govuk_link_to("Privacy notice", privacy_notice_path, class: "govuk-footer__link") %>
+        </li>
+      </ul>
     </div>
     <div class="govuk-footer__meta-item">
-      <a class="govuk-footer__link govuk-footer__copyright-logo" href="https://www.nationalarchives.gov.uk/information-management/re-using-public-sector-information/uk-government-licensing-framework/crown-copyright/">© Crown copyright</a>
+      <a class="govuk-footer__link govuk-footer__copyright-logo govuk-!-margin-bottom-1" href="https://www.nationalarchives.gov.uk/information-management/re-using-public-sector-information/uk-government-licensing-framework/crown-copyright/">© Crown copyright</a>
     </div>
   <% end %>
 <% end %>