Legal, Survey or EPC Quote
Book an appointment
Mortgage calculator
01332 300 300Mortgages
Who we are
Mortgage & Finance Arena Ltd (company number 09490530) is a mortgage and protection advisory firm authorised and regulated by the Financial Conduct Authority under reference 706676. Our registered address is 12 Melbourne Business Court, Millennium Way, Pride Park, Derby DE24 8LZ.
We are registered with the Information Commissioner’s Office (ICO) as a data controller under registration number ZA148317. We are committed to protecting your personal data and handling it in a way that is lawful, fair and transparent.
If you have any questions about this policy or how we use your data, contact us at privacy@mortgageandfinancearena.co.uk.
What data we collect and why
We collect personal data about you in connection with providing mortgage and protection advice services. The data we collect includes:
- Identity data: full name, date of birth, nationality, passport or driving licence details
- Contact data: address, email address, telephone number
- Financial data: income, employment details, existing debts and financial commitments, bank account details, credit history and credit score
- Property data: property address, value, tenure and type
- Health data: where relevant to protection advice or to assessing your needs as a potentially vulnerable customer (this is special category data and is handled with additional care)
- Transaction data: details of mortgage and protection products recommended and arranged
- Identity verification data: copies of identity and address documents, electronic identity verification results
- Communications data: records of calls, emails and correspondence between us
How we use your data and our lawful basis
| Purpose | Lawful Basis |
|---|---|
| Providing mortgage and protection advice | Performance of a contract |
| Submitting applications to lenders and providers on your behalf | Performance of a contract |
| Anti-money laundering and identity verification checks | Legal obligation (Money Laundering Regulations 2017) |
| Meeting our FCA regulatory obligations including record-keeping and suitability documentation | Legal obligation (MCOB / ICOBS / FCA rules) |
| Assessing and recording vulnerability to ensure we support you appropriately | Legal obligation and legitimate interests |
| Responding to complaints | Legal obligation (DISP) |
| Sending you information about your mortgage or protection policy | Performance of a contract / legitimate interests |
| Marketing communications about our services | Consent (where you have opted in) |
| Improving our services and training our staff | Legitimate interests |
Who we share your data with
We share your personal data with third parties only where necessary. This includes:
- Mortgage lenders and protection providers — we share your personal data with lenders and providers as part of the application process. Lenders use this data to assess your application, conduct credit and affordability checks and make a lending decision. Each lender is an independent data controller and their own privacy policy governs how they use your data
- Credit reference agencies — lenders and we may share your data with credit reference agencies including [Experian / Equifax / TransUnion] to carry out credit checks. These agencies may retain a record of the search on your credit file
- Our appointed representative — where your case is handled by an adviser operating under our FCA permissions, your data is shared with that firm for the purpose of delivering the advice service
- Surveyors, solicitors and conveyancers — where required to progress your mortgage application
- Our compliance advisers and professional advisers — who are subject to duties of confidentiality
- The Financial Conduct Authority, Financial Ombudsman Service and other regulatory bodies — where we are required to share data by law or regulatory obligation
- IT and software providers — who process data on our behalf and are subject to data processing agreements
We do not sell your data to third parties. We do not share your data with third parties for their own marketing purposes.
Special category data
Where we collect health data in connection with protection advice or vulnerability assessments, we do so on the basis of your explicit consent or where processing is necessary for reasons of substantial public interest. You may withdraw consent for the processing of health data at any time, though this may affect our ability to give you advice on certain protection products.
How long we keep your data
We keep your data for as long as required by law or regulation. Our standard retention periods are:
| Data Type | Retention Period |
|---|---|
| Mortgage advice files | 6 years from date of advice |
| Protection advice files | 6 years from date of advice |
| Equity release advice files | 6 years from date of advice |
| Identity verification records | 5 years from end of client relationship |
| Complaint records | 5 years from date of closure |
| Marketing consent records | Duration of consent plus 1 year |
After the retention period expires, your data is securely deleted or anonymised.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (a Subject Access Request)
- Correct inaccurate or incomplete data
- Erase your data in certain circumstances
- Restrict how we process your data in certain circumstances
- Object to processing based on legitimate interests
- Port your data to another controller in certain circumstances
- Withdraw consent at any time where consent is the lawful basis for processing
To exercise any of these rights, contact us at info@mortgageandfinancearena.co.uk. We will respond within one calendar month. We may ask you to verify your identity before we process your request.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113 if you are unhappy with how we have handled your data.
Data security
We protect your personal data using appropriate technical and organisational measures including device encryption, two-factor authentication, secure email and access controls. We review our security arrangements annually.
Cookies
We use cookies on our website to improve your experience. For full details of the cookies we use, please see our Cookie Policy at mortgageandfinancearena.co.uk/cookie-policy.
Changes to this policy
We review and update this policy at least annually. The date at the top of this page shows when it was last updated. Continued use of our services after an update constitutes acceptance of the revised policy.
Contact us
Mortgage & Finance Arena Ltd 12 Melbourne Business Court, Millennium Way, Pride Park, Derby DE24 8LZ privacy@mortgageandfinancearena.co.uk 01332 300 300