1. Introduction
This Privacy Notice explains how Power Mortgages Ltd collects, uses, stores, and protects your personal data. It also explains your rights under data protection law and how you can exercise them. Power Mortgages Ltd is authorised and regulated by the Financial Conduct Authority and is directly responsible for the advice and services we provide. We are committed to handling your personal data lawfully, fairly, and transparently.

2. Who we are
Data Controller
Power Mortgages Ltd
Company number: 07619473
FCA Firm Reference Number: 07619473

Registered office
C/O Power Accountax Ltd, Mailbox 3
Solent Business Centre
343 Millbrook Road West
Southampton
SO15 0HW

Trading address
Lewis Building
35 Bull Street
Birmingham
B4 6AF

ICO registration number: Z2702364
Power Mortgages Ltd is the data controller responsible for your personal data.

3. Contacting us about your data
Power Mortgages Ltd is not required to appoint a Data Protection Officer. If you have any questions about this Privacy Notice or how we use your personal data, or if you wish to exercise your data protection rights, please contact:
Email: mandeep@powermortgages.co.uk

If you believe your data has been used incorrectly or disclosed without authorisation, please contact us as soon as possible so we can investigate and meet our regulatory obligations.

4. What personal data we collect
We collect and process personal data that is necessary to provide mortgage and insurance advice and related services.
This may include:
• Personal details such as name, date of birth, gender, nationality, marital status, contact details, addresses, and identity documents
• Employment and income information, including salary, bonuses, benefits, and employment history
• Financial information such as bank details, credit commitments, loans, expenditure, assets, liabilities, and credit history
• Information about dependants for affordability and suitability assessments
• Details of existing mortgages, loans, and protection policies
• Communications between you and us, including emails, telephone calls, and written correspondence

5. Special category data and criminal disclosures

In certain circumstances, particularly when arranging insurance products such as life, critical illness, or income protection insurance, we may need to process special category data. This can include:

• Health and medical information
• Ethnic origin where required by insurers

We may also need to process information relating to criminal convictions or offences where this is required for insurance underwriting, claims handling, or fraud prevention. We process this information only where it is necessary and lawful to do so, relying on explicit consent or other lawful bases permitted under UK data protection law and insurance regulation.

6. How we collect your data
We collect personal data primarily from you, including during meetings, telephone calls, emails, online forms, and written correspondence.
We may also obtain information from third parties where appropriate, including:
• Credit reference agencies
• Electronic identity and anti-money laundering providers
• Employers, lenders, insurers, and other product providers
• Publicly available sources such as the electoral register

7. How we use your personal data and our lawful basis

We use your personal data for the following purposes:
• To provide mortgage and insurance advice and related services
• To assess suitability and affordability
• To submit applications to lenders and insurers
• To comply with legal and regulatory obligations, including FCA and anti-money laundering requirements
• To respond to enquiries, complaints, or regulatory requests
• To maintain accurate records and manage our business

The lawful bases we rely on include:
• Performance of a contract
• Compliance with legal and regulatory obligations
• Legitimate interests, where these are not overridden by your rights
• Consent, where required

8. Marketing communications
From time to time, we may contact existing clients with information about mortgage or insurance services that may be relevant to them. This may include contact by email, SMS, or live telephone calls. We rely on a combination of consent and legitimate interests for marketing
communications, depending on the circumstances.
You have the right to opt out of marketing at any time. This will not affect the services we provide to you. You can opt out by contacting us using the details in Section 3 or by following any unsubscribe instructions provided.

9. Sharing your personal data
We may share your personal data with third parties where necessary to provide our
services, including:
• Mortgage lenders and insurance providers
• Compliance advisers and professional consultants
• Credit reference agencies and identity verification providers
• Valuers, surveyors, conveyancers, and other professional advisers involved in your transaction
• IT and system support providers
Your data is shared only for legitimate business purposes and in accordance with this
Privacy Notice. Third parties are required to handle your data securely and lawfully.

10. Systems and data processing
We use a range of secure systems to process personal data, including customer relationship management software, mortgage sourcing systems, electronic identity checks, and cloud-based email and document storage (including Pipedrive, Mortgage Brain, Equifax, LexisNexis, and Microsoft 365). Access to personal data is restricted to authorised individuals who need it to perform their role.

11. International data access
Some of our systems or service providers may allow access to personal data from outside the United Kingdom. Where this occurs, appropriate safeguards are in place to ensure your data remains protected in accordance with UK data protection law.

12. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.
We also encourage you to take reasonable steps to protect your own information, such as using secure email methods and protecting documents sent to us.

13. Data retention
We retain personal data for a minimum of six years after the end of our relationship with you. In some cases, we may retain data for longer where required to meet legal, regulatory, or professional obligations.

14. Your rights
You have the right to:
• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your data, in certain circumstances
• Request restriction of processing
• Object to processing, including for marketing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details in Section 3.

15. Complaints
If you are unhappy with how we have handled your personal data, please contact us in the first instance so we can address your concerns.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk

16. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in law, regulation, or our business practices. The latest version will always be available on request or via our website.