Privacy Statement

Introduction

Mortgage Matchup Ltd ("we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, store and share your personal data when you enquire about or use our mortgage and protection advice services. It applies whether you contact us by phone, email, post, through our website or in person at our Cheshire office.

We are registered with the Information Commissioner's Office (ICO) and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Mortgage Matchup Ltd is a mortgage and protection brokerage registered in England and Wales. We are an appointed representative of HL Partnership Ltd, which is authorised and regulated by the Financial Conduct Authority (FCA). Our registered office is Suite 12, Charter House, Charter Way, Macclesfield, Cheshire, SK10 2NG.

For any privacy or data protection questions, contact us at info@mortgagematchup.co.uk or call 01625 430444.

Personal Data We Collect

We only collect the personal data we need to provide mortgage and protection advice and to meet our regulatory obligations. This may include:

• Contact details such as your name, address, telephone number and email address.
• Financial information relevant to your mortgage enquiry, including employment status, income, outgoings and existing commitments.
• Identity and background details, such as date of birth and proof of identity, to meet legal and anti-money laundering requirements.
• Property and insurance details, including the property you are purchasing or remortgaging and the cover you require.
• Technical data such as your IP address and browser details when you visit our website, collected via cookies and similar technologies.

How We Use Your Data

We use your personal data for the following purposes:

• To provide tailored mortgage and protection advice and source suitable products.
• To process enquiries, applications and ongoing case management.
• To communicate with lenders, insurers and other providers on your behalf in order to progress your application.
• To carry out identity, credit and affordability checks as required by law and by our lenders.
• To meet our regulatory, legal and compliance obligations under FCA rules.
• To send you relevant updates and information, where you have consented to receive marketing communications.
• To maintain accurate records and improve the services we offer.

Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR to process your personal data:

• Contract: to take steps before entering into a contract with you and to provide the advice and services you have requested.
• Legal obligation: to comply with our legal and regulatory duties, including anti-money laundering and FCA requirements.
• Legitimate interests: to operate our business effectively and communicate with you about your enquiry or application.
• Consent: where we send marketing communications, which you can withdraw at any time.

Sharing Your Data

We may share your personal data with third parties where it is necessary to provide our services or to meet legal obligations. These include:

• Mortgage lenders and their underwriting teams.
• Insurance and protection providers.
• Credit reference agencies and identity verification services.
• Solicitors, conveyancers and surveyors involved in your property transaction.
• Our network, HL Partnership Ltd, and our regulatory bodies including the FCA.
• Service providers who help us run our business, such as IT and communications suppliers.

We never sell your personal data. We only share it where there is a legitimate reason to do so and only the minimum necessary for that purpose.

How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes set out in this statement and to comply with our legal and regulatory obligations. In most cases we will retain mortgage and protection records for a minimum period required by FCA rules after the end of your relationship with us, and then securely delete or anonymise them.

Your Rights

Under UK GDPR you have a number of rights relating to your personal data:

• The right to be informed about how we use your data.
• The right of access to the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure, also known as the right to be forgotten, in certain circumstances.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details above. We will respond within one month, as required by law.

Cookies and Website Data

Our website may use cookies and similar technologies to improve your experience, understand how the site is used and remember your preferences. You can control or delete cookies through your browser settings. Where cookies collect personal data, we will obtain your consent before placing them.

Data Security

We take the security of your personal data seriously and apply appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse. This includes secure storage, controlled access and encryption where appropriate. In the unlikely event of a data breach, we will notify the ICO and affected individuals where required by law.

International Transfers

Your personal data is stored and processed within the UK or the European Economic Area. Where any transfer outside these areas is necessary, we will ensure appropriate safeguards are in place to protect your data in line with UK GDPR.

Complaints

If you have a concern about how we have handled your personal data, please contact us first and we will do our best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website, with the updated date shown at the top of this page.