Guidance

Affordable Homes Programme 2021-26 evaluation - survey of residents: privacy notice

Published 27 July 2026

Applies to England

The following is to explain your rights and give you the information you are entitled to under UK data protection legislation.

1. The identity and contact details of the Ministry of Housing, Communities and Local Government (MHCLG) and our Data Protection Officer 

MHCLG is the data controller. The Data Protection Officer can be contacted at dataprotection@communities.gov.uk.

2. What personal data we are collecting and why  

If you qualify to complete the full survey your personal data will be collected as part of an evaluation of the Affordable Homes Programme 2021-26. The programme aims to provide good quality affordable housing for rent and ownership.

If you do not qualify to complete the survey, we will not be collecting or processing any personal data.

The purpose of the Affordable Homes Programme evaluation is to provide the government with evidence about:

• How the programme is being delivered throughout England
• The experiences of those moving into the homes funded by the programme and those moving into or remaining in homes vacated by these households. This includes any effects on wellbeing, financial situation and housing security.

Evidence from the evaluation will inform future government policy and help us understand how we can improve the provision of affordable housing in the future.

Personal data will be used to invite you to participate in the research. It will also be used to understand how different groups of people experience moving into and living in affordable housing and the homes vacated by households moving into affordable housing.

The following personal data is being collected for the research:

• Demographic: age, income, employment status, benefit receipt, household make-up.
• Special category data, i.e. sensitive data: health and disability

We will also collect data relating to the property where you currently reside including number of bedrooms.

3. Lawful basis for processing the data 

The data protection legislation sets out when we are lawfully allowed to process your data. The lawful basis that applies to this processing is Article 6(1)(e) of the UK GDPR – public task.

• For processing of special category data, we will rely on Article 9(2)(g) of the UK GDPR – processing is necessary for reasons of substantial public interest.

4. With whom we will be sharing the data

Anonymised data gathered using the questionnaire will be shared with MHCLG to answer additional/future policy related questions.

The current research does not include plans to share data with other government departments, however, we will update the privacy notice if that changes.

5. For how long we will keep the personal data, or criteria used to determine the retention period

Verian (MHCLG’s data processor) will keep your personal data and store them securely until contract ends (currently June 2027). If their contract is extended the storage time will be extended in line with this.

6. Your rights, e.g. access, rectification, erasure 

The data we are collecting is your personal data, and you have rights that affect what happens to it. These include the right to:

• be informed about how your personal data is used
• access the personal data we hold about you
• have inaccurate personal data corrected
• object to or restrict processing in certain circumstances
• complain to the Information Commissioner’s Office

If you would like to exercise your rights please get in touch with the MHCLG Data Protection Officer (contact details at the start of this privacy notice)

7. Sending data overseas

Your personal data will not be sent outside of the EU: it will be securely stored in the UK or EU by MHCLG and its processors.

8. Automated decision making

We will not use your data for any automated decision making.

9. Storage, security and data management

Processes are in place to ensure the secure transfer, handling, storage, and destruction of the data. These are specified in MHCLG’s Data Processing Agreement with Verian. All Verian staff handling data will be DBS checked. MHCLG’s contract with Verian sets out requirements for cyber security processes. Verian have up to date cyber security clearance from MHCLG’s cyber security team.  

MHCLG will only use your data within the terms of data protection laws, will delete your data securely and only keep it for as long as necessary for our work as a public body. MHCLG will review dates for keeping personal details and data in the future. Where relevant, some data may be kept without personal details attached (e.g. survey results) for longer periods.

This research is being carried out by Verian on behalf of MHCLG. Verian are our data processors for this research.

10. Complaints and more information

When we ask for or do something with your personal data, we will keep to the law, including the UK General Data Protection Regulation, Data Protection Act 2018 and Data Use and Access Act 2025.

You have a right to make a complaint to the department if you consider that, in connection with your personal data, there is an infringement of the data protection legislation.  If you want to make a complaint, or make a request to access your data, or another request in relation to your rights, or if otherwise you are not happy with how we are using your personal data, you can contact dataprotection@communities.gov.uk.

If you are not satisfied with the department’s response, or you still have a concern about the way in which MHCLG has handled your personal data, you can contact the Information Commissioner’s Office to make a complaint using their website service or by telephoning 0203 123 1113.  

Further information about your data protection rights can also be found on the Information Commissioner’s website.