Privacy Policy

1. Regulatory Framework & Data Controller

Austin Friars Financial Services LLP ("we", "us", "our") is committed to protecting and respecting your personal data. This privacy notice explains how we collect, store, process, and protect your information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Data Controller is Austin Friars Financial Services LLP, registered in England and Wales under partnership registration OC419618, with our registered office at 23 Austin Friars, London, EC2N 2QP. We are authorized and regulated by the Financial Conduct Authority (FCA).

2. Information We Collect

To provide professional mortgage intermediation and insurance advisory services, we collect:

• Standard Personal Data: Full name, date of birth, residential address history, contact telephone numbers, email address, nationality, marital status, and dependents.
• Financial Profile: Employment history, earned income, bonus structures, bank statements, existing mortgages, debt liabilities, tax returns (SA302s), and credit history reports.
• Special Category Data: Health history, medical records, and family health disclosures required solely for underwriting life assurance, critical illness cover, and income protection.

3. Lawful Bases for Processing

We process your data strictly under recognized legal bases:

• Performance of a Contract: Sourcing and submitting mortgage and protection applications on your instruction.
• Compliance with Legal Obligations: Meeting FCA statutory rules, anti-money laundering (AML) audits, and identity verification mandates.
• Explicit Consent: Explicit consent is secured prior to processing any special category medical information for insurance underwriters.

4. Data Sharing & Third Parties

We never sell or rent your personal data. We only share information with authorized third parties strictly required to deliver your financial services: selected mortgage lenders, insurance underwriters, compliance auditors, conveyancing solicitors, credit reference agencies, and regulatory bodies (FCA, HMRC, National Crime Agency).

5. Data Retention & Your Legal Rights

Under FCA regulatory obligations, mortgage and financial advisory records must be retained for minimum statutory periods (often between six years and the lifespan of the loan product).

You have the right to request access to your personal data (Subject Access Request), request rectification of inaccuracies, request restriction of processing, or lodge an inquiry with the UK supervisory authority: