Privacy Notice

Last Updated : 07-04-2026

This Privacy Notice explains how The Right Mortgage & Protection Network (and its appointed representatives) collect and use your personal information when providing mortgage, secured lending and insurance advice.

The type of personal information we collect

We currently collect and process the following categories of personal data:

• Personal identifiers, contacts and characteristics (for example, name and contact details).
• Financial information (for the purpose of combating fraud and complying with anti-money laundering obligations).
• Health and medical information (for the purpose of providing insurance advice).
• Property information (for the purpose of mortgage underwriting).
• Credit reference information (for the purpose of identity and address validation).

Further details of information collected by our website can be found in our Privacy and Cookies Policy.

How we obtain personal information and why we have it

Most of the personal information we process is provided directly by you to one of our Appointed Representatives for one of the following purposes:

• Mortgage advice, assessment/qualification and underwriting.
• Insurance advice, assessment/qualification and underwriting.

This information is processed primarily on a contractual basis to enable us and our Appointed Representative Firms to provide mortgage and protection advice services.

In order to validate your identity and/or residential address, we may carry out what is known as an Enquiry Search with a credit reference agency. This will leave what is often referred to as a “soft footprint” on your credit file. This is not visible to lenders and does not impact your credit score.

We also receive personal information indirectly from third parties in the following circumstances:

• Lenders – to assist in providing advice, arranging lending products, and servicing our customers.
• Insurers – to assist in providing advice, arranging insurance products, and servicing our customers.

We use this information in order to provide you with regulated mortgage and/or insurance advice.

Who we share your information with

We may share your information with:

• Lenders (the specific lenders approached will be disclosed to you during the advice process).
• Insurance companies (the specific insurers approached will be disclosed to you during the advice process).
• The Financial Conduct Authority (for regulatory purposes).
• The Information Commissioner’s Office, National Crime Agency, and other law enforcement bodies (where legally required).
• Customer Relationship Management and Product Sourcing Systems used in the day-to-day processing of your data.

Sub-Processors

We use Acre, a third-party provider of customer relationship management and product sourcing technology, as a data sub-processor. This means that Acre processes personal information on our behalf and under our strict instructions. Acre provides the secure electronic platform through which your data is stored, managed, and used to source mortgage and insurance products.

We have a data processing agreement in place with Acre that requires them to:

• Only process your personal information in accordance with our written instructions.
• Maintain appropriate technical and organisational security measures.
• Support us in fulfilling your data subject rights.
• Assist with audits and regulatory compliance.
• Ensure that any of their own sub-processors are subject to equivalent obligations.

Lawful basis for processing

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on are:

• Contractual obligation – where processing is necessary to provide you with advice and arrange products.
• Legal obligation – where processing is required under regulatory or statutory duties (e.g., anti-money laundering).
• Legitimate interest – where processing is required for the effective running of our business in a way that does not override your rights and freedoms.

How we store your personal information

Your personal information is securely stored in electronic format using our sub-processor Acre’s customer relationship management system and product sourcing technology. Acre ensures encryption, restricted access, and industry-standard safeguards to protect your data.

We keep personal information only for as long as is necessary to fulfil our regulatory and legal responsibilities. This includes retaining information for the period during which you can bring a complaint or for as long as we are subject to anti-money laundering retention requirements. After this period, your information is permanently deleted.

Your data protection rights

Under data protection law, you have certain rights; including:

• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at dpo@therightmortgage.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at dpo@therightmortgage.co.uk.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: www.ico.org.uk