Ofsted-Registered Provider | Safe Homes for Young People (16-21)
Privacy & Data Protection

Privacy Policy

How HTR Supported Accommodation manages, protects, and uses personal information.

Privacy Policy

HTR Supported Accommodation (“HTR”, “we”, “our”, or “us”) is committed to protecting and respecting the privacy of the young people we support, local authorities, families, professionals, website visitors, and all individuals whose personal information we process.

This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, safeguarding obligations, and other applicable UK laws.


1. Who We Are

HTR Supported Accommodation provides supported accommodation and related support services for young people aged 16–21 across the United Kingdom.

We are responsible for ensuring that personal information is handled lawfully, fairly, securely, and transparently.


2. Information We Collect

We may collect and process the following categories of personal information:

Personal Details

  • Full name

  • Date of birth

  • Address

  • Telephone number

  • Email address

  • Emergency contact information

Referral & Support Information

  • Referral documentation from local authorities

  • Risk assessments

  • Support plans

  • Education and employment information

  • Safeguarding records

  • Incident reports

  • Health or wellbeing information where relevant to support provision

Professional Information

  • Information shared by social workers, local authorities, healthcare professionals, and education providers

Website & Technical Information

When using our website, we may automatically collect:

  • IP address

  • Browser type and device information

  • Usage statistics

  • Cookies and analytics data

  • Website interaction data


3. How We Use Personal Information

We use personal information to:

  • Deliver supported accommodation and support services

  • Safeguard young people and promote wellbeing

  • Communicate with local authorities and professionals

  • Maintain accurate records and case documentation

  • Meet legal and regulatory obligations

  • Improve service quality and operational effectiveness

  • Respond to enquiries and referrals

  • Monitor website performance and security

We only process personal data where we have a lawful basis to do so under UK GDPR.


4. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

  • Consent

  • Contractual necessity

  • Legal obligation

  • Vital interests

  • Public task

  • Legitimate interests

Where special category data is processed (such as health or safeguarding information), additional legal conditions apply in accordance with UK data protection law.


5. Sharing Information

We may share information where necessary and appropriate with:

  • Local authorities

  • Social workers

  • Healthcare professionals

  • Education providers

  • Regulatory bodies

  • Safeguarding agencies

  • IT and secure hosting providers

  • Legal or compliance advisers

We do not sell personal information to third parties.

All third-party providers handling data on our behalf are required to maintain appropriate security and confidentiality standards.


6. Safeguarding & Confidentiality

As a supported accommodation provider, safeguarding is central to our work. Information may be shared without consent where there is:

  • A safeguarding concern

  • Risk of harm

  • Legal requirement

  • Duty to protect life or wellbeing

All staff are trained in confidentiality, safeguarding, and secure handling of personal information.


7. Data Security

HTR Supported Accommodation takes appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access

  • Loss or theft

  • Misuse

  • Disclosure

  • Alteration or destruction

Security measures include:

  • Password-protected systems

  • Secure cloud storage

  • Access controls

  • Multi-factor authentication (MFA)

  • Encrypted remote access

  • Audit logging and monitoring

Only authorised personnel have access to confidential information.


8. Data Retention

We retain personal information only for as long as necessary to:

  • Deliver services

  • Meet safeguarding requirements

  • Fulfil legal and regulatory obligations

  • Resolve disputes

  • Maintain appropriate records

Retention periods are reviewed regularly in line with UK legislation and best practice guidance.


9. Your Rights

Under UK GDPR, individuals may have the right to:

  • Access personal information

  • Request correction of inaccurate information

  • Request deletion of personal information

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent where applicable

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests may be made in writing using the contact details below.


10. Cookies & Website Analytics

Our website may use cookies and similar technologies to:

  • Improve website functionality

  • Analyse traffic and performance

  • Enhance user experience

Users can manage cookie settings through their browser preferences.


11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

Users should review the privacy policies of any external websites they visit.


12. Changes to This Policy

We may update this Privacy Policy periodically to reflect:

  • Changes in legislation

  • Service developments

  • Operational improvements

  • Regulatory requirements

The latest version will always be published on our website.


13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

HTR Supported Accommodation
Email: info@htrcare.com
Phone: 020 3004 8402

Essential Data

We collect only the information needed to provide reliable support and services.

Secure Access

Client information is protected using strict internal controls and secure access processes.

Accountability

Data access and operational actions are logged to support transparency and compliance.