Privacy Policy

1. Introduction

This Privacy Notice explains how Power Mortgages Ltd collects, uses, stores, and protects your personal data. It also explains your rights under data protection law and how you can exercise them. Power Mortgages Ltd is authorised and regulated by the Financial Conduct Authority and is directly responsible for the advice and services we provide. We are committed to handling your personal data lawfully, fairly, and transparently.

2. Who We Are

Power Mortgages Ltd is the data controller responsible for your personal data.

3. Contacting Us About Your Data

Power Mortgages Ltd is not required to appoint a Data Protection Officer. If you have any questions about this Privacy Notice or how we use your personal data, or if you wish to exercise your data protection rights, please contact us at mandeep@powermortgages.co.uk. If you believe your data has been used incorrectly or disclosed without authorisation, please contact us as soon as possible so we can investigate and meet our regulatory obligations.

4. What Personal Data We Collect

We collect and process personal data that is necessary to provide mortgage and insurance advice and related services. This may include:

• Personal details such as name, date of birth, gender, nationality, marital status, contact details, addresses, and identity documents
• Employment and income information, including salary, bonuses, benefits, and employment history
• Financial information such as bank details, credit commitments, loans, expenditure, assets, liabilities, and credit history
• Information about dependants for affordability and suitability assessments
• Details of existing mortgages, loans, and protection policies
• Communications between you and us, including emails, telephone calls, and written correspondence

5. Special Category Data and Criminal Disclosures

In certain circumstances, particularly when arranging insurance products such as life, critical illness, or income protection insurance, we may need to process special category data. This can include:

• Health and medical information
• Ethnic origin where required by insurers

We may also need to process information relating to criminal convictions or offences where this is required for insurance underwriting, claims handling, or fraud prevention. We process this information only where it is necessary and lawful to do so, relying on explicit consent or other lawful bases permitted under UK data protection law and insurance regulation.

6. How We Collect Your Data

We collect personal data primarily from you, including during meetings, telephone calls, emails, online forms, and written correspondence. We may also obtain information from third parties where appropriate, including:

• Credit reference agencies
• Electronic identity and anti-money laundering providers
• Employers, lenders, insurers, and other product providers
• Publicly available sources such as the electoral register

7. How We Use Your Personal Data and Our Lawful Basis

We use your personal data for the following purposes:

• To provide mortgage and insurance advice and related services
• To assess suitability and affordability
• To submit applications to lenders and insurers
• To comply with legal and regulatory obligations, including FCA and anti-money laundering requirements
• To respond to enquiries, complaints, or regulatory requests
• To maintain accurate records and manage our business

The lawful bases we rely on include: performance of a contract; compliance with legal and regulatory obligations; legitimate interests, where these are not overridden by your rights; and consent, where required.

8. Marketing Communications

From time to time, we may contact existing clients with information about mortgage or insurance services that may be relevant to them. This may include contact by email, SMS, or live telephone calls. We rely on a combination of consent and legitimate interests for marketing communications, depending on the circumstances. You have the right to opt out of marketing at any time. This will not affect the services we provide to you. You can opt out by contacting us using the details in Section 3 or by following any unsubscribe instructions provided.

9. Sharing Your Personal Data

We may share your personal data with third parties where necessary to provide our services, including:

• Mortgage lenders and insurance providers
• Compliance advisers and professional consultants
• Credit reference agencies and identity verification providers
• Valuers, surveyors, conveyancers, and other professional advisers involved in your transaction
• IT and system support providers

Your data is shared only for legitimate business purposes and in accordance with this Privacy Notice. Third parties are required to handle your data securely and lawfully.

10. Systems and Data Processing

We use a range of secure systems to process personal data, including customer relationship management software, mortgage sourcing systems, electronic identity checks, and cloud-based email and document storage (including Pipedrive, Mortgage Brain, Equifax, LexisNexis, and Microsoft 365). Access to personal data is restricted to authorised individuals who need it to perform their role.

11. International Data Access

Some of our systems or service providers may allow access to personal data from outside the United Kingdom. Where this occurs, appropriate safeguards are in place to ensure your data remains protected in accordance with UK data protection law.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. We also encourage you to take reasonable steps to protect your own information, such as using secure email methods and protecting documents sent to us.

13. Data Retention

We retain personal data for a minimum of six years after the end of our relationship with you. In some cases, we may retain data for longer where required to meet legal, regulatory, or professional obligations.

14. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your data, in certain circumstances
• Request restriction of processing
• Object to processing, including for marketing
• Request data portability where applicable
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 3.

15. Complaints

If you are unhappy with how we have handled your personal data, please contact us in the first instance so we can address your concerns. You also have the right to complain to the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website: www.ico.org.uk

16. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in law, regulation, or our business practices. The latest version will always be available on request or via our website.