The Riverside Group is a charitable registered provider of social housing.

We work in three areas: social housing, care and support, and home ownership. A number of other organisations are also part of the Group including:

• Riverside Scotland which is a charitable housing association in Scotland, and trading name of Irvine Housing Association
• Prospect who develop homes for Sale and
• Evolve who provide us with maintenance and repair services.

We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, (“our site”) and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

This privacy notice tells you what to expect when The Riverside Group collects personal information about you online via the organisation’s public websites at:

•  www.riverside.org.uk
•  www.riversidehomeownership.org.uk
•  www.riversidescotland.org.uk

This notice also covers your use of ‘My Riverside’ if you choose to sign up for an online account to assist in managing your property or services. If you are an existing Riverside customer you should also read our customer Privacy Notice In conjunction with this notice.

What Does This Notice Cover?
This Privacy Notice applies only to your use of our site. It applies to personal data we collect about:

• Visitors to our websites and the use of cookies
• Visitors to our websites and use of transactional elements such as completing online forms to submit information for complaints, requests and to take part in surveys
• Visitors who use our web chat functionality
• Visitors who use our online recruitment tool

This privacy notice does not provide exhaustive detail of all aspects of our collection and use of personal information. We are happy to provide any additional information or explanation needed. Any requests relating to the collection or use of personal information should be directed to our Group Data Protection Officer using the contact details at the end of this notice.

Our site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy notices of any such websites before providing any data to them.

What Is Personal Data?
Personal data is defined by the UK GDPR and the Data Protection Act 2018 (collectively, “the Data Protection Law”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

What Data Do You Collect and How?
Depending upon your use of our site, we may collect and hold some or all of the personal and non-personal data set out in the table below, using the methods listed. If you do not want this information to be collected please do not complete any of the online contact or registration forms.

We collect personal data on our site for:

• Enquiries: We will use the information provided to deal with the enquiry and to monitor the level of service we provide
• Complaints: This normally contains the identity of the complainant and any other individuals involved in the complaint and we will use the information to investigate and respond to the complaint in line with our legal and/or contractual obligations
• Account management: We will use the information provided to assist you in the management and administration of your property and any services you receive from us.
• Surveys and Competitions: Site users may choose to provide their personal data to take part in surveys or competitions run by The Riverside Group. Information provided will only be used to administer the activity and you will be provided with more information about the use of any data before you take part. We may anonymise data from surveys and competitions for analysis and reporting purposes, but you will not be identifiable from such data.
• Employment applications: Site users may provide their personal information for the purpose of applying for employment within The Riverside Group. Information provided will only be used to administer the application.

How Do You Use My Personal Data?
We will use the information we collect to administer any online account, contact you and to provide you with the services or information that you have requested. If any of your personal data is shared with a third party, to assist us in delivering services or responding to a query or complaint, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law.

In some limited circumstances we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a regulatory or government authority.

For more information, please see our main Privacy Notice

Can I Withhold Information?
You may access certain areas of our site without providing any personal data at all. However, to use all features and functions available on our site you may be required to submit or allow for the collection of certain data.

You may restrict our use of Cookies. For more information, see the section on Cookies below.

Data Collected	How we collect the data
Identity Information including first and last name, maiden name, title, date of birth, gender identity, preferred pronouns	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Contact information including home address, work address, telephone or mobile number, email address	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Business information including profession, job title, employers address and name, work history	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Payment information including transaction data, balances, arrears, details of benefits	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Profile information including preferences, survey responses, website analytics, feedback, details of complaints and repairs	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Special Category Information which may include race or ethnicity, religious beliefs, physical or mental health and sexual orientation	Online forms, data collection points and webchat, from you, your household members or nominated representatives
Technical information including browser type and version, operating system	Through the use of functionality cookies (see ‘Cookies’ for more information).
Data from third parties in relation to complaints, anti-social behaviour or other matters	Online forms, data collection points and webchat, from website visitors.

 

How Long Will You Keep My Personal Data?
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected and in line with our retention and destruction/disposal schedules.

How and Where Do You Store or Transfer My Personal Data?
We will only store your personal data within the UK or within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the EU GDPR and/or to equivalent standards by law. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.

How Do You Use Cookies?
On your first visit to our site you will be presented with a pop up requesting your consent to set Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and service to you.

You may, if you wish, deny consent to the placing of Cookies; however certain features of our Site may not function fully or as intended our site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our site.

We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

By using our site, you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than us. For more details, please refer to the table below. These Cookies are not integral to the functioning of our Site and your use and experience of our site will not be impaired by refusing consent to them.

Certain features of our site depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are shown in the table below. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings as detailed below, but please be aware that our site may not work properly if you do so.

 

Functional Cookies – The cookies listed below cannot be disabled, as each of them is needed for the functionality of the Riverside website. These are strictly necessary.
Cookie Name	Cookie Information
sifrFetch	This cookie is used to display the flash text font on each of the Riverside web pages. This cookie does not share any information with a third party.
ASP.Net Sessions ASP.NET_SessionId ASPSESSIONID[XXXXXXXX]	ASP.NET sessions store information within a cookie for the functionality of the website. For example when completing the job application form, Riverside uses a session to store the information from one step to the next. Sessions are deleted when the browser is closed. This cookie does not share any information with a third party.
.IMMAUTH	When logging into the job application section this cookie saves your login details. This cookie does not share any information with a third party.
RegionCookie	This cookie is used by Riverside to save the region, in which the user chooses. This cookie does not share any information with third parties and expires after 1000 days.
Cloudflare __cfduid	The cookie is set by Cloudflare. The cookie is used to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It does not correspond to any user ID in the web application and does not store any personally identifiable information.
GDPR Cookie consent cookielawinfo-checkbox-necessary	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Necessary”.
GDPR Cookie consent cookielawinfo-checkbox-non-necessary	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Non-necessary”.
First and Third Party Cookies – Each of the first and third party cookies that are used on the website can be disabled, more information on this can be found on their websites.
Cookie Name	Cookie Information
Google Analytics _ga _gid _gat	Google Analytics use cookies to track user activity, which is used to generate reports within the Analytics interface. To disable these cookies please see www.google.com/intl/en/privacypolicy.html To opt out of being tracked by Google Analytics across all websites visit tools.google.com/dlpage/gaoptout
Google APISID __Secure-3PAPISID SAPISID __Secure-3PSID SSID SID HSID SID CC 1P_JAR NID X-SIG-HTTPS-Umbrella-SAML CONSENT SEARCH_SAMESITE SWG_CS_HTTPS_	These cookies are used by Google to display personalised advertisements on Google sites, based on recent searches and previous interactions. They are also used on any page that uses a google map to measure the number and behaviour of google maps users. For more information on Google cookies: https://policies.google.com/privacy
Twitter _twitter_sess guest_id k js twll pid	The cookie produced by Twitter, allows the Riverside Twitter feeds to display around the website. For more information please see twitter.com/privacy
Facebook _fbp fr	These cookies are set by Facebook to deliver advertisements and track the behaviour of the user across websites that have a Facebook pixel or Facebook social plugin. This is used to measure and improve the advertisement. For more information please see https://www.facebook.com/policy/cookies/
YouTube VISITOR_INFO1_LIVE use_hitbox LOGIN_INFO PREF HSID SID	YouTube use cookies to embed videos on pages around the Riverside website. For more information please see www.google.co.uk/intl/en/policies/privacy
Hotjar _hjTLDTest _hjIncludedInPageviewSample _hjIncludedInSessionSample	Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
Lucky orange	These cookies are used to evaluate user journeys and improve the user and customer experience on our website. For information about Lucky Orange cookies: https://privacy.luckyorange.com/
Oracle Recruitment Cloud ORA_CX_USERID	This cookie is set when users ‘pin’ jobs within Riverside’s recruitment site and is also used to save keyword and location searches for site visits.
Double Click ID Id IDE RUL	DoubleClick cookies are used for serving targeted advertisements that are relevant to users across the web. Targeted advertisements may be displayed to users based on previous visits to a website. These cookies measure the conversion rate of ads presented to the user. For more information visit DoubleClick

 

In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

Below are short instructions for how to do this in the four most popular browsers:

Microsoft Internet Explorer
Click the ‘Tools’ icon in the top right hand corner and select ‘Internet options’. In the pop up window select the ‘Privacy’ tab. From here you can adjust your cookie settings.

Google Chrome
Click the spanner in the top right hand corner and select ‘Settings’. From here select ‘Under the hood’ and change the settings under ‘Privacy’.

Mozilla Firefox
From the drop down menu in the top left hand corner select ‘Options’. In the pop up window select the ‘Privacy’ tab. From here you can adjust your cookie settings.

Safari
From the settings drop down menu in the top right hand corner select ‘Preferences’. Select the ‘Security’ tab and from here you can adjust your cookie settings.

It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org

What Are My Rights?
Under Data Protection Law, you have the following rights, which we will always work to uphold. You can contact us about any of these rights using the details at the end of this notice:

• The right to be informed about our collection and use of your personal data. This Privacy Notice, along with our main customer Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions.
• The right to access the personal data we hold about you. See the section ‘how can I access my personal data?’ for more information.
• The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
• The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we hold, in certain circumstances
• The right to restrict (i.e. prevent) the processing of your personal data, in certain circumstances
• The right to object to us using your personal data for a particular purpose or purposes.
• The right to withdraw consent. This means that, if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.
• The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
• Rights relating to automated decision-making and profiling. We do not use your personal data collected on this site in this way.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.

The Riverside Group will always act fairly, ethically and with integrity when collecting and using personal information. We encourage people to contact us if they think that our collection or use of information is unfair, misleading or inappropriate. We also welcome feedback and any suggestions for improvements

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. We would welcome the opportunity to resolve your concerns ourselves.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.

Subject access requests can be made in writing and sent to the email or postal address shown below. This is the easiest way to tell us everything we need to know to respond to your request as quickly as possible. Alternatively you can make a verbal request by telephone.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within one month. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of The Data Protection Officer):

email address: [email protected]

Postal Address: Riverside, 2 Estuary Boulevard, Estuary Commerce Park, Liverpool L24 8RF

Changes to this Privacy Notice
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

We recommend that you check this page regularly to keep up-to-date. This Privacy Notice was last updated February 2021.