Because of the nature of our role as a mortgage broker, we share the personal information you give us with people who need to handle it so that we can provide our services to you.
Here are the organisations that we may share your personal information with:
To fulfil our contractual obligations, we'll also share your personal data with the following third parties:
To help you benefit from the services of our specialist partners we may also share your personal data with the following organisations, but only with your consent:
If you no longer wish us to share your data with any of these organisations, you may withdraw your consent at any time.
We'll also share your personal data with the following data processors where necessary to fulfil our services and regulatory obligations:
If you were introduced to us by a 3rd party, we may update them about how your enquiry with us is progressing.
AT mortgages is based exclusively in the UK. Our main databases are in the UK solely. This means any personal information we access from or transfer to these locations is protected by European data protection standards.
Under Data Protection regulations individuals have a number of rights. These are as follows:
Right to be informed
Individuals have the right to be informed about the collection and use of their personal data.
Right of access
Individuals have the right to access their personal data and supplementary information. Individuals have the right to obtain:
We will not charge for initial requests to provide information, but may charge a fee if requests for further copies of the same information are made. We will provide the requested information to you within a month of receiving your request, unless the request is complex or numerous in which case we may extend this period by up to a further two months.
Where a request is manifestly unfounded or excessive, particularly if it is repetitive we may charge a fee to provide the information requested or refuse to respond. In these instances, we will inform you and explain our reason.
Before we proceed with any request, we will take steps to verify the identity of the person making the request.
Right to rectification
Individuals have the right to request that inaccurate personal data is rectified, or completed if it is incomplete. If you make such a request, we will takes steps to verify whether the data is accurate. Where we accept that the information is inaccurate, we will take steps to rectify it. If we believe that the information is accurate and does not require rectification we will notify you and explain our reason.
Where a request is manifestly unfounded or excessive, particularly if it is repetitive we may charge a fee to rectify the information or refuse to deal with the request. In these instances, we will inform you and explain our reason.
Right to erasure (known as the "Right to be forgotten")
Individuals have the right to have their personal data erased if:
As an example, we are regulated by the FCA and are required to retain records that demonstrate the advice we provide to our customers. These records contain personal information and data that enables us to formulate our advice. We will not remove or delete any personal information or data until such time as our regulatory obligation has been fulfilled in respect of each transaction or piece of advice.
Where a request is manifestly unfounded or excessive, particularly if it is repetitive we may charge a fee to remove the information or refuse to deal with the request. In these instances, we will inform you and explain our reason.
Right to restrict processing
Individuals have the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organisation uses their data in the following circumstances:
If you choose to exercise this right, we may not be able to proceed with a transaction or provide you with our advice. This may mean that we are unable to submit or progress an application with a lender or product provider. In these instances we will notify you of the impact your request.
Where a request is manifestly unfounded or excessive, particularly if it is repetitive we may charge a fee to restrict the information or refuse to deal with the request. In these instances, we will inform you and explain our reason.
Right to data portability
The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services. The right to data portability only applies:
Right to object
Individuals have the right to object to:
If you exercise your right to object, we will stop processing your personal data unless:
You can exercise your right to object at the first point of contact with us or at any other time by contacting us a detailed below. If exercising your right to object affects or prevent us from being able to provide you with one or any of the services we offer we will inform you.
Automated decision making including profiling
Sometimes it is necessary for us to approach a lender to obtain an initial decision for a mortgage (often referred to as a Decision in Principle – DIP). To obtain a DIP we may process your personal information through a lender's automated decision making system which will provide an initial lending decision based on logic/algorithms programmed in to it. We will always gain your consent before completing a DIP. Whilst we don't set or determine the logic/algorithms used in the automated decision system, we can put you in touch with the respective lender should you require it.
To exercise any of your rights detailed above you can contact us as detailed below:
Data Protection Officer
AT mortgages, 19A London Road, Southampton, Hampshire, SO15 2AE
Call: 02380 420701
We take the privacy of your personal information very seriously. If you ever feel you need to complain about how we've handled your personal information and data you can contact us as follows:
AT mortgages, 19A London Road, Southampton, Hampshire, SO15 2AE
Call: 02380 420701
If your complaint is about the administration, or terms and conditions of a product sold by us but provided by a lender/insurer, you may need to contact them about it. If needed, we'll forward details of your complaint to the insurer concerned, as well as giving you their contact details.
To help make sure you always speak to the right person about your complaint, if it looks like another company will be better able to handle your case, we'll let you know how to contact them.
If you're still unhappy with any aspect of how we handle your personal information, you also have the right to contact the Information Commissioner's Office (ICO). The ICO is the UK's independent body set up to uphold information rights. You can contact it as follows:
Via its website: https://ico.org.uk
Information Commissioner's Office
Call: 0303 123 1113
We at AT mortgages, we understand how important it is to keep your personal information secure. We use a variety of technologies and procedures to protect your private data from being accessed, used or disclosed in any way it shouldn't be. The security arrangements we've put in place include physical, organisational, and technological measures and controls. Together, they help to protect the personal information we hold from risks including:
We regularly review our policies and procedures to make sure they remain relevant.
As explained in "How do we use your personal information", we use third parties to help us run our business. To fulfil our contractual obligations, we may share your personal data with these third parties. We require every third party that we share information with to maintain adequate security safeguards and comply with all the required laws and standards for protecting personal information.
We'll keep your personal information securely stored for as long as we need it to provide you with the services you want from us. We also keep it to comply with our legal and regulatory obligations, as also to help us to resolve any issues or disputes that may arise.
Depending on what information we hold and what products or services you are signed up to, we may need to retain certain details for longer than others. In every case, we regularly reassess whether we need to hold your personal information and securely dispose of any information that we no longer need.