Last Updated: 1st June 2025
Introduction
The Cadarn Housing Group Limited (“Cadarn”, “we, “us”, “our”) are a Registered Society under the Co-operative and Community Benefit Societies Act 2014, registration number 21180R, with our registered office at 5 Village Way, Tongwynlais, Cardiff, CF15 7NE. We are also a Registered Social Landlord, regulated by the Welsh Government, registered number L019. We are the Controller of the Personal Data we process, registered in the UK with the Information Commissioner’s Office (“ICO”), registration number ZB408001.
Our Data Protection Officer (“DPO”) is Evalian Limited, West Lodge, Leylands Business Park, Colden Common, Hants, SO21 1TH. Email – dpo@evalian.co.uk. Tel – 03330 500 111.
The purpose of this privacy notice is to explain what Personal Data we collect about you when you visit our website.
Please read this privacy notice carefully as it provides important information about how we handle your Personal Data and your rights. If you have any questions about any aspect of this privacy notice, you can contact us using the information provided below in the ‘Contact us’ section.
We update this privacy notice from time to time in response to changes in applicable laws and regulations, to our processing practices and to the products and services we offer. When changes are made, we will update the date at the top of this document. Please review this privacy notice periodically to check for updates.
Personal Data we collect
When you visit our website and interact with us, we will collect:
- Name
- Email address
- Any personal data you provide in your message to us
Information about our use of Cookies
Our website uses cookies to better the user experience while visiting.
Cookies are small text files saved to the user’s computer which track, save and store information about the user’s interactions and usage of our website. This allows our website to provide users with a tailored experience. Users are advised that if they wish to deny the use and saving of cookies from our website on to their computer or device, they should take necessary steps within their web browsers security settings to block all cookies from our website and any external serving vendors.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. To install all other types of cookies, we need your consent.
To learn more about the cookies we use, please see our Cookies Policy.
Purposes for which we use Personal Data and the legal bases
We may use your Personal Data for the following purposes and on the following lawful bases:
| Purpose | Lawful Basis for Processing |
| Responding to correspondence from you | It is in our legitimate interest to respond to enquiries or issues submitted via our website or through any other communication channels |
| Maintaining the relationship with tenants and suppliers | We rely on the performance of contract and legal obligation to maintain the relationship with tenants and suppliers |
Sharing your data
It is unlikely we will ever share your Personal Data outside the UK. If this becomes necessary for the purposes of providing our services to you, we will only share it where appropriate safeguards are in place or have been entered into, such as an Adequacy Regulation, the UK International Data Transfer Agreement (IDTA) or another approved transfer mechanism, to ensure your Personal Data is protected to the same standard expected within the UK. Prior to transferring any Personal Data out of the UK, we will conduct a Transfer Risk Assessment to ensure the risks associated with the processing are identified and addressed.
Our Website includes links to our social media pages (Facebook, YouTube, LinkedIn, Instagram) which enable you to view our content through selected sites. These applications may collect your IP address or Device ID and may set a cookie on your device. When you use one of these links, you are sharing information to another website or service and this privacy notice will no longer apply. Please read the privacy notices provided by the particular social media website you are sharing through before posting any personal information using these links.
How long we keep your data
We will retain your Personal Data for as long as is necessary to satisfy the purpose of collection and for a reasonable period thereafter.
At the end of the retention period, your Personal Data will be securely deleted. Retention periods are detailed within our Personal Data Retention Policy. This information is available upon request.
How we protect your data
We implement appropriate technical and organisational measures to protect data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Your data protection rights
There are certain fundamental rights that you have in respect of your Personal Data:
| Rights | Description |
| Right to be informed
| Individuals have the right to be informed about the collection and use of their Personal Data |
| Right of access | Individuals have the right to receive a copy of their Personal Data, and other supplementary information |
| Right to rectification | Individuals have the right to have inaccurate Personal Data rectified or completed if it is incomplete |
| Right to erasure | Individuals have the right to request their personal information to be erased, in certain circumstances |
| Right to restrict processing | Individuals have the right to request the restriction or suppression of their Personal Data, in certain circumstances, in particular: · if your data is not accurate; · if your data has been used unlawfully but you do not want us to delete it; · if your data is no longer needed, but you want us to keep it for use in legal claims; or · if you have already asked us to stop using your data but you are waiting to receive confirmation from us as to whether we can comply with your request |
| Right to data portability | Individuals have the right to obtain and reuse their Personal Data, in a machine-readable format, for their own purposes across different services, in certain circumstances |
| Right to object | Individuals have the right to object to the processing of their Personal Data, in certain circumstances
Where we are using your Personal Data because it is in our legitimate interests to do so, you can object to us using it this way
Where we are using your Personal Data for direct marketing, including profiling for direct marketing purposes, you have an absolute right to ask us to stop doing so |
| Rights with respect to automated decision-making and profiling | Individuals have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you |
In addition to the above, an individual also has the following rights:
| Rights | Description |
| Right to withdraw consent | Where we are using your Personal Data based on your consent, you can withdraw your consent at any time |
| Right to lodge a complaint with a supervisory authority | You have the right to raise a complaint about how we handle your personal information with a relevant supervisory authority. |
Exercising your data protection rights
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances
Contact us
If you would like to exercise your statutory data protection rights, or if you have any concerns or questions about how we handle Personal Data, please contact us at dataprotection@cadarn.co.uk
Raising a complaint with the UK data protection supervisory authority
If you believe you have exhausted all possible avenues for resolving your data protection concerns with us, you may lodge a complaint with the ICO by calling their Helpline on 0303 123 1113.
You can also send your postal correspondence to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Alternatively, you can contact them at https://ico.org.uk/make-a-complaint/