Who controls the information
The final notice must name the person or legal entity operating KindClear, provide a correspondence address and give a working privacy email address.
Information the live form is expected to collect
The form should not invite identity documents, financial records, medical details or photographs of people. Customers will be reminded to remove unnecessary personal information from uploaded images.
- Name and contact details
- Property postcode and service area
- Property type, rooms, access and requested timing
- Description of contents, special items and hazards
- Optional property photographs
- Records of referral, provider response and complaints
Why information would be used and shared
The intended purposes are to review the enquiry, identify a suitable participating provider, share the necessary details with that provider, manage the referral and respond to questions or complaints.
Before sharing begins, KindClear must select and document an appropriate lawful basis. The form and privacy notice must tell customers who receives their information, or describe the recipient category as specifically as possible, and explain why.
Official reference: ICO guidance on the right to be informed
Retention and deletion
No arbitrary 24-month period is adopted in this draft. Different records may require different periods. KindClear must document how long unconverted enquiries, provider billing records, complaints and consent evidence are needed, then delete or anonymise information when that need ends.
The final notice will state either each retention period or the criteria used to decide it.
Rights, security and complaints
The final notice must explain the rights that apply under the selected lawful basis, how to request access or correction, how to object or request deletion where applicable, and how to complain to the Information Commissioner's Office.
Provider access should be limited to the information required for the referral and sent through an agreed secure method. A written data-sharing arrangement should record each party's responsibilities.
Cookies and analytics
The current draft does not intentionally install marketing analytics or advertising cookies. If analytics, call tracking or advertising tools are added, the cookie information and consent mechanism must be updated before those tools are enabled.