Clanmil Privacy Notice
Clanmil Housing Group is a not-for-profit housing association that owns and manages over 6,200 homes throughout Northern Ireland. This Privacy Notice explains what to expect when we process your personal data.
How we collect information about you
We collect information in a variety of ways, including:
When you apply for a home
When you sign a tenancy agreement
Through on-going contact with you during your tenancy
When you access services by logging onto our website, incl, through he Customer Portal.
Recording calls to and from Clanmil Housing (not all calls to Clanmil are recorded. Where they are, the caller will be made aware of this fact at the beginning of the call stating our reasons for doing so)
When customers terminate a tenancy
If a customer makes a complaint
When dealing with ASB cases
When providing money and benefits advice
CCTV images (if you live at or visit our scheme or office which has CCTV in operation)
When you apply to become a Clanmil tenant, we request and hold on file any references necessary to assess your application. This may include, but is not limited to, information from other landlords, the PSNI, the Probation Service, Support Services, Social Services, and Health Services.
Legal basis for processing
Clanmil will process personal data relating to you on one or more of the following lawful bases for processing:
- Where the processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract with you, for example when you enter into a tenancy agreement with us or when you apply for housing via application to the Northern Ireland Housing Executive (“NIHE”);
- Where the processing is necessary for the performance of a task carried out in the public interest and which is laid down in the various Housing (NI) Orders;
- Where the processing is necessary for compliance with any legal obligation, e.g. by way of Court Order;
- Where the processing is required for the purposes of our legitimate interests which are the provision of housing services and the effective management of Clanmil and where these interests are not overridden by the interests or fundamental rights and freedoms of the data subject;
- Where the processing is necessary for a recognised legitimate interest that is in the public interest, for example in matters of crime prevention or safeguarding;
- Where the processing is necessary to protect your vital interests, for example in the case of a medical emergency;
- Where you have provided consent (this may be withdrawn at any time by contacting us at DPO@clanmil.org.uk)
Special Category Data
We may also process sensitive personal data relating to you, known as “Special Category Data”. This is information that relates to your racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, trade union membership, physical or mental health or condition, sex life or sexual orientation, genetic data and biometric data.
Special Category Data will only be processed if one of the following conditions is met:
- You have provided consent;
- The processing is necessary for carrying out obligations under employment, social security or social protection law;
- The processing is necessary to protect your vital interests or another individual where you are physically or legally incapable of giving consent;
- The processing relates to personal data manifestly made public by you;
- The processing is necessary for the establishment, exercise or defence of legal claims;
- The processing is necessary for reasons of substantial public interest;
- The processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services or pursuant to contract with a health professional.
Data in relation to criminal offences and proceedings is not included in the definition of Special Categories of Data but similar safeguards will apply in relation to processing any such data relating to you.
Who we collect information about
We collect personal information about customers. This includes current, former and potential tenants, who live in our properties or access our support and other services, and could also include their family and people associated with them. Also, about anyone who makes a complaint or enquiry and visitors to our website and offices.
What type of personal information we collect
For examples of the type of personal data we collect click here
How we use your information
We use the information we collect so that we can deliver our services to you. We use information to:
manage allocations and lettings
manage tenancies
receive rent and service charges
provide a repairs and maintenance service
offer welfare benefits advice
provide support services
provide additional services/assistance e.g. employability/digital inclusion
resolve ASB disputes
investigate complaints
engage with customers to get feedback on our services
target customers impacted by welfare reform
we use CCTV images at our housing schemes and offices to deter crime and maintain the health and safety of our tenants and employees
in printed publications - online (website, social media channels, internal intranet), audio visual material, promotional materials and marketing campaigns.
Sharing your information
Where necessary or required, we may share information with the following non-exhaustive list of organisations/individuals:
Contractors
Local Authorities
NIHE
Government Departments
Social services
PSNI
Probation Service
Other landlords
Utilities companies
Courts
NIPSO
HMRC
NIFRS
Support agencies
Health services
Media outlets (for the promotion of Clanmil's work)
Our professional advisors
We may share customers' personal information on a collective basis with other organisations to help us gain insights into our customer base, so we can target and deliver our services in a way that maximises benefits for you, our customers. Whenever we do this, we will ensure that your personal information is handled under strictly controlled conditions and in accordance with the requirements of the UK GDPR.
Accessing and amending your information
Under the UK GDPR you have rights regarding the information we hold and process about you. For example, you can:
- Be provided with information about the processing, such as the purposes of the processing, categories of data processed and how long your personal data is held for.
- Find out if we hold any personal information about yourself, including CCTV images and call recordings (Right to be Informed),
- Request to access the information we hold about you by making an 'access request' (Right of Access).
- Ask us to correct information we hold about you if it is incorrect, without undue delay and free of charge (Right of Rectification).
- Request that all information held by Clanmil which identifies you is deleted (Right to Erasure/Right to be Forgotten). We may be compelled however to maintain some of your personal data due to specific legislative or regulatory requirements
- Object to processing, especially for direct marketing (Right to Object)
If you wish to exercise any of your rights, you can complete an online request, email us on DPO@clanmil.org.uk, or contact of head office by telephone (028 9087 6000), letter, or in person (Northern Whig House, 3 Waring Street, Belfast BT1 2DX).
Retention of Personal Data
Personal Data will be retained in line with Clanmil's Data Retention Schedule which is reviewed annually. You can find out how long we keep your personal data here.
Protecting your Personal Information
We will ensure that your information is kept secure. We will apply appropriate technical and organisational measures to prevent unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to Personal Data. We also have procedures in place to deal with any suspected data security breach. We will notify you and the Information Commissioner of a suspected data security breach where we are legally required to do so.
We will not discuss your personal information with anyone other than you, unless you have given us prior written authorisation to do so or where we have received a clear verbal instruction from you, where written authorisation is unable to be obtained.
Transferring personal data outside the UK/EEA
It is unlikely that we will transfer your personal details outside of the UK. However, using the internet to collect and process personal information may involve the transmission of information on an international basis. We will only use internet and data hosting providers outside of the EEA if their services have UK GDPR compliant privacy procedures in place. Where it is necessary for us to transfer your personal information outside of the UK this will only be done in accordance with applicable data protection laws designed to ensure the privacy of your personal data.
Under data protection laws, we can only transfer your personal data to a country outside the UK where:
the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45A of the UK GDPR.
there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or
a specific exception applies under relevant data protection law.
Visitors to our website
When you visit www.clanmil.org.uk we collect the following information: Name, Email address, Mobile number, Contact Group (e.g. Clanmil Tenant), IP Address.
Further information supplied by you in relation to online services such as home address, subscription preferences and information relating to online services may also be recorded in your user account. You can update your cookie preferences, change your contact details and subscription preferences or choose to delete your account at any time.
The personal data we collect on our website will be used for the following purposes:
Identify new or returning visitors
Allow you to create and maintain a user account
Email news and updates on your selected subscription topics using the email address you have provided
Provide SMS/text alerts or your selected alerts topics
Promote relevant information based on previous visits/ interactions on the site
Improve information and services on the website in line with visitor feedback, search terms used, and topics and pages read
Analytics
When you visit www.clanmil.org.uk we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make any attempt to find out the identities of those visiting our website.
Cookies
To make our website easier to use, we sometimes place small text files on your device. These are used to:
- Make our website work (Essential cookies).
- Enhance functionality, security, and to store preferences, such as language (Functionality cookies).
- Track and analyse how you use our website, to help us improve our website by monitoring information on its usage (Analytics cookies).
- Gather data for personalised advertising across Google's services (Third Party cookies).
We will ask your consent to use all non-essential cookies, and you will have an option to opt out. You can update your choices at www.clanmil.org.uk/cookies.
Security and performance
The Clanmil Housing website is subject to periodic security tests to ensure that it is maintained in line with best practice. Secure passwords are required to access the website which is hosted securely. A range of software security/ firewall measures are employed to check that traffic to the site is behaving as would be expected and to detect and reject website behaviour that appears suspicious or a potential security threat. This may involve the processing of visitor IP addresses. The purpose for implementing all of the above is to maintain and monitor the performance of our website and to constantly look to improve the site and the services it offers to our users.
Links to third-party websites
Clanmil is not responsible for any third-party websites accessed through our website or app. We do not endorse the content contained in any third-party websites, nor the organisations publishing those sites, and we disclaim any responsibility for their content.
Use of Artificial Intelligence (AI)
We now use AI technologies and tools to support the delivery, analysis, and enhancement of our services. These tools may assist with content generation, summarisation, and internal process optimisation. All AI use is governed by our AI Policy and strict safeguards, including data minimisation, purpose limitation, access controls, and human oversight. Personal data is not used to train AI models.
We do not solely use AI to make automated decisions. There is always a human intervention to review and approve any outputs from the AI tools.
Registration with the ICO
Clanmil is registered as a Data Controller with the Information Commissioners Office (ICO) and registration is renewed annually. You can contact our Data Protection Officer in relation to all data protection issues on DPO@clanmil.org.uk or by contacting our offices using your preferred method of contact.
Making a complaint
If you have any concerns regarding the processing of your personal data, you can raise the matter with Clanmil's Data Protection Officer above. You can also raise the matter directly with the Information Commissioner's Office (see contact details below) however, to do so you must first complain direct to Clanmil. If you make a complaint, we will aim to respond to you in line with our Complaints Policy.
The Information Commissioner’s Office’s contact details:
Contact us | ICO
Make a complaint | ICO
Changes to our Privacy Notice
We keep our privacy notices under regular review and will place any updates on this webpage. The Notice was last reviewed in June 2026.