We collect personal information only when you contact us or use our calculators. We use it solely to provide mortgage advice and related services. We do not sell your data. You have the right to access, correct or delete your information at any time. Read on for full details.
Who we are
[Mortgage & Later Life advisor Roshan Percy] ("we", "us", "our") operates the website mortgageresources.co.uk. I am the data controller responsible for your personal information collected through this website.
I am authorised and regulated by the Financial Conduct Authority (FCA). My FCA Registration Number is [RPW01085]. You can verify our registration at register.fca.org.uk.
We are registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO Registration Number is [ZB960303].
Contact details
| Company Name | [Equity Release Hub Limited] |
| Registered Address | [12 Batley Road Enfield Middlesex EN2 0JG] |
| [enquiries@mortgageresources.co.uk] | |
| Telephone | [07543 169733] |
| FCA Reference | [RPW01085] |
| ICO Registration | [ZB960303] |
What personal data we collect
We collect personal data in the following ways:
Information you give us directly
When you complete an enquiry form on this website, you may provide:
- Your name and contact details (email address, phone number)
- Information about your property (approximate value, location)
- Your age or age range (relevant to lifetime mortgage eligibility)
- The nature of your mortgage enquiry
- Any additional information you choose to include in a free-text message
Information collected automatically
When you visit our website, we and our third-party service providers may automatically collect certain technical information, including:
- Your IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the site
- Referring website (how you found us)
- Date and time of your visit
Information from calculator tools
Our online mortgage calculators are designed to run calculations locally in your browser. We do not store the figures you enter into calculators unless you subsequently submit an enquiry form.
Some of our mortgage products — particularly enhanced lifetime mortgages — may involve discussion of health information. We will only collect health-related information with your explicit consent and handle it with additional care under Article 9 UK GDPR.
How we use your personal data
We use the personal data we collect for the following purposes:
| Purpose | Details |
|---|---|
| Responding to enquiries | To contact you following a form submission and discuss your mortgage requirements |
| Providing mortgage advice | To assess your circumstances and recommend appropriate mortgage products as a regulated adviser |
| Regulatory compliance | To fulfil our obligations as an FCA-regulated firm, including maintaining records of advice given |
| Improving our website | To understand how visitors use our site so we can improve content and user experience |
| Marketing communications | To send you relevant information about mortgage products or market updates — only where you have given consent or we have a legitimate interest |
| Fraud prevention | To protect against fraudulent activity and ensure the security of our systems |
We will never use your personal data for purposes incompatible with those described above, or sell it to third parties for their own marketing use.
Legal basis for processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
| Legal Basis | When we rely on it |
|---|---|
| Contractual necessity | Processing necessary to take steps at your request prior to entering into a contract, or to perform a contract — for example, to provide mortgage advice you have requested |
| Legal obligation | Where we are required to process data to comply with our regulatory obligations as an FCA-authorised firm, including record-keeping requirements under the FCA's rules (SYSC, MCOB) |
| Legitimate interests | Where we have a legitimate business interest that is not overridden by your interests — for example, to respond to your enquiry, prevent fraud, or improve our website |
| Consent | Where you have freely given specific, informed consent — for example, to receive marketing communications or for us to process health-related information in connection with enhanced mortgage products |
Where we rely on consent, you have the right to withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing that took place before withdrawal.
How long we keep your data
We retain personal data only for as long as necessary for the purposes for which it was collected, and to meet our legal and regulatory obligations.
| Type of data | Retention period | Reason |
|---|---|---|
| Enquiry records (no advice given) | 12 months | To follow up and for legitimate business purposes |
| Advice records (mortgage recommended) | 6 years minimum | FCA requirement under MCOB and general regulatory record-keeping rules |
| Mortgage application records | 6 years from end of mortgage term | Regulatory obligation and potential claims period |
| Marketing consent records | Until consent withdrawn + 12 months | To demonstrate consent was given |
| Website analytics data | 26 months (if Google Analytics) or per provider | Standard industry practice for trend analysis |
As an FCA-regulated mortgage adviser, we are required under the Mortgage Conduct of Business (MCOB) rules to retain records of advice given for a minimum of 3 years for standard mortgages and 6 years for lifetime mortgages and other equity release products. We cannot delete these records upon request during the mandatory retention period.
Your rights under UK GDPR
Under UK data protection law, you have a number of important rights regarding your personal data. These rights are summarised below.
📋 Right of access
You can request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one calendar month.
✏️ Right to rectification
If any data we hold is inaccurate or incomplete, you can ask us to correct it.
🗑️ Right to erasure
You can ask us to delete your personal data in certain circumstances. Note that regulatory retention obligations may limit this right.
⏸️ Right to restriction
You can ask us to restrict how we process your data — for example, while a complaint is being investigated.
📦 Right to portability
Where processing is based on consent or contract and is automated, you can request your data in a portable, machine-readable format.
🚫 Right to object
You can object to processing based on legitimate interests, or to direct marketing at any time — and we must stop immediately.
🤖 Automated decisions
You have rights in relation to automated decision-making and profiling. We do not make solely automated decisions that significantly affect you.
↩️ Withdraw consent
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
How to exercise your rights
To exercise any of your rights, please contact us in writing at:
[Your Company Name]
[Your Address]
[your@email.com]
We will respond within one calendar month of receiving your request. We may need to verify your identity before processing the request. There is no charge for exercising your rights in most cases.
How we protect your data
We take data security seriously and implement appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration or destruction.
These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our website (indicated by the padlock in your browser)
- Secure, password-protected access to any systems holding personal data
- Limiting access to personal data to those who genuinely need it to carry out their duties
- Regular review of our data security practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it, and will notify you directly where required.
Please note that the transmission of data over the internet is never completely secure. Whilst we do our utmost to protect your data, we cannot guarantee the security of information transmitted to our website.
Children's privacy
Our services are intended for adults aged 18 and over. The mortgage products we advise on — including lifetime mortgages which require applicants to be aged 55 or over — are not designed for or marketed to children.
We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us immediately at [your@email.com] and we will take steps to delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the services we offer. When we make changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you — for example, by placing a prominent notice on our website.
Your continued use of this website after any changes to this policy constitutes your acceptance of the updated terms.
How to raise a concern or complaint
If you have any concerns about how we handle your personal data, please contact us in the first instance:
[Your Company Name] · [your@email.com] · [Your Phone]
We will acknowledge your concern within 5 working days and aim to resolve it within 30 days.
If you are not satisfied with our response, or if you believe we are processing your data unlawfully, you have the right to lodge a complaint with the UK's supervisory authority:
| Authority | Information Commissioner's Office (ICO) |
| Website | ico.org.uk |
| Helpline | 0303 123 1113 |
| Post | ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
If your complaint relates to the financial advice we have provided (rather than data protection), please refer to our Complaints Procedure which sets out how to escalate to the Financial Ombudsman Service.