Mortgage Fixed is an appointed representative of Mortgage Advice Bureau Limited. Both companies, known together in this document, are referred to as “Mortgage Fixed”, “we” and “us”.
The Mortgage Fixed Privacy Policy can be found here:
https://mortgagefixed.co.uk/privacy-policy
As the controller of your data, Mortgage Fixed complies with Data Protection laws in the United Kingdom and the EU General Data Protection Regulation (GDPR). This Privacy Notice explains how we process your personal data.
Personal data collected, used, stored and transferred by us may include:
Forenames, last name, maiden name, date of birth, gender, marital status, and username or similar identifier.
Home address, email address and telephone numbers.
Bank statements, payment card details, savings, debts (such as loans and credit cards), income and expenditure, employer and pension benefits, and other assets.
Medical history and trade union or political party membership costs.
Payments made for products and services you have purchased from us.
Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices used to access the Mortgage Fixed website.
Purchases made by you, feedback and survey responses, and how you use our website, products and services.
Your preferences for receiving marketing from us and our business partners, and your communication preferences.
We collect personal data using the following methods:
Interactions with an adviser in person, by post, phone (including call recordings and voicemail), email, videoconferencing or otherwise when sourcing and applying for mortgage or protection products. This processes Identity, Contact and Financial data.
Interactions with our website, customer portal, web enquiry forms or the “Find a Mortgage” function, processing Identity, Contact, Financial and Technical data.
Processing Identity, Contact and Financial data, including:
We use your personal data to:
We process personal data under the following lawful bases:
We will only use your personal data for the purposes stated above unless we reasonably consider that another use is compatible with the original purpose. If required by law, we may process your personal data without your knowledge or consent. We will notify you where legally required.
We keep this Privacy Notice under regular review.
Last updated: 4 August 2020
Historic versions are available on request.
We may use AI and automated decision-making systems for legitimate re-engagement purposes, such as reviewing existing mortgages and sourcing suitable products.
If you do not wish your data to be used in this way, please email data.protection@mab.org.uk.
You may opt in to receive marketing information about related products and services. You can opt out at any time by:
Your personal data will not be shared with third parties for marketing purposes.
We use appropriate security measures to protect your personal data from unauthorised access, loss, misuse or disclosure. Access is limited to staff, advisers, appointed representatives and suppliers with a legitimate business need, all of whom are subject to confidentiality obligations.
We have procedures in place to manage data breaches and will notify you and relevant regulators where legally required.
You may set your browser to refuse some or all cookies. Please note that disabling cookies may affect website functionality.
For more information, please see our Cookie Policy.
Our website may include links to third-party websites, plug-ins or applications. We do not control these sites and are not responsible for their privacy practices. Please review their privacy notices when you leave our website.
Some suppliers are based overseas. Where data is transferred outside the UK, we use safeguards such as Standard Contractual Clauses approved by the European Commission to ensure GDPR-equivalent protection.
All recipients must maintain appropriate security and confidentiality and only process personal data in accordance with Mortgage Fixed instructions.
| Purpose | Retention Period |
|---|---|
| Successful mortgage / protection applications | Policy term + 6 years (or up to 30 years if term unknown) |
| Withdrawn, stalled, incomplete and failed applications | 2 years from latest application start (or 6 years where advice was provided / application submitted and rejected) |
| Client portal accounts | 2 years from last login if not proceeded to full application |
| Affordability checks | 2 years from Decision in Principle if not proceeding |
| Third-party enquiry data | 2 years from receipt from introducer |
After these periods, if there is no ongoing client relationship, your personal data will be securely deleted or anonymised for statistical use.
You have the right to:
If you have any questions or complaints about how we use your personal data, or you wish to exercise your rights, please contact the Information Security & Data Protection Manager:
Email: Data.Protection@mab.org.uk
We will respond as soon as possible, and no later than one month from the date of your request.
If you are not satisfied with how Mortgage Fixed has responded to your enquiry, you have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
