GDPR - Your questions answered

The General Data Protection Regulation (GDPR) was introduced into UK law on 25 May 2018. The Data Protection Act 2018 is the UK's implementation of GDPR. Everyone responsible for using personal data has to follow strict rules called 'data protection principles'. They must make sure the information is: used fairly, lawfully and transparently. GDPR improves the rights of individuals to control the data held about them. GDPR requires organisations to be more transparent about the data they collect and how they use it. 

We take our data protection responsibilities seriously. We only collect information needed to manage our business. We hold your information safely and only keep it for as long as is necessary. To reflect GDPR we have made some changes and updates to our Data Protection Policy, reviewed our processes and introduced a Privacy Notice.

The Information Commissioner’s Office (ICO) has issued guidance to all organisations on how to implement the GDPR - this includes reviewing our reasons for collecting information and demonstrating our commitment to the confidentiality and security of this information. 

A Privacy Notice is a way of communicating what information we hold, what our legal reason for collecting the information is and what we use the information for. It also lets you know what your rights are.

We have made every effort to simplify the wording of our Privacy Notice so that it easy to understand and we have made it available online, on display in our reception areas and in our Community Hubs.

We hold your information either securely within our online systems or on paper, which is held securely within our offices. We have data protection policies and procedures in place to manage this security and we regularly test and check our procedures.

We will never sell your information to other organisations. We will only share your information as needed with partners providing services to you, with your agreement or in the case of an emergency. The Privacy Notice describes the types of ‘third party’ organisations with whom we need to share information.

In addition to service providers, it is important that you tell us who you wish us to share information with, for example, your family members. We will not share information with family members unless you have given us permission and their contact details.

No you do not have to do anything. We are legally required to make you aware of your rights under GDPR. That’s why we have made the Privacy Notice available online, downloadable, on display and available in leaflet format on request from our offices. 

You can request to see what information we hold about you. This is known as a Subject Access Request or SAR. You can request a Subject Access Request form from our offices or download a copy from the Data Protection section of the website. 

You can find out more about the new data protection regulations from the Information Commissioners Office (ICO) website at

You can do this by contacting a member of the Housing Team. Use the Get in Touch button at the bottom of this page or the Contact Us page.

You can contact the Data Protection Team as follows.In writing to;

Data Protection Officer, Woven
Laganwood House, 44 Newforge Lane, Belfast BT9 5NW
Tel: 028 90 427211, Email:

If you have serious concerns about the way your information is being managed by Habinteg, you can contact the Information Commissioner's Office directly at

Under EU General Data Protection Regulation (GDPR) you are entitled to request and receive a copy of any personal data we hold about you. We can provide information about any processing of your personal data that is being carried out, the retention periods which apply to your personal data, and any rights to rectification, erasure, or restriction of processing that may exist. CCTV Some of our properties have CCTV in public areas to deter crime and anti-social behaviour and to promote public safety by helping to identify and prosecute criminal offenders. You can ask for a copy of any CCTV images taken of yourself in the same manner as the above, by making a 'subject access request'. Subject Access Request Form You may download and print a copy of our Subject Access Request form from the bottom of the webpage. You are not obliged to complete this form to make a request, but doing so will make it easier for us to process your request quickly.

Our use of cookies

Some cookies are necessary for us to manage how our website behaves while other optional, or non-necessary, cookies help us to analyse website usage. You can Accept All or Reject All optional cookies or control individual cookie types below.

You can read more in our Cookie Notice


These cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

Analytics cookies

Analytical cookies help us to improve our website by collecting and reporting information on its usage.

Third-Party Cookies

These cookies are set by a website other than the website you are visiting usually as a result of some embedded content such as a video, a social media share or a like button or a contact map