Who we are

Mortgage & Finance Arena Ltd (company number 09490530) is a mortgage and protection advisory firm authorised and regulated by the Financial Conduct Authority under rehference 706676. Our registered address is 12 Melbourne Business Court, Pride Park, Derby DE24 8LZ.

We are registered with the Information Commissioner’s Office (ICO) as a data controller under registration number ZA148317. We are committed to protecting your personal data and handling it in a way that is lawful, fair and transparent.

If you have any questions about this policy or how we use your data, contact us at privacy@mortgageandfinancearena.co.uk.

What data we collect and why

We collect personal data about you in connection with providing mortgage and protection advice services. The data we collect includes:

• Identity data: full name, date of birth, nationality, passport or driving licence details
• Contact data: address, email address, telephone number
• Financial data: income, employment details, existing debts and financial commitments, bank account details, credit history and credit score
• Property data: property address, value, tenure and type
• Health data: where relevant to protection advice or to assessing your needs as a potentially vulnerable customer (this is special category data and is handled with additional care)
• Transaction data: details of mortgage and protection products recommended and arranged
• Identity verification data: copies of identity and address documents, electronic identity verification results
• Communications data: records of calls, emails and correspondence between us

How we use your data and our lawful basis

Who we share your data with

We share your personal data with third parties only where necessary. This includes:

• Mortgage lenders and protection providers — we share your personal data with lenders and providers as part of the application process. Lenders use this data to assess your application, conduct credit and affordability checks and make a lending decision. Each lender is an independent data controller and their own privacy policy governs how they use your data
• Credit reference agencies — lenders and we may share your data with credit reference agencies including [Experian / Equifax / TransUnion] to carry out credit checks. These agencies may retain a record of the search on your credit file
• Our appointed representative — where your case is handled by an adviser operating under our FCA permissions, your data is shared with that firm for the purpose of delivering the advice service
• Surveyors, solicitors and conveyancers — where required to progress your mortgage application
• Our compliance advisers and professional advisers — who are subject to duties of confidentiality
• The Financial Conduct Authority, Financial Ombudsman Service and other regulatory bodies — where we are required to share data by law or regulatory obligation
• IT and software providers — who process data on our behalf and are subject to data processing agreements

We do not sell your data to third parties. We do not share your data with third parties for their own marketing purposes.

Business finance enquiries

If you ask us about business finance, we collect your name and contact details, your company’s name and number, and details of the finance you need. This can include turnover, loan amount, purpose and whether a director would give a personal guarantee. We use this to answer your enquiry and find suitable lenders. We rely on our legitimate interest in responding to your enquiry, and on taking steps at your request before you enter a contract.

Information from public sources

Our business loan checker reads public records from Companies House. These include company status, accounts and filing dates, registered charges, business activity codes and details of directors. We only use this to check how a company matches lenders’ usual rules and to prepare for our conversation with you.

Automated checks

The business loan checker compares company records and your answers against common lender rules and shows a guide result. It does not make any decision about you. A member of our team reviews every enquiry, and each lender makes its own decision.

Who we share business finance details with

With your agreement, we share the details of your enquiry with business lenders and finance providers who may be able to help. They will use your information under their own privacy notices and may run credit checks.

Special category data

Where we collect health data in connection with protection advice or vulnerability assessments, we do so on the basis of your explicit consent or where processing is necessary for reasons of substantial public interest. You may withdraw consent for the processing of health data at any time, though this may affect our ability to give you advice on certain protection products.

How long we keep your data

We keep your data for as long as required by law or regulation. Our standard retention periods are:

After the retention period expires, your data is securely deleted or anonymised.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you (a Subject Access Request)
• Correct inaccurate or incomplete data
• Erase your data in certain circumstances
• Restrict how we process your data in certain circumstances
• Object to processing based on legitimate interests
• Port your data to another controller in certain circumstances
• Withdraw consent at any time where consent is the lawful basis for processing

To exercise any of these rights, contact us at info@mortgageandfinancearena.co.uk. We will respond within one calendar month. We may ask you to verify your identity before we process your request.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113 if you are unhappy with how we have handled your data.

Data security

We protect your personal data using appropriate technical and organisational measures including device encryption, two-factor authentication, secure email and access controls. We review our security arrangements annually.

Cookies

We use cookies on our website to improve your experience. For full details of the cookies we use, please see our Cookie Policy at mortgageandfinancearena.co.uk/cookie-policy.

Analytics and call tracking
We use Google Tag Manager, Google Analytics, Google Ads, Hotjar and Microsoft Clarity to understand how people use our website. We also use CallTrackingMetrics to see which pages and adverts lead to phone calls. It may show you a different phone number for this purpose. See our Cookie Policy for details and to manage your choices.

Changes to this policy

We review and update this policy at least annually. The date at the top of this page shows when it was last updated. Continued use of our services after an update constitutes acceptance of the revised policy.

Contact us

Mortgage & Finance Arena Ltd 12 Melbourne Business Court, Pride Park, Derby DE24 8LZ privacy@mortgageandfinancearena.co.uk 01332 300300