This Privacy Notice explains what personal information we process, when we collect it and how we use it. During the course of our activities, we will process personal data (which may be held on paper, electronically, or otherwise) about you and we recognise the need to treat it in an appropriate and lawful manner.
Introduction
The purpose of this Privacy Notice is to explain to you the reasons why we may hold, process and use your personal data and explain your rights under the current data protection laws. This privacy notice explains how we collect and use personal information about users of our website
Separate versions of Privacy Notices are issued to our tenants, employees, and Board members.
Your personal information will be processed by:
Lochalsh & Skye Housing Association of:
Morrison House
Bayfield
Portree
Isle of Skye
IV51 9EW
We are registered as a data controller with the Information Commission (‘ICO’) and our registered number is Z6024339.
When you visit our website, we collect the following information:
- Name;
- Contact Details, including phone numbers, addresses and email addresses
- Username and password (only for usage through My Home Tenant Portal)
- If you allow the relevant cookies, we may collect information about your activities on our website and about the devise used to access it, for instance your IP address and geographical location
You can change your Cookies setting using the ‘Cookies Setting’ tool and review our cookies usage within our Cookie Notice.
We collect this information when you:
- visit our website
- report a repair to us;
- pay your rent;
- apply for a house;
- make a complaint to us;
- complete and submit a “contact us” form to us; and
- login
Depending on your relationship with us, we may use this personal information to:
- provide you with the services that you have requested from us;
- communicate with you, including in response to any of your enquiries;
- improve our services and respond to changing needs;
- process your rent payments;
- carry out repairs to your property;
- handle and resolve complaints made by, or, against you;
- keep the personal information that we hold about you accurate and up to date (if you provide any new personal information to us via the website); and
- signpost you to organisations that can offer benefits and debt advice and support.
- potentially enter into or enter into a contract with you and for the administration of our organisation.
If you apply for a job with us we collect:
- your contact details, previous employment history and qualifications
- we may collect details of ethnicity and disability – for equalities monitoring and so that we can make any appropriate adjustments to accommodate you through the recruitment process and your workplace should you be successful.
- we may collect references from third parties whose details you have provided.
We need this information for our recruitment process. If your application is unsuccessful we will keep your application for six months so that we can contact you if a similar job becomes available.
If you are a business contact:
- we may collect your business contact details such as your name, business address and business e-mail and your company’s bank account details. If you are a sole trader this may be your personal details.
We need these details in order to provide our services, run our business and pay/invoice suppliers and contractors.
If you do not wish to provide your personal data
If you have a contract/potential contract with us, you have obligations under your contract / potential contract to provide us with the necessary data. If you do not provide this information, this may prevent the Association’s ability to enter into or maintain a contract with you.
Who do we share your personal information with?
We may disclose your personal data to any of our employees, officers, contractors, insurers, professional advisors, agents, suppliers or subcontractors, selected third parties, government agencies and regulators and healthcare providers so far as reasonably necessary, and in accordance with data protection legislation.
We may also disclose your personal data:
- with your consent
- to the extent that we are required to do so by law
- to protect the rights, property and safety of us, our customers, users of our website and other persons
- in connection with any ongoing or prospective proceedings
- if we are investigating a complaint, information may be disclosed to solicitors, independent investigators, including auditors, the Scottish Housing Regulator and other regulatory bodies, whether investigating the complaint or otherwise
- to the purchaser (or prospective purchaser) of any business or asset that we are, or are contemplating, selling;
- to another organisation if we enter into a joint venture or merge with another organisation
- to organisations providing benefits advice and support
- to Police Scotland and the local authority in relation to complaints involving anti-social or other criminal behaviour.
What are the legal bases for us processing your personal data?
We will only process your personal data on one or more of the following legal bases:
- contract
- consent
- vital interests
- public interest / official authority
- where we have a legal obligation to do so.
- Our legitimate interests (including understanding how people interact with our website)
Processing special category personal data
Special categories of personal data means information about your racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; health; sex life or sexual orientation; criminal convictions, offences or alleged offences; genetic data; or biometric data for the purposes of uniquely identifying you.
The special categories of personal information referred to above require higher levels of protection We need to meet additional legal requirements for collecting, storing and using this type of personal information.
We do not specifically request special category data via our website. If you provide any special category data on the website forms, you do so with your explicit consent.
Where do we keep your data?
Your information will only be stored within the United Kingdom except where international transfers are authorised by law.
How long do we keep your personal information?
We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law and in accordance with our Data Retention Policy and Schedule.
How do we keep your personal information secure?
The security of your personal information is of paramount importance to us and we use appropriate technical and organisational measures to safeguard your personal information.
However, while we will use reasonable efforts to safeguard your personal information, the use of the Internet is not entirely secure and, for this reason, we cannot guarantee the security of any personal information that is transferred by or to you via the Internet. If you have any concerns about the security of your personal information, please contact our Data Protection Officer (‘DPO’) for more information.
Your rights
You have the right at any time to exercise your data subjects’ rights in relation to the following:
- the right to be informed
- the right to access
- the right to rectification
- the right to object to processing
- rights in relation to automated decision making and profiling
- the right to be forgotten
- the right to data portability
- the rights to restrict processing
When you make a request, we are required to verify your identity and may ask you for specific information to fulfil this purpose. Normally, you will not need to pay a fee when you make any of the above requests, but we may charge a reasonable fee or refuse to comply if your request for access is clearly unfounded or excessive.
If you wish to exercise you right to access your information, or any other right, please contact our Data Protection Officer (‘DPO’) for more information.
It is important that the personal information that we collect, hold and use about you is accurate and current. Please keep us informed of any changes by contacting our DPO.
Queries and Complaints
If you are not satisfied with our handling of your request or have any other data protection related issue, in the first instance, you have the right to contact us with your complaint so that we can investigate, any complaints should be marked ‘GDPR Complaint’.
If you still remain unsatisfied after your complain has been processed by us, you also have the right to complain to the Information Commission in relation to our use of your information. The Information Commission contact details are noted below: The Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint
Our Data Protection Officer is provided by RGDP LLP and can be contacted via email
We keep this privacy notice under regular review and will place any updates on this website.
This Privacy Notice was last updated on 24/03/2026