Privacy policy
Last updated 21 June 2026. This sets out what personal data West Street, Carshalton, Residents Association Limited collects through this portal, how we use it, and your rights under UK GDPR.
Who we are
West Street, Carshalton, Residents Association Limited operates the residents' portal at wscra.uk. You can contact us at mail@wscra.uk.
What personal data we collect
- Identity & contact: your name, email address, flat number and floor — provided when you register.
- Communications: messages you send via the contact form, forum posts, news comments, and poll comments.
- Engagement: your votes on news items and polls, your RSVPs to meetings, your attendance where recorded.
- Technical: sign-in timestamps, IP addresses and user-agent strings, retained for security and fraud prevention.
- Preferences: your visibility choices (show name / show email on the directory), notification opt-outs, theme and font-size preference.
How we use it
- To authenticate you via email magic-links and keep your session secure.
- To show the residents' directory, news, polls, forum and meeting information to signed-in residents.
- To route your contact-form messages to the correct recipient (e.g. a managing agent or director) and keep an auditable record of what was sent and when.
- To send you notifications you've opted into (new forum topics, forum replies, meeting announcements, news updates).
- To detect abuse — rate-limiting sign-ins, deduplicating submissions, logging administrative actions.
Lawful basis
We process your data on the basis of legitimate interests (running the residents' association and communicating with its members), and, for notifications and directory visibility, your consent (which you can change at any time on your Profile page).
Who we share it with
By default, only directors and other signed-in residents see your contact-form subject lines and any directory fields you've chosen to share. If you tick the "Share with managing agent" box on a contact message (default on), our managing agent can also see it. We don't sell or share your data with advertisers.
Retention
We keep your account and engagement data for as long as you're a resident of Sycamore Close Residents. Sign-in logs and administrative audit records are retained for up to two years for security purposes. When you leave, we'll delete your account on request and retain only what's needed for financial records and statutory obligations.
Your rights
- Access: download a copy of your data at any time via the Download my data button on your profile.
- Correction: edit your profile, name, email, and visibility settings yourself — or email us if you need help.
- Deletion: ask a director to remove your account.
- Objection / restriction: turn off notifications on your profile, or contact us to object to specific processing.
- Complaint: you can complain to the UK Information Commissioner's Office at ico.org.uk.
Cookies
This portal uses a small number of first-party cookies strictly necessary to run the service — session authentication, your font/theme preference, and a "seen welcome hint" marker. We don't use third-party analytics, tracking pixels, or advertising cookies.
Changes to this policy
If we materially change how we handle your data, we'll update this page and notify residents via email. The "last updated" date at the top always reflects the current version.