Privacy Policy.

Last updated: January 2025

1. Who we are

Mortgage Advisory Network Limited ("we", "us", "our") is the data controller responsible for your personal data. We are registered in England and Wales with Company Registration Number 9740756. Our registered office is at 5 Ivegate, Yeadon, Leeds, West Yorkshire, LS19 7RE.

We are an appointed representative of H L Partnership Limited, which is authorised and regulated by the Financial Conduct Authority.

This privacy policy explains how we collect and use personal information about you when you use our website or engage our services.

2. What personal data we collect

We may collect and process the following personal data about you:

• Identity data: name, date of birth
• Contact data: email address, telephone number, postal address
• Financial data: income, employment details, existing debts, credit history, property information — collected when you engage our mortgage advisory services
• Technical data: IP address, browser type and version, pages visited, time and date of visit, referring URL — collected automatically when you use our website
• Communications data: records of correspondence between us

3. How we collect your data

We collect data in the following ways:

• When you complete an enquiry form on our website
• When you contact us by telephone, email, or in person
• During the mortgage advice process, including from third parties such as credit reference agencies and lenders
• Automatically through cookies and analytics tools when you visit our website

4. How we use your personal data

We use your personal data for the following purposes:

• To respond to your enquiry and provide mortgage advisory services
• To research and recommend suitable mortgage and protection products
• To submit mortgage applications to lenders on your behalf
• To comply with our legal and regulatory obligations as an FCA-regulated firm
• To maintain records as required by the FCA
• To improve our website and services
• To send you relevant information about our services, where you have consented

5. Legal basis for processing

We process your personal data on the following legal bases:

• Contract: processing necessary to provide the mortgage advisory services you have requested
• Legal obligation: processing required to comply with FCA regulations and other legal requirements
• Legitimate interests: improving our services and website, fraud prevention
• Consent: marketing communications (where applicable)

6. Who we share your data with

We may share your personal data with:

• Mortgage lenders and providers: to process your mortgage application
• H L Partnership Limited: our network principal, for regulatory oversight purposes
• Credit reference agencies: where necessary for affordability assessment
• Solicitors and conveyancers: as required during the mortgage process
• IT and software service providers: who assist us in running our business, under data processing agreements
• Regulatory authorities: including the FCA, where required

We do not sell your personal data to third parties.

7. How long we keep your data

We retain client records for a minimum of 6 years following the completion of any mortgage or protection transaction, as required by FCA regulations. Website enquiry data that does not result in an engagement is retained for 12 months.

Technical and analytics data is retained in accordance with our cookie policy.

8. Your rights

Under UK GDPR, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate personal data
• Right to erasure: to request deletion of your personal data (subject to legal and regulatory retention obligations)
• Right to restriction: to request that we restrict processing of your data in certain circumstances
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Rights relating to automated decision-making: we do not make solely automated decisions that significantly affect you

To exercise any of these rights, please contact us using the details in section 1 or via our contact page. We will respond within one month.

9. Cookies

We use cookies on our website to improve your experience and analyse usage. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

10. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include secure data storage, restricted access controls, and staff training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly.

11. International transfers

We do not routinely transfer your personal data outside the UK. Where any transfer is necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. The Information Commissioner's Office

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK data protection law.

ICO website: ico.org.uk | Helpline: 0303 123 1113

13. Changes to this policy

We may update this privacy policy from time to time. The current version will always be available on this page. Material changes will be communicated where we have your contact details.

14. Contact us

For any questions about this privacy policy or our data practices, please contact us via our contact page or by post to the address in section 1.