Privacy and Fair Processing Notice

Everything you need to know about what we do with your personal data and how it's used by credit reference and fraud prevention agencies.

Meaning of words used in this document

  • you and your means each applicant and each person that has signed the mortgage application declaration and who is to be a borrower in respect of the mortgage advance that is the subject of the application;
  • we, us and our means The Mortgage Lender Limited (registered in England and Wales as company number 9280057) and anyone who at any time in the future is entitled (as legal, equitable or beneficial owner) to all or any of The Mortgage Lender Limited’s rights under any agreement with you (including as a result of a transfer);

About The Mortgage Lender and how to contact us

The Mortgage Lender Limited is registered as a data controller with the Information Commissioners Office (ICO) under registration number ZA136175

If you have any queries relating to our use of your personal information or any other related data protection questions, please contact by writing to:

Data Protection Officer
The Mortgage Lender Limited
Atrium Court
50 Waterloo Street
GLASGOW
G2 6HQ

Or by telephone 0344 257 0428

Our Privacy Commitment to you

Your privacy is important to us, so we commit to process any personal information you share with us with your privacy in mind.

Any personal information shared with us will always be processed in accordance with relevant laws and regulations and we will only use the personal information you provide to deliver the services you have requested, or for our lawful, disclosed purposes. We will not make your personal details available outside of our group without your consent, unless obliged by law. We will never sell or rent your name or personal information to any third party without your permission.

Types of data we collect & process

We will collect personal information, including sensitive information from your mortgage intermediary and other third parties, when you apply for a decision in principle or full mortgage application or when you, or a third party acting on your behalf contacts us to discuss an existing account.

The personal data you have provided, or we have received may include your;

  • Name
  • Date of birth
  • Residential address and address history
  • Contact details such as email address and telephone numbers
  • Financial information
  • Employment details
  • Identifiers assigned to your computer or other internet connected device, including your Internet Protocol (IP) address
  • The conduct of any existing or previous accounts you have with us, or applications you have submitted
  • Financial associate’s accounts (or anyone financially linked with you)
  • Business accounts (if you are an owner, director or partner in a business).

If you give us false or inaccurate information and we suspect or identify fraud we will record this and may also pass this information to fraud prevention agencies and other organisations involved in crime and fraud prevention.

When you visit our website, we will use cookies to distinguish you from other users to help us provide you with a good experience when you browse our website and to help us improve our site. To find out more about our use of cookies, please read our cookie policy available from our website: www.themortgagelender.com

Data we receive from and share with third parties

In order to process your application, we will also perform credit and identity checks on you with one or more credit reference agency (“CRAs”). When you have mortgage with us we may also make periodic searches at CRAs to manage your account.

To do this, we will supply your personal information to CRAs and they will give us information about you. This will include information from your credit application and about your financial situation and financial history. CRAs will supply to us both public (including the electoral register) and shared credit, financial situation and financial history information and fraud prevention information.

How we use this data

The information we collect and share will help us to;

  • assess this and further applications from you or other members of your household for this and other products and services and to make decisions on questions about any such application(s), agreement or correspondence which you may have with us;
  • make lending decisions, to process mortgage applications, to obtain references and to administer mortgage accounts;
  • verify the accuracy of the data you have provided to us;
  • provide the services requested and manage the relationship between us;
  • process, obtain and check other information, manage your account and administer any product or services that we provide you with or at your request;
  • perform obligations or exercise rights that we may have under any agreement with you;
  • trace and recover debts;
  • undertake market research, statistical and business analysis and create and maintain a customer profile;
  • prevent, detect, prosecute or mitigate the consequences of fraud and money laundering or other crimes, trace debt and recover debt and comply with applicable law and regulations.
  • contact HM Revenue and Customs, Department for Work and Pensions, any lender, landlord, employer or professional adviser named on an application, to obtain information or confirm any income received, outstanding liabilities and payments made.

When we and the third parties we may share your data with, process this data, we do so on the basis that it is necessary for us to enter into or manage a contract with you. We also have a legitimate interest in preventing fraud and money laundering, and to verify identity in order to protect our business and to comply with laws that apply to us.

What credit reference agencies do when they receive a search from us:

When CRAs receive a search from us they will place a search “footprint” on your credit file whether or not this application proceeds. If the search was for a credit application the record of that search (but not the name of the organisation that carried it out) may be seen by other organisations when you apply for credit in the future.

The CRA will link together the records of you and anyone that you have advised us is your financial associate including previous and subsequent names of parties to the account. Links between financial associates will remain on your and their files until such time as you or your partners successfully files for a disassociation with the credit reference agencies.

Your data may also be used by us or other third parties to offer you other products, but only if you have given your permission.

The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail in the Credit Reference Agency Information Notice (CRAIN). You can obtain this from each of the three CRAs  using the links below;

We will continue to exchange information about you with CRAs and Fraud Prevention Agencies, (if we determine that you pose a fraud or money laundering risk)  while you have a relationship with us. We will also inform the CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs.

If you are making a joint application or tell us that you have a spouse or financial associate, we will link your records together, so you should make sure you discuss this with them and share with them this information, before lodging the application.

Other Third parties who we may share your data with

We may also disclose your personal information to:

  • external Auditors, regulatory bodies and relevant authorities or bodies who have a legal right to access the information or whom you authorise us to give information to, including the Financial Ombudsman Service, The Prudential Regulation Authority and The Financial Conduct Authority;
  • our funding partners;
  • our Insurers;
  • intermediaries or specialist distributers including mortgage clubs who send us applications or who you appoint in connection with any application to us;
  • agents or third party contractors we appoint to administer or operate your account, including any person who may replace us in the administration of your account;
  • solicitors and valuers acting for us;
  • Field agents and tracing agents;
  • HMRC and the Department for Work and Pensions;
  • providers of information technology and communication services;
  • Data Processors who act on our behalf or on behalf of any person who may be the beneficial owner of your loan; and
  • market research organisations, for the purposes of confidential market research conducted on behalf of us.

We, and the third parties we share your data with, may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

Sending Data outside of the EEA (European Economic Area)

The Mortgage Lender Limited will not transfer any information about you outside of the EEA, however some of the third parties named above may do so when completing tasks necessary for the performance of our contract. Where this is necessary we will put in place a contract with them that means they must protect your data to the same standards as required in the EEA.

How long will we keep your personal data?

If you have a mortgage with us, we will keep your personal data for as long as you are our customer, and for up to 10 years after you are no longer a customer.

If you have applied for a mortgage with us or have had a mortgage with us in the past we may keep your data for up to 10 years.

We keep this data so that we can:

  • Respond to any questions or complaints;
  • Show that we treated you fairly;
  • Maintain records according to rules that apply to us.

In some circumstances we may need to keep your data for longer than this, for example, if there are legal, regulatory or technical reasons. If we do, we will make sure that your privacy is protected and only use it for legitimate purposes.

Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years by them.

Automated decision making, profiling

We may use our systems to make automated decisions based on the personal data we have about you or your business. This helps us to make quick, fair and accurate decisions, based on what we know.  These can affect the products we can offer you.

Our automated decisions may determine that you pose a fraud or money laundering risk if our processing reviews your behavior to be consistent with that of known fraudsters or money launderers, is inconsistent with your previous submissions, or if you appear to have deliberately hidden your true identity.

You can ask us that we do not make our decisions based on the automated system alone or, if you are unhappy with an automated decision, you can ask that a person reviews this. If you would like this reviewed, you should contact your Mortgage Intermediary in the first instance.

Other consequences of Processing

If we or one of the third parties we share data with, determine that you pose a fraud or money laundering risk, we may refuse to provide the services, goods or financing you have requested, or to employ you, or we may stop providing existing services to you.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us using the details at the start of this notice.

Additional Information for Intermediaries

By registering with us to use our mortgage portal, we will process your personal information and other information available to manage your relationship with us, to prevent and detect fraud, to comply with legal and regulatory requirements and for market research.

Any personal information will only be used to remove duplicate records from our database and to link you to your firm (and your network if applicable) and any specialist distributers (packagers) or mortgage clubs that you are associated with. These personal details will be treated as confidential.

By registering a case with us, an intermediary is agreeing on behalf of the applicant(s) to the use of their personal information, including any sensitive personal information. Make sure you understand how we make use of applicant’s personal information together with the specific information you provide as part of the application and that the information provided is accurate.

Your Rights

Under General Data Protection Regulation, you have certain rights to access the information we hold, to ask us to correct personal information that is wrong or incomplete and, in some circumstances, ask us to stop using or to delete your personal information. You can access the personal information we hold by writing to us, at the address given at the start of this notice.

Contacting us

All communications with us may be monitored or recorded to improve the quality of our service, staff training and for your protection and security.

Ordinary email is not secure, and it may pass through servers in countries without data protection laws. For your own protection, we request that you do not include confidential or personal information in any emails you send to us.

If you are unhappy about how your personal data has been used please refer to our complaints policy www.themortgagelender.com/customer-documents/

You also have a right to complain to the Information Commissioner’s Office www.ico.org.uk  which regulates the processing of personal data.

 

We recommend that you check this page regularly, as from time to time we will review and update these policies. Any changes we make to the policies published here will be effective immediately.