1. The identity and contact details of the Ministry of Housing, Communities and Local Government and our Data Protection Officer
MHCLG is the data controller. The Data Protection Officer can be contacted at dataprotection@communities.gov.uk.
2. What personal data we are collecting and why
Your personal data is being collected to create and manage your account for the Make Things Right training website, track your progress through the training course, communicate with you about the training course, and improve the course based on usage data and feedback.
The following personal data is being collected for this purpose:
a) Organisation
b) Name
c) Email address
3. Lawful basis for processing the data
The data protection legislation sets out when we are lawfully allowed to process your data. The lawful basis that applies to this processing is that it is necessary for the performance of a task carried out in the public interest. The Make Things Right training enables users to better support social housing tenants, which is a task carried out in the public interest.
4. With whom we will be sharing the data
Your personal data is stored in our WordPress database hosted on Kinsta’s platform. We limit access to your personal information to those employees and service providers who need it to deliver the training service.
5. For how long we will keep the personal data, or criteria used to determine the retention period
Your personal data will be retained for as long as your account remains active on the Make Things Right training website, plus 12 months after your last login. This additional period allows for potential follow-up communications related to the training and for administrative purposes. After this period, your personal data will be deleted unless there is a legal requirement to retain it for longer.
6. Your rights, e.g. access, rectification, erasure
The data we are collecting is your personal data, and you have rights that affect what happens to it. You have the right to:
a) Know that we are using your personal data
b) See what data we have about you
c) Ask to have your data corrected, and to ask how we check the information we hold is accurate
d) Complain to the ICO (see below)
In some circumstances you may also have the right to:
a) Request erasure of your personal data
b) Request restriction of processing of your personal data
c) Request the transfer of your personal data to you or a third party
d) Object to processing of your personal data
e) Withdraw consent at any time where we rely on consent to process your personal data
You can exercise these rights by contacting our Data Protection Officer. You will not have to pay a fee to access your personal information or to exercise any of your rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
7. Sending data overseas
Your personal data is stored in our WordPress database hosted on Kinsta’s platform with servers located in London, UK. This data is not sent overseas.
Anonymous survey responses are collected and stored in Typeform on Amazon AWS servers in Virginia, USA. As these survey responses contain no personal data, this does not constitute a transfer of personal data outside the UK.
8. How we protect your data
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These include:
a) Hosting your data on secure Kinsta architecture using an isolated private instance on Google Servers in London
b) Using Cloudflare Firewall and DDoS Protection
a) Limiting access to your personal information to those who need it to deliver the training service
We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Website cookies and third party links
Cookies
Cookies are small files that are placed on your computer, tablet or smartphone by websites and apps that you use. We use cookies to:
a) Remember your login details
b) Track your progress through the training course
c) Improve the functionality of our website
Third party links
Our website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for how they handle your personal information. When you leave our website, we encourage you to read the privacy notice of every website you visit.
10. Changes to our privacy notice and your duty to inform us of changes
This privacy notice was last updated on 22/04/2025.
Any changes we make to this privacy notice in the future will be posted on this page and, where appropriate, notified to you by email. The updated privacy notice will take effect as soon as it has been updated or otherwise communicated to you.
11. Complaints
When we ask you for information, we will keep to the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.
If you are unhappy with the way the Department has acted, you can make a complaint.
If you have any questions about this privacy notice or how we handle your personal information, please contact our Data Protection Officer at dataprotection@communities.gov.uk.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), and can also contact them for independent advice about data protection, privacy and data sharing.
The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow, Cheshire,
SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
https://ico.org.uk/