Skip to main content


Privacy notice relating to the processing of personal data by Rhondda Cynon Taf County Borough Council for the purpose of the Homestep scheme



This privacy notice is intended to provide information about how Rhondda Cynon Taf County Borough Council (referred to as ‘RCTCBC’, ‘Council’, ‘Local Authority’, ‘we’) will use (or ‘process’) personal data about individuals for the purpose of the Homestep Scheme.

This notice should be read in conjunction with;

The Data Controller

The Council is the data controller for the personal data processed for the purposes of the Homestep scheme.

The Council is registered with the Information Commissioner’s Office (ICO) as a controller under reference Z4870100.

Queries relating to this privacy notice

If you have any questions or queries relating to this privacy notice please contact the Housing Strategy team.

By email :

By telephone : 01443 281136

In writing : Sardis House, Pontypidd CF37 1DU

Who we are what we do

Homestep is a service which aims to make home ownership more affordable for members of the public who are not home owners. The property is bought at a percentage of its full market value (usually 70%). The council holds the remaining share of the value of the house (i.e. 30%). 

Whose personal data we process

We may process personal data relating to the following individuals to administer the Homestep scheme;

  • Applicants of the homestep scheme

The categories of personal data we process

We may process the following categories of personal data to administer the Homestep scheme

  •  Name
  • Address
  • Date of birth
  • Email address
  • Contact numbers
  • National insurance number
  • Bank details
  • Mortgage in principle
  • Employment details
  • Income details

Why we process the personal data

We process the personal data to administer the homestep scheme. This may include but is not limited to the following activities;

  • Carry out relevant checks to ensure you are elligable for the scheme.
  • Verify your identity

From time to time we will carry out feedback exercises to improve the quality of the service. This may include the opportunity for Homestep home owners to be included in case studies that will be published on Social Media platforms and the RCT Website. Participation in case studies is optional and case studies will not be published without your permission.

Our lawful basis for processing the personal data

Under the General Data Protection Regulation (GDPR), our lawful basis for processing the personal data to administer the Homestep scheme is;

  • Public Task - Article 6 (e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Who or where we get the personal data from

We may receive the personal data from the following categories of individuals or organisations;

  • You, if you submit an interest in the Homestep scheme.

Who we share personal data with

We may share the personal data with the following key organisations to administer the Homestep Scheme.

When sharing the personal data, we only share the minimum amount necessary in relation to the purpose.



Property developers

For the nomination of purchasers.

Legal and property allocations team.

Carry out legal work to administer Homestep scheme.

Data Processors

A data processor is a company or organisation that processes personal data on our behalf. Our data processors act only upon our instruction. They cannot do anything with the personal data unless we instruct them to do so. They will not share the personal data with any organisation apart from us or use it for their own purposes. They will hold it securely and retain it for the period we instruct.

The category of data processors we use for the purpose of administering the Homestep scheme is;

-       ICT System suppliers/ Service providers

How long we retain the personal data

We retain the personal data contained within Homestep records for:

Length of time


Mailing list – Until applicant opts out

 Emails are only sent to advise of new properties available and so applicants can chose to opt out when they are no longer wish to be contacted.

Supporting Documents from Applicant – For the duration of the contract and for the following 12 years.

Monitoring purposes and purposes for the disposal of conditions under Section 106 of the Town and Country Planning Act 1990.

In keeping with the General Data Protection Regulation storage limitation principle, records are periodically reviewed. Not all personal data is retained. Only personal data that is relevant to the record is retained for the entire retention period. Information that has no long term or evidential value is routinely destroyed in the normal course of business.  

Your data protection rights

The General Data Protection Regulation (GDPR) gives individuals important rights, including the right of access to the personal data that the Council holds about you.

Click here for further information on your information rights and how to exercise them. 

Your right to make a data protection complaint to the Council

You have the right to complain to the Council if you believe we have not handled your personal data responsibly and in line with good practice.

You can do this by contacting the Housing Strategy Team directly via one of the following communication methods. Most concerns can be resolved relatively quickly through a simple phone call or email;

  • Email :
  • Telephone : 01443 281136
  • In writing : Sardis House, Pontypridd CF37 1DU

Alternatively, you can raise a formal complaint via the Council’s Customer Feedback Scheme using the following link (Make a comment, compliment or complaint online) or you can contact the Council’s Data Protection Officer at

Your right to make a data protection complaint to the ICO

You also have the right to complain to the ICO if you are unhappy with how we have used your data. However, we encourage you to contact us first and provide us with an opportunity to look into your concern and put things right.

The ICO can be contacted:            

  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline number: 0303 123 1113
  • Website: