1. Who We Are

Mortgage Int Ltd ("we", "us", "our") is the data controller for personal data collected through this website. We are registered in England and Wales (Company No. 06489829) and are an appointed representative of The Right Mortgage Limited, which is authorised and regulated by the Financial Conduct Authority (FCA Ref: 478810).

2. Data We Collect

We may collect the following types of personal data:

Identity data: first name, last name
Contact data: email address, telephone number, postal address
Financial data: information about your income, employment, and property requirements (provided by you when seeking mortgage advice)
Identity documents: copies of passports, bank statements, payslips, SA302 tax returns, and credit reports uploaded via our Agreement in Principle application form
Technical data: IP address, browser type, pages visited, time and date of visit (via cookies and analytics)
Communications data: records of correspondence with us by phone, email or web form

3. How We Use Your Data

We use your personal data for the following purposes:

To provide mortgage advisory and brokerage services you have requested
To contact you following an enquiry submitted via our website
To comply with our regulatory obligations as an FCA regulated firm
To improve our website and services
To send you relevant service updates (you may opt out at any time)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Consent (Article 6(1)(a)): where you have given explicit consent, such as submitting an enquiry form or uploading identity and financial documents via our AIP application
Contract performance (Article 6(1)(b)): where processing is necessary to provide the mortgage advisory services you have requested
Legitimate interests (Article 6(1)(f)): to operate and improve our business services
Legal obligation (Article 6(1)(c)): to comply with FCA regulatory requirements and record-keeping obligations

5. Data Sharing

We may share your personal data with:

Mortgage lenders and product providers when arranging mortgage products on your behalf
The Right Mortgage Limited, our network, for compliance and regulatory oversight
Credit reference agencies as required in the mortgage application process
Our service providers (e.g. IT, CRM systems) under appropriate data processing agreements

We do not sell your personal data to third parties.

6. Cookies

We use cookies on our website to enhance your experience and analyse site usage. Please see our Cookie Policy (accessible via the cookie banner) for full details. You can manage your cookie preferences at any time.

7. Document Storage & Security

Documents uploaded via our Agreement in Principle application (such as passports, bank statements, payslips, and credit reports) are:

Transmitted over HTTPS (TLS encryption in transit)
Stored in a private, encrypted storage system hosted within the EU (AWS eu-west-1, Ireland)
Accessible only to authorised Mortgage International staff and never publicly accessible
Not shared with any third party except mortgage lenders as necessary to process your application, and only with your knowledge
Retained for 6 years after your case closes in accordance with FCA record-keeping requirements (SYSC 9), then securely deleted

You may request deletion of your uploaded documents at any time by emailing admin@mortgageinternational.co.uk. Where deletion conflicts with FCA record-keeping obligations, we will explain why and restrict processing instead.

8. Data Retention

We retain personal data for as long as necessary to provide our services and comply with regulatory obligations. FCA regulated firms are required to retain mortgage advice records for a minimum of 6 years (SYSC 9.1.1R). Identity documents and financial evidence submitted as part of a mortgage application are retained for the same period. After this period, data is securely deleted from all systems including backups.

9. Your Rights

Under UK GDPR, you have the following rights:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate data
Right to erasure: to request deletion of your data (subject to regulatory requirements)
Right to restrict processing: to request we limit how we use your data
Right to data portability: to receive your data in a portable format
Right to object: to object to processing based on legitimate interests
Right to withdraw consent: at any time where processing is based on consent

To exercise any of these rights, contact us at info@mortgageinternational.co.uk.

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.