Mortgages First Limited is committed to protecting your privacy
In this Privacy Notice the terms, 'we', 'us' and 'our' are references to Mortgages First Limited, company number 08415945 having a registered address of 2nd Floor, Gateway 2 Holgate Park Drive, York, England, YO26 4GB. RSC New Homes Limited is part of the LSL group of companies of which the ultimate parent company is LSL Property Services plc (LSL Group). Mortgages First Limited is also an Appointed Representative of PRIMIS Mortgage Network a trading name of First Complete Limited (Our Network).
This Privacy Notice sets out the basis on which any personal data we collect from you or you provide to us through our website (https://www.mortgages-first.co.uk) (Our Site), or via other methods which you may use to communicate with us will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it, including:
What information is being collected if you are a prospective or existing customer?
In what circumstances will your Special Data and Criminal Disclosures be collected?
The legal basis upon which we deal with your information
The basis upon which Our Network will deal with your information
Use of the information we collect
What is the source of the information we collect?
Disclosure of information
Third party websites
Your privacy is important to us, and we are committed to keeping your information secure and managing it in accordance with our legal responsibilities under applicable data protection laws.
By accessing, browsing or otherwise using Our Site you confirm that you have read and agree to this Privacy Notice. If you do not agree with any part of this Privacy Notice, you should not use Our Site or use our services.
We reserve the right to change the contents of Our Site, including this Privacy Notice at any time, by posting such changes on Our Site. It is your responsibility to familiarise yourself with the Privacy Notice regularly to ensure that you are aware of any changes. Your continued use of Our Site following the posting of any such changes will constitute your acceptance of the revised Privacy Notice.
This Privacy Notice was last updated on 26 November 2019.
WHAT INFORMATION IS BEING COLLECTED IF YOU ARE A PROSPECTIVE OR EXISTING CUSTOMER?
We may collect personal information from you in connection with your use of Our Site, including such personal information as:
- your name, postal address, phone number and email address when you submit a request to be contacted through our Contact Us page;
- cookie data which relates to your use of Our Site;
- data sent from your browser to our server which may include:
- the time, date and duration of your visit to Our Site;
- the site from which you have come (the referral URL);
- the pages visited on Our Site; and
- your IP address.
We may also collect information from you when we provide you with assistance in relation to your mortgage and/or protection requirements, including personal information such as:
- your title, name, date of birth, gender, nationality, civil/marital status, contact details, addresses and any other identity documents as are necessary to verify your identity and the results of any identity checks which we carry out;
- employment and remuneration information (including salary/bonus schemes/overtime/sick pay/other benefits) including your employment history;
- bank account and/or summary credit card details, tax information, loans and credit commitments, personal credit history, national insurance number, sources of income and expenditure, family circumstances and details of dependents;
- payment card information if applicable;
- confirmation of whether or not you smoke and alcohol consumption levels;
- any pre-existing mortgage and/or protection products and the terms and conditions relating to these;
- credit reference checks;
- details of the type of mortgage and/or protection you require where you are receiving mortgage and/or protection advice from us;
- details provided to us by the underwriter of your protection policy relating to any claims made by you once your policy is live. This allows us to monitor claims handling processes and ensure we have the information we need to assist you with the renewal of your policy; and
- responses and feedback which you provide to us in customer surveys, in order that we can monitor the quality of the service we provide and make improvements.
IN WHAT CIRCUMSTANCES WILL YOUR SPECIAL DATA AND CRIMINAL DISCLOSURES BE COLLECTED?
We may collect personal information from you which is of a sensitive nature. Where we do so we treat this information in accordance with the additional protection it is given under data protection laws. Where you ask us to help you with your protection needs, in particular life insurance and insurance that may assist you in the event of an accident or illness, we will ask you information about your ethnic origin, your health and medical history (including the health and medical history of your family where appropriate) (Special Data). We will record and use your Special Data in order to make enquiries of protection providers in relation to insurance products that may meet your needs and to provide you with advice regarding the suitability of any product that may be available to you.
If you have parental responsibility for children under the age of 16 it is also very likely that we (and consequently Our Network) will record information on our systems that relates to those children and potentially, to their Special Data.
The arrangement of certain types of insurance may involve disclosure by you to us of information relating to historic or current criminal convictions or offences (together Criminal Disclosures). This is relevant to insurance related activities such as underwriting, claims and fraud management.
When we process your Special Data and any Criminal Disclosures we do so on the basis that it is in the substantial public interest to be able to provide vital insurance products as permitted by UK data protection related laws and regulations from time to time. Information on Special Data and Criminal Disclosures must be capable of being exchanged freely between insurance intermediaries such as us and insurance providers, to enable customers to secure the important insurance protection that they require.
THE LEGAL BASIS UPON WHICH WE DEAL WITH YOUR INFORMATION
Wherever we collect or use your personal information, we will make sure we do this for a valid legal reason. This will be for at least one of the following purposes:
- because it is necessary to fulfil the terms of our contract with you - if you have entered into a contract with us for example to provide mortgage or protection advice;
- because it is necessary to support the legitimate interests of our business to provide you with an efficient service that meets your needs - in all such cases, we will look after your information at all times in a way that is proportionate and respects your privacy rights and you have a right to object to processing as explained in the section on Your Rights below;
- to meet responsibilities we have to our regulators, tax officials, law enforcement, or otherwise meet our legal responsibilities
- where we have obtained a clear consent from you - we will always make it clear when we need your consent and how you can change your permissions at any time thereafter.
If you would like to know more about the legal reasons or legitimate interests that apply to a particular way in which we use personal information you can contact us at any time.
THE BASIS UPON WHICH OUR NETWORK WILL DEAL WITH YOUR INFORMATION
Our Network is authorised and regulated by the Financial Conduct Authority (FCA). Our Network is responsible for the quality of the advice that we provide to you in relation to your mortgage and/or protection products, where those products are regulated by the FCA. In the course of doing so, Our Network will process your information, including your Special Data and Criminal Disclosures.
In the course of handling your information and your Special Data/Criminal Disclosures, Our Network will:
- record and store your information and your Special Data/Criminal Disclosures on Our Network systems run on secure servers. Your information and your Special Data/Criminal Disclosures will be accessed by authorised employees and consultants within, or engaged, by Our Network as necessary for the purposes of supervision, training, quality audits, customer surveys and complaint handling or otherwise to comply with any other legal or regulatory obligation Our Network may have;
- use, and where appropriate transmit, your information and your Special Data/Criminal Disclosures to respond to any request from the FCA, the Financial Ombudsman Service, HMRC, the ICO or any other regulatory, law enforcement or governmental body; and
- need to access and process your information and your Special Data/Criminal Disclosures to deal with enquiries received from mortgage lenders and insurance providers that relate to the service we have provided to you, including the payment of any commission or fees to us that may be linked to the product you have taken out.
Your information and your Special Data/Criminal Disclosures will be retained by Our Network either electronically or in paper format for a minimum of six years and possibly for a longer period where this is required to enable Our Network to fulfil its legal and regulatory obligations.
USE OF THE INFORMATION WE COLLECT
Your information will be used by us in connection with the following purposes:
Providing You with Services:
- To allow us to provide you with the mortgage or protection services which you have asked us to provide, including:
- offering you advice;
- obtaining quotes;
- assisting you with applications for products by submitting your information to product providers both in paper form and online via provider systems in order to progress any enquiry or application made on your behalf and to deal with any additional questions or administrative issues that the providers may raise;
- keeping you informed of any developments in relation to any product which we help you to take out; and
- assisting you with other services which you may require in connection with the mortgage or protection services which we are providing, including surveying, conveyancing, general insurance or Will writing;
- to keep our client records up to date;
- to improve our services by analysing your personal information so we better understand how you use our services;
- to process financial transactions relating to your product such as taking payment for services which we provide and processing refunds;
Marketing of Our Services to You:
- to provide you with general updates in relation to the mortgage market, in accordance with your preferences;
- to provide you with information which we reasonably believe may be relevant to you based on the services we are providing to you or to whom we can introduce you to including conveyancing and other financial services products;
- to carry out targeted advertising to you on social media websites such as Facebook where you have already shown an interest in our services. This is done through analysing information we collect about your interactions on Our Site and making this available to social media networks;
Responding to Your queries:
- to help answer any questions which you have asked one of our agents or staff members;
- to provide you with a quote for our services;
Improving Our Site:
- to analyse cookie and website usage data to keep improving Our Site;
Legal and Regulatory Obligations:
- to comply with applicable laws where we are obliged to retain and/or disclose certain information;
- to investigate or address claims or complaints relating to your use of our services;
- to upload your information along with full details of the mortgage, protection or insurance product discussed with you or which you have taken out to the computer systems of Our Network;
- for internal and external auditing purposes;
- to carry out anti-money laundering checks; and
- to transfer information to any entity which may acquire rights in us.
WHAT IS THE SOURCE OF THE INFORMATION WE COLLECT?
The majority of the personal information which we collect will have been voluntarily provided by you, however we may also obtain your personal data from other sources including:
- other LSL Group companies;
- third parties including credit reference agencies and law enforcement/regulatory bodies;
- your mortgage advisor, referring builder/contractor, solicitor and/or mortgage provider; and
- other publicly available sources.
The personal information that you provide will be retained by us in accordance with applicable laws and our internal Retention Policy. However, we will take reasonable steps to destroy or de-identify personal information we hold if it is no longer needed for the purposes set out above. We will only hold your personal information on our systems for as long as is necessary for the relevant purpose for which it was collected. A copy of our Retention Policy is available on request.
DISCLOSURE OF INFORMATION
The information you provide to us will be held on our computers in the UK and may be accessed by or given to our staff or to any member of the LSL Group for the purposes set out in this Privacy Notice or for other purposes approved by you. We may also provide your personal information to other companies within the LSL Group for the purposes of administering our business or where services are provided by one LSL Group company to another pursuant to an intra-company services agreement.
We may also disclose your information to the third parties listed below for the following purposes:
• insurers and/or mortgage providers for the purpose of providing us or you with a quotation and to allow them to process your application;
• with your consent, or E Surv where you would like us to arrange for a surveyor to provide you with a quote for their services;
• with your consent Watson Ramsbottom Solicitors where you would like us to arrange for a conveyancer to provide you with a quote for their services;
• with your consent, First 2 Protect Limited where you require general insurance advice;
• law enforcement bodies and/or other regulatory entities in order to comply with any legal obligation or court order;
• third parties and their associated companies and sub-contractors we work with as part of providing our services and performing any administration tasks associated with or incidental to those services, including (but not limited to):
o IT administrators;
o software providers; and
o payment service providers.
• our advisers, for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations;
• third parties as necessary in the event of a claim or dispute relating to the use of our services;
• your mortgage advisor, estate agent, solicitor and/or mortgage provider where they referred you to us for mortgage or insurance services, for the purpose of providing them with progress and/or status updates on the services which we are providing to you and/or to liaise with them on your behalf;
• Our Network to allow them to monitor the advice which we provide to you; and
• entities who may or do acquire any rights in us for the purpose of a business sale or reorganisation.
These parties may be located in the UK or elsewhere in the world where different privacy laws may apply which may not offer the same level of protection as UK law. We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect any information held in that country and that the service provider acts at all times in compliance with applicable privacy laws.
THIRD PARTY WEBSITES
Our Site may contain links to other websites. We accept no responsibility or liability for the content of other websites which are not under our strict control, in particular, we are not responsible for the protection and privacy of any information which you provide whilst visiting other websites and such sites are not governed by our Privacy Notice.
We know how much data security matters to all our clients. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it. We employ security measures which aim to protect the data and information provided by you from access by unauthorised persons and against unlawful processing, accidental loss, destruction or damage. We regularly monitor our system for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.
We also anticipate that you will take reasonable steps to safeguard your own privacy when transferring information to us, such as not sending confidential or sensitive information over unprotected email, ensuring email attachments are password protected or encrypted and only using secure methods of postage when original documentation is sent to us.
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information. Click on the links below to learn more about each right you may have:
- To access personal information
- To rectify / erase personal information
- To restrict the processing of your personal information
- To transfer your personal information
- To object to the processing of personal information
- To object to how we use your personal information for direct marketing purposes
- To obtain a copy of personal information safeguards used for transfers outside your jurisdiction
- To lodge a complaint with your local supervisory authority
If you wish to access any of the above mentioned rights, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing personal information to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
You can exercise your rights by contacting us using the details in the Contact section of this Privacy Notice. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.
We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Right to access personal information
You have a right to request that we provide you with a copy of your personal information that we hold and you have the right to be informed of; (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
Right to rectify or erase personal information
You have a right to request that we rectify inaccurate personal information. We may seek to verify the accuracy of the personal information before rectifying it.
You can also request that we erase your personal information in the following limited circumstances:
- where it is no longer needed for the purposes for which it was collected; or
- where you have withdrawn your consent (where the data processing was based on consent); or
- following a successful right to object (see right to object); or
- where it has been processed unlawfully; or
- to comply with a legal obligation to which we are subject.
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:
- for compliance with a legal obligation; or
- for the establishment, exercise or defence of legal claims.
Right to restrict the processing of your personal information
You can ask us to restrict the processing of your personal information, but only where:
- its accuracy is contested, to allow us to verify its accuracy; or
- the processing is unlawful, but you do not want it erased; or
- it is no longer needed for the purposes for which it was collected, but you still need it to establish, exercise or defend legal claims; or
- you have exercised the right to object, and verification of overriding grounds is pending.
We can continue to use your personal information following a request for restriction, where:
- we have your consent; or
- to establish, exercise or defend legal claims; or
- to protect the rights of another natural or legal person.
Right to transfer your personal information
You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:
- the processing is based on your consent or on the performance of a contract with you; and
- the processing is carried out by automated means.
Right to object to the processing of your personal information
You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.
If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to object to how we use your personal information for direct marketing purposes
You can request that we change the manner in which we contact you for marketing purposes.
You can request that we not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes.
Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction
You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.
We may redact data transfer agreements to protect commercial terms.
Right to lodge a complaint with your local supervisory authority
You have a right to lodge a complaint with the ICO (the contact details for which are set out in the Complaints section of this Privacy Notice) if you have concerns about how we are processing your personal information.
We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.
If you have questions or comments about our Privacy Notice or if you wish to exercise your rights mentioned above, please contact our Data Protection Officer by:
Post: Data Protection Officer, Newcastle House, Albany Court, Newcastle Business Park, NE4 7YB; or
Telephone: 0191 233 4600.
If you have any concerns or complaints as to how we have handled your personal data you may lodge a complaint with the UK's data protection regulator, the ICO, who can be contacted through their website at https://ico.org.uk/global/contact-us/ or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.