Your information, handled carefully and clearly

Personal data is information that identifies you, either directly or indirectly. This can include your name, contact details, date of birth, address and information about your financial circumstances.

In our role as a mortgage introducer, this may include:

• Name, date of birth, contact details, address and identity verification information.
• Employment status, broad income details and information about your deposit or borrowing needs.
• High-level information about your mortgage, protection or insurance requirements.
• Information needed to introduce you to a suitable FCA-regulated adviser.

We aim to collect only information that is relevant and necessary for our role as an introducer.

We process personal data under the lawful bases that apply to the purpose of the processing.

Contractual necessity

To take steps at your request, including handling your enquiry and introducing you to an FCA-regulated adviser.

Legitimate interests

To manage our business, respond to enquiries, keep suitable records, improve our services and support the adviser introduction process, provided your rights do not override those interests.

Legal obligations

To comply with applicable data protection, anti-fraud, record-keeping and compliance requirements.

Mortgage Bridge Ltd does not provide regulated mortgage or insurance advice.

In some cases, you may choose to provide information about health, medical history or criminal convictions. This is usually only relevant where an adviser or insurer needs the information to assess eligibility for a product.

We do not assess product suitability, provide regulated advice or make underwriting decisions based on this information. Where this information is collected, it is used only for the purpose explained to you and shared only where necessary.

Most of the information we use is collected directly from you. This may happen through:

• Online enquiry forms.
• Phone calls, emails, messages or other direct contact with us.
• Digital tools used to capture enquiry details.

We may also receive limited information from third parties where you have given permission, such as identity verification or credit referencing services used for pre-screening or verification purposes.

Your personal data is used to manage your enquiry and support the introduction process. It is:

• Stored securely on our systems.
• Accessed only by authorised personnel.
• Used to understand your enquiry and introduce you to a suitable FCA-regulated adviser where appropriate.
• Shared only where necessary to progress your enquiry, meet legal requirements or protect our business.

We may share your personal data with:

• FCA-regulated mortgage, protection or insurance advisers.
• Mortgage lenders and insurance providers, usually via the adviser handling your case.
• Conveyancers, legal service providers or other professional services where relevant to your enquiry.
• Credit reference agencies or verification providers for identity, fraud prevention or pre-screening purposes.
• Technology, hosting, CRM, email, analytics or administration providers who support our business systems.

We do not sell your personal data.

We may contact you about our services if:

• You have given explicit consent.
• You are an existing customer and the communication is relevant to the services you have used or asked about.

You can opt out at any time by using an unsubscribe link or contacting us directly.

We may use digital tools to help carry out basic pre-screening checks, such as whether an enquiry appears to meet broad lender or adviser criteria.

These checks do not constitute mortgage or insurance advice and are not a final lending or underwriting decision. You may request a manual review at any time.

Some of our technology or service providers may process data outside the UK. Where this happens, we use appropriate safeguards, such as adequacy arrangements, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses or other lawful transfer mechanisms.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

Personal data will generally be retained for a minimum of six years, or longer where required for legal, regulatory, compliance, dispute resolution or legitimate business purposes. We review the information we hold and keep it only for as long as we have a proper reason to do so.