How I will handle your personal data and protect your privacy.
A guide to how I meet the requirements of the Data Protection Act.


Making sure personal data is secure and properly dealt with is of paramount importance in our dealings with you. It is therefore important you understand what information I will take, why I need it, and how I will process your details.

Who will process my data?
The Mortgage Family is an appointed representative of HL Partnership Limited which is authorised and regulated by the Financial Conduct Authority. As such, both The Mortgage Family and HL Partnership Limited will process your data in order to provide our services.

What data will you ask me for?
In order to fully understand your financial needs and be able to give good advice, I need to obtain information about you, your family, your personal circumstances, and your preferences. Some of the information will be private and may be sensitive, such as details of your income and expenditure, health, debts and credit commitments, legal proceedings and adverse credit. Much of the information you provide will need to be passed on to the companies whose products you apply for.

Do I have to provide my personal data?
In order for us to be able to give you suitable advice, I need you to provide all the information I ask for as openly and honestly as possible. If you prefer not to disclose some information, please tell us that you prefer not to disclose it and I will assess whether this will alter or impede the work I are doing for you.

How will you use my data?

● The primary reason I will use your data is to allow us to do the job you’ve asked us to do. Specifically, I will use your data to:

  • Assess and provide advice to meet your needs and circumstances;
  • Introduce you to a range of product and service providers in order to meet your requirements;
  • Administer cases and assist processing of applications;
  • Tell you about any changes to products and service I have arranged for you;
  • Inform you about products and services I think may be suitable for you (unless you ask us not to send you this information).

●  I may also process your information in order to meet our legal and regulatory requirements. These may include:

  • Complying with the regulations set out by the Financial Conduct Authority and other regulators as required;
  • Preventing financial crimes such as money laundering and fraud by passing your details to other relevant bodies such as the police and National Crime Agency where required.

● I may also process your personal data for our own legitimate interests. Typically, these would be limited to:

  • Analysing our business for trends and research how I can improve our services to customers;
  • Reviewing the work I have carried out for you to ensure I have met the regulations and quality standards;
  • Ensuring I am able to exercise or defend legal challenges in the future.

●   HL Partnership Limited will use your data to monitor and assess our work to ensure we have provided a high standard of service and met our legal and regulatory commitments.

How long I will store your data?
I will only keep your personal information as long as necessary. How long that is depends on the type of data and the nature of the work I have carried out. In most cases, your personal data will be stored for an indefinite period as I need to keep evidence that I have fulfilled our legal and regulatory requirements.

Can I see a copy of my personal data?
Yes. Please write to our Data Controller (details below) and I will provide a copy of any personal data I hold about you within one calendar month of receiving your request. Please note that I may need to verify your identity before providing the information.

What if my data is incorrect or incomplete?
You have the right to have your data corrected or completed by contacting our Data Controller in writing (details below). Please be aware that I need to maintain records of information as it was at the time of the advice or the transaction taking place.

Can I have my data erased?
If I have provided you with advice or processed a transaction on your behalf, I will not normally be able to erase your personal data. This is because I are obliged to maintain records of our advice and transactions to meet our regulatory requirements and in case I need to exercise or defend legal claims in future.

Who is the Data Controller?

Name Your Data Controller Name Mark Bostock
Address Your address & post code 1st Floor Court Building, Alexandria Business Park, Prescot Road, St Helens, Merseyside WA10 3TP
Telephone Your Phone Number 0330 912 2520
Email Your Email Address
Data Controller Registration Your ICO Registration No ZA827609


How can I get more information?
If you would like further details on how I use your personal information or if you have any data protection queries, please write to:

The Data Protection Officer, HL Partnership Limited, 6 Merus Court, Meridian Business Park, Leicester, England, LE19 1RJ

Telephone: 03300 552651

If you’d like to make a complaint about how I have handled your personal data…
…please write in the first instance to The Data Protection Officer at the above address.

If you are not satisfied with the Data Protection Officer’s response, you can make a complaint to:

Important Notes on Protecting your own Data
Please be aware of cybercrime and protecting your own information online, particularly financial information. Do not send unsecure personal information over the internet. I recommend you use encryption software or provide any information to us using the online tools I provide.

Do not respond to emails asking you to pay money. Never make a payment purely in response to an email. Always call the company to validate any payment requests and check the phone number independently from the email (i.e. via a secure web site). If you receive a phone call asking for payment ensure you are satisfied the call is genuine, or else call the company back to check. Neither The Mortgage Family nor HL Partnership will take responsibility if you transfer money to a fraudster in error.