Privacy notice

This privacy statement explains how we collect and use your personal information and who we share it with.

Who we are

For the purposes of this Privacy Notice, The Riverside Group (Riverside) is the Data Controller of your personal data. You can contact our Data Protection Officer at:

Data Protection Officer, Riverside, 2 Estuary Boulevard, Estuary Commerce Park, Liverpool, L24 8RF

Email: [email protected]

The Riverside Group consists of a number of organisations, including

  • One Housing Group joined Riverside in 2022, providing homes and support services in the South of England.
  • Riverside Scotland (formerly known as Irvine Housing Association), is a registered Scottish charity, providing affordable homes in the West of Scotland.
  • Prospect Homes develops properties and all profits made from home sales are given back to Riverside to invest in social value work and communities across the UK.
  • Compendium Living specialises in delivering large-scale, complex, residential-led development and urban regeneration projects
  • Evolve is a commercial subsidiary of Riverside responsible for repairs and maintenance of our properties in the North and Northwest of England

What we do

The Riverside Group is a charitable registered provider of social housing. We work in three areas:

  • Social housing – we offer housing for people on low incomes or those who may need extra support. Our aim is to provide quality homes and a service that surpasses the expectations of our customers, at an affordable price. Read more: Find a home
  • Care and support – we offer accommodation and a range of services in conjunction with local authorities and partners to provide care and support solutions to vulnerable individuals and those at risk of homelessness. Read more: Care and Support services
  • Home ownership –  we specialise in affordable home ownership, including rent to buy, shared ownership and full home ownership with leasehold management and managed shared services. Read more: Riverside Home Ownership

Purposes of processing

We process a number of different categories of personal data to provide you with the services outlined in this Privacy Notice. These include:

Data type Definition Examples
Simple data Simple data is basic personal data that relates to an identifiable individual First name, maiden name, last name, username or similar identifier, marital status and dependents, spouse, next of kin, title, date of birth, billing address, delivery address, email address, telephone, mobile number, employment details
Behavioural data Behavioural data is data that describes the observed actions of an individual Location, travel, personal habits, personal preferences, interests and preferences, feedback, survey responses, lifestyle and social circumstances, website and app analytics data, search engine data, social media, physical interactions
Financial data Financial data is data relating to an identifiable individual’s financial status, transactions, or details relating to a financial account held by that individual Salary, benefits/social welfare, payments made and received, bank account details, debit or credit card details, balances, arrears.
Special Category or Sensitive Personal data Special category’ or ‘Sensitive’ Personal data is a sub-category of personal data that requires heightened Data Protection measures due to its sensitive and personal nature personal data revealing racial or ethnic origin;
personal data revealing political opinions;
personal data revealing religious or philosophical beliefs;
personal data revealing trade union membership;
genetic data;
biometric data (where used for identification purposes);
data concerning physical or mental health;
data concerning a person’s sex life; and
data concerning a person’s sexual orientation.

The personal data we collect from you, or other sources is processed and protected in accordance with the General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018.

This privacy notice tells you what to expect when Riverside collects and stores personal and sensitive personal data. It also tells you and how and why we may use your personal information to deliver the services listed above and the legal bases we rely on to do so.

International Transfers

Our website is hosted within the UK and our other systems are generally located on our premises or elsewhere within the European Economic Area (EEA).

We may share your personal data with third parties or companies that perform services on our behalf, such as those that provide and host our IT systems, or repairs and maintenance contractors. All third parties operate in accordance with legally binding contracts, and we will never give them more information than is necessary for them to perform the requested service.

Where we use third parties to provide storage services, these will usually be located in the UK or EEA. Some Cloud computing services that are used for email communications and campaigns and completing online surveys are based outside of the EEA.

Where your data is transferred outside of the EEA, we will make sure that transfers are only made to countries in which the European Commission has made an ‘adequacy decision’, or where appropriate safeguards are in place.

Your rights

You have a number of rights under the UK GDPR. These are set out below. You can request to exercise any your rights using this web form. You can also use the form if you wish to make a complaint about the way your personal data has been handled.

Please note that we will request photographic identification as proof of your identity. If you are unable to provide this, you may still submit the form and the Data Protection Team will contact you shortly to let you know what other forms of identification we can accept.

Access to personal information

You have a right to ask us what personal information we hold about you, and to request a copy of your information. This is known as a ‘subject access request’ (SAR).

You can also use the web form for submitting these requests. Alternatively, you can email us at [email protected], or contact customer services on 0345 111 0000.

We will respond to your request with all the information we are legally required to provide within 30 days. There may be limits on your access to some information; for instance, details about a third party or details about an investigation by the police.


If you need to correct any mistakes contained in the information we hold about you, you can let us know by contacting customer services on 0345 111 0000.

Data Portability

You have the right to ask us to transfer your data to another organisation where:

  • You have provided us with the data
  • We hold the data electronically

Erasure (‘right to be forgotten’)

You have the right to ask us to delete certain personal information we hold about you. You can do this where:

  • The information is no longer necessary for the purpose for which we originally collected/processed it
  • You withdraw consent, where consent was the basis for collection and processing
  • You object to the processing and there is no overriding legitimate interest for us continuing the processing
  • We have processed the information unlawfully
  • The personal information has to be erased in order to comply with a legal obligation

We can refuse to erase your personal information where the personal information is processed for the following reasons:

  • To exercise the right of freedom of expression and information
  • To enable functions designed to protect the public to be achieved, e.g. government of regulatory functions
  • To comply with a legal obligation or for the performance of a public interest task or exercise of official authority
  • For public health purposes in the public interest
  • Archiving purposes in the public interest, scientific research, historical research or statistical purposes
  • The exercise or defence of legal claims
  • Where we have an overriding legitimate interest for continuing with the processing.

Restriction on processing

You have the right to request that we stop processing your personal information in certain circumstances. We are allowed to store the information when processing is restricted, but we cannot do anything with it. You can do this where:

  • You challenge the accuracy of the information (we must restrict processing until we have verified its accuracy)
  • You challenge whether we have a legitimate interest in using the information
  • The processing is a breach of the UK GDPR or otherwise unlawful
  • We no longer need the personal data, but you need the information to establish, exercise or defend a legal claim

If we have shared your personal information with third parties, we are required to let them know about the restriction on processing unless doing so would be impossible or require an unreasonable amount of effort. If we decide to remove the restriction, we must let you know and explain why.

Objection to processing

You have the right to object to processing where we state it is in our legitimate business interests.

We must stop using the information unless we can demonstrate a compelling legitimate reason for the processing that outweighs your interests and rights, or unless the processing is required for us or another party to bring or defend legal claims.

Withdrawal of consent

If your consent is the basis for our use of your personal information, we will seek your consent to contact you for optional and/or non-essential services. Examples may include gathering comments after community activities or obtaining your permission to use images taken at those activities or other events.

You have the right to withdraw your consent to us processing your information at any time. We must stop using the information. We can refuse if we can rely on another reason to process the information such as our contractual obligations or legitimate interests

Find the information easily

We know data protection is important to you. We also know, sometimes it’s hard to find the information you need. To make things as simple as we can, we’ve categorised our privacy notice into areas that are relevant to you.

Providing you with a home

While you are a tenant, we use your information to apply for homes, help ensure we provide you with the best services and actively promote equal opportunities.

Owning your home

Find out more about how we use your information if you purchase or acquire one of our properties.

Property maintenance

Read about how we use your information to maintain the safety and standard of your home.

Support services

There are different types of support services we can offer you but we need your information to do this.

Customer Service, public interests and legal obligations

See how we use your information when you contact us or we contact you. You can also find information on our research and analysis activities and how we may be required to process your data for the welfare or wellbeing of others.