Privacy Policy

Student Roost is committed to protecting your privacy. In order to provide our services and communicate effectively with you we need to collect, process and store certain personal information about you. Please read this privacy policy carefully as it describes how we collect, use, store and transfer your personal information. It also sets out the rights you have in relation to such data.

This policy may be updated from time to time. Please therefore check this policy frequently to ensure you are aware of the most recent version.

About Student Roost

Student Roost is a leading provider of student accommodation in the UK. We are made up of different legal companies, including PBSA Portfolio Advisor Limited (a company incorporated in England with company number 08721957 and whose registered office is at Charles House, 8th Floor, 148 Great Charles Street, Birmingham B3 3HT) and the companies listed on our website under ‘Company Registration’.

Any reference in this policy to Student Roost, ‘we’ or ‘us’ includes PBSA Portfolio Advisor Limited and all other companies within the Student Roost group of companies.

Student Roost is a "data controller" of the personal data that you provide to us. This means that we are responsible for deciding how we hold and use personal information about you.

What does this policy apply to?

This policy applies to personal information collected by Student Roost. It does not apply to personal information collected by third-party companies, individuals or organisations or other websites which the Student Roost website may link to or be linked from. Where third parties collect your personal information their own privacy policies will apply and we take no responsibility for their handling of your data.

What information do we collect?

We collect, use, store and transfer different kinds of personal information about you to enable us to provide the services you have requested and/or to allow us to enter into and fulfil our obligations and exercise our rights under our contract with you.

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer the following personal information:

  • name
  • home address
  • date of birth
  • gender
  • nationality
  • email address
  • telephone numbers, including mobile number
  • names, telephone numbers, email addresses and home addresses of any referees which you provide to us
  • CCTV footage
  • username and password
  • marketing preferences, including communication preferences 
  • details of other products and services purchased from Student Roost
  • feedback and survey responses
  • vehicle details (including vehicle registration number, make and model) if you park at a Roost
  • social media ID if you link your social media accounts to us
  • photographs and/or video recordings if you participate in photography or filming conducted by Student Roost or its agents
  • IP address used to connect your computer, tablet or smartphone to the internet, browser type and version, time zone setting and location, browser plug-in types and versions and operating system and platform
  • usage data on our website, including browsing actions, patterns of behaviours and uniform resource locators (URL) clickstream to, through and from our website

We may also collect, use and store special categories of personal data about you, including your ethnic origin, information about your health and any disabilities.

Where we need to collect personal information by law or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.

How do we collect your data?

We use different methods to collect personal information from you, including:

  • Direct from you – You may give us your personal information by applying for a role with us, filling in forms, creating an account, visiting our website, corresponding with us through our website, by email, post, telephone or LiveChat, submitting a query, subscribing to our marketing lists or newsletters, taking part in a survey or promotion or giving us feedback.
  • Electronic means – Information obtained through CCTV footage and other electronic means when you access our premises, information from lone worker personal safety recording devices or other information about the use of our premises.
  • Technology – When you visit our website we may automatically collect technical information about your device, browsing actions and patterns. We collect this information using cookies, server logs and other similar technologies. For more information on cookies see our Cookie Policy.
  • Other sources – We may receive personal information about you from various third parties and public sources. For example:
  • name, contact details and payment information from providers of technical, payment and delivery services;  
  • name and contact details from online event registration systems, such as Eventbrite; and
  • technical data from analytics providers or advertising networks.

Such providers/registration systems will collect personal information direct from you and you should read their privacy policies carefully. We take no responsibility for their handling of your data.

What do we use your information for?

We use your personal information to:

  • carry out our obligations and exercise our rights under our contract with you
  • in respect of job applications, to contact your referee(s) using the details you have provided and to verify your qualifications/academic achievements
  • communicate with you in connection with your query and respond to your requests
  • enable us to make any reasonable adjustments where necessary to enable you to access and benefit from our facilities and services
  • manage and communicate with you about events and activities organised by a Roost
  • recover any unpaid sums due to us
  • manage and communicate with you about any car park space at the Roost that you are permitted to use
  • operate CCTV systems and review CCTV footage for security purposes at our properties
  • prevent and detect criminal activity, fraud and misuse of or damage to our properties
  • operate lone worker personal safety recording devices for security purposes at our properties
  • provide you with support in using our website
  • administer and process offers and promotions
  • send you marketing and promotional materials (see Marketing section below)
  • seek your views on our services/take a survey
  • notify you about changes to our services
  • administer our website, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data
  • help us improve the design and content of our website to ensure the best experience possible
  • exercise or defend legal claims or actions
  • promote Student Roost in publicity and marketing materials with your consent
  • for administrative and quality assurance purposes
  • direct relevant and personalised online adverts about Student Roost to you

Purposes for using your information

We will use your personal information where we need to perform a contract we are about to enter into or have entered into with you (for example, where we have, or are considering, offering you employment at Student Roost), where it is necessary for our legitimate interests (for example, CCTV footage to monitor safety at a Roost to ensure the safety of residents, visitors and employees and to assist with law enforcement) or where we need to comply with a legal or regulatory obligation.  

We will only send you marketing and promotional materials with your consent. You can tell us that you want to stop receiving marketing communications from us at any time. Please see the Marketing section below for more details.

We will only film and/or take photographs of you for use in publicity and marketing materials with your consent. You can withdraw your consent at any time. Please see the Marketing section below for more details.

We will only use special categories of personal data with your consent (for example, ethnic origin or information about your health). However, on occasion there may be reasons of public interest or law that enable us to use such information without consent. For example, if it is necessary to protect your vital interests where you are physically or legally incapable of giving consent or it is necessary for the establishment, exercise or defence of a legal claim or it is necessary to perform a public task to minimise the transmission of infectious disease.

Where you have specific disability needs we will use such information to perform our contract with you and to comply with our obligations pursuant to equality laws.   

Who do we share your information with?

Our group. Your personal information may be shared with companies within the Student Roost group of companies based in the UK as different parts of the business are responsible for different activities.

We may also share your personal information with third parties as follows:

  • service providers, suppliers, business partners, sub-contractors and agents who provide services and/or process information on our behalf (e.g. IT providers, LiveChat, managing agents, automated marketing providers) so that they may help us to provide you with the services
  • your referee(s) and the educational institutions you have attended in the event that you apply for a role with us
  • third parties used to facilitate payment transactions and refunds (e.g. financial institutions)
  • debt recovery agencies in the event that you fail to pay any charges/fees due
  • law enforcement and fraud prevention agencies in connection with the prevention, investigation, detection or prosecution of criminal offences
  • where it is necessary to protect or defend our legal rights or the legal rights of others
  • if we sell our business or a property we will transfer the personal data we hold to the new owner
  • our professional advisors (e.g. bankers, lawyers and insurers) and auditors for the purposes of seeking professional advice or to meet our audit responsibilities
  • social media sites if you have linked your social media accounts to us
  • where we have a legal or regulatory obligation to do so (i.e. to comply with a court order, contract or when required to do so by our regulators, government agencies or law enforcement)
  • public health bodies to help minimise transmission of infectious disease
  • a relevant college or university for the purposes of ensuring compliance with any legal obligations and/or guidance imposed by the Government to help minimise transmission of infectious disease
  • analytics and search engine providers that assist us in the improvement and optimisation of our site
  • the Flashtalking platform to create and deliver tailored online advertising, device recognition and advertising campaign analysis. See Flashtalking’s privacy notice for details of how it uses your data: www.flashtalking.com/consumer-privacy
  • third parties who assist Student Roost with promotional/marketing/publicity activities

We do NOT sell or share your personal information with third parties for them to use for marketing purposes.

We require third parties to respect the security of your personal information and to treat it in accordance with the law. All our third-party service providers are required to take appropriate security measures to protect your personal information. We only permit them to process your personal information for specified purposes in accordance with our instructions.

How long do we keep your information?

We only hold your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements, and take into account the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means. As a result, the length of time that we keep your information for will vary depending on the above circumstances and the purposes for which we have it. We will review what information we need on an ongoing basis and will only retain it for the minimum amount of time that we need it for or are legally obliged to keep it for.

In some circumstances you can ask us to delete your personal information. See ‘Right to be forgotten’ section below for further information. We may retain basic information on a suppression list to record your request and to avoid sending you unwanted materials in the future.

Your personal information may be anonymised, so that it can no longer be associated with you, for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Marketing

We will only send you marketing and promotional materials if you have specifically consented to receive them. We may contact you for this purpose by email or SMS/text. You have the option to opt out of our marketing communications at any time by emailing us on [email protected]. You can unsubscribe from our email marketing communications using the links provided in the emails we send you. Similarly, you can unsubscribe from our SMS/text marketing communications by following the opt out instructions in any SMS received.

We will only film and/or take photographs of you for use in publicity and marketing materials (in any format, including printed publications and social media) with your consent. You can withdraw your consent at any time by emailing us at [email protected] with your name. Once you withdraw your consent, we will not use any images of you in any of our future marketing materials. Any images of you already published in our marketing materials at the time you withdraw your consent will continue to be used.

Security and storage of information

We are committed to keeping your personal information secure. In order to prevent unauthorised access or disclosure we have put in place appropriate security measures to safeguard the personal information we collect, including secure servers. In addition, we limit access to your personal information to those employees, agents and suppliers who have a business need to know. They will only process your personal information on our instructions and are subject to a duty of confidentiality.

If you believe your account has been compromised (for example, your password is stolen, or you receive suspicious communication from someone holding themselves out to be a Student Roost employee) please report the incident to us on [email protected] or write to us at Student Roost, Legal Department, Charles House, 8th Floor, 148 Great Charles Street, Birmingham B3 3HT.

We have procedures in place to deal with any suspected data breach. We will notify you and the Information Commissioner’s Office of a suspected data security breach where we are legally required to do so.

Sending information to countries outside the UK

Sometimes we might need to transfer your personal information to third-party processors outside the United Kingdom. We will take reasonable steps to ensure there are appropriate safeguards in place so that your personal information is protected in accordance with this policy and applicable laws.

Your rights

You have various rights under data protection laws (some of which are highlighted below). If you would like to exercise any of your rights, please write to us at: Student Roost, Legal Department, Charles House, 8th Floor, 148 Great Charles Street, Birmingham B3 3HT, or email us on  [email protected].

If you exercise any of your rights, we may ask for proof of identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also ask you for further information in relation to your request to help identify your personal information and speed up our response.

Your rights include:

  • Right of access/obtaining copies of your information

You have the right to ask us for details of the personal information we hold about you.

  • Amending your information

It is important that the personal information we hold about you is accurate and current. If your details change, or if you think any information we have about you is wrong or incomplete, please correct it in your account or contact us using the details given above.

  • Right to object

You have the right to object to the processing of your personal information where we are relying on a legitimate interest. Should you wish to object, please set out the specific reasons why you are objecting. These reasons should be based upon your particular situation.

  • Right to be forgotten

You have the right to have your personal information erased in certain circumstances.

More information about your rights is available on the ICO website at www.ico.org.uk.

Further information

If you have any questions about this policy or how we treat your personal information, please email us on [email protected] or write to us at Student Roost, Legal Department, Charles House, 8th Floor, 148 Great Charles Street, Birmingham B3 3HT.

If you are not satisfied with how we respond to any request or query you raise then you can refer the matter to the Information Commissioner’s Office. Information about how to do this is available on the ICO website at www.ico.org.uk.