Real Change Privacy Statement

​​​​​​​​Real Change is an initiative created by the Cardiff Council Homelessness team in response to COVID-19 and aims to identify vulnerable individuals with street-based lifestyles.We use the information you provide us to provide support to the individuals identified.

All reports will be actioned upon by our outreach team who will provide specialist support to each individual and signpost them to a range of available services. This is especially important in helping to encourage social distancing in the interest of public health. Cardiff Council is the Data Controller for the purpose of the information collected.

Thank you for taking part in the Real Change campaign, your report is valuable to us and could make a real difference in someone’s life.

What data do we collect?

In order to facilitate this initiative, Cardiff Council are using a text messaging platform to receive and process your report. Part of this process means we will automatically receive your mobile phone number along with a date stamp and body of the text message. We will not be collecting identifying information such as name or address, unless you choose to include this within your text message.

All data we receive is processed in accordance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018.

How do we collect your data?

Your data is collected when send a text message to the number provided. This is conducted via a text messaging platform provided by a third party company called Esendex. No personal information is retained with this provider however if you would like to know more about how Esendex processes personal data, please refer to Esendex's Privacy Policy​​​​​​​​​​​​​External link opens in a new window​​. 

How we will use your data?

​​​

Your data will be used for the following purposes:

• To contact you in the event that we require further information regarding your report
• To generate a report which is passed onto our outreach team 

How long do we store your data?

Your data will be retained for a period of 96 hours by Cardiff Council to allow time for processing the reports received. Once the 96 hour period is complete, the data will be securely deleted. Please note your data will not be stored by Esendex and all text messages are immediately deleted from their server.

Our lawful basis

Our legal basis for our use of your personal data will generally be one or more of the following:

• we process your personal data to comply with our legal obligations as a Local Authority
• we process your personal data to carry out a task in the public interest or in the exercise of official authority in our capacity as a public body
• we process your data where necessary to protect our legitimate interests as a Local Authority
• we process your data where necessary for the performance of a contract
  
  
  

What are your data protection rights?

Cardiff Council would like to make sure you are aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request for any copies of your personal data.
• The right to rectification – You have the right to request that any inaccurate information is corrected.
• The right to erasure – You have the right to request that Our Company erase your personal data.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to any processing of your personal data, under certain conditions. ​
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.