Legal
Privacy Policy
Effective under UK GDPR and the Data Protection Act 2018.
Who we are
Apex Mortgage Advisory, 1 Kingsway, London WC2B 6AN, United Kingdom, is the data controller for the personal data described here. We are registered with the Information Commissioner's Office (registration ZA XXXXXXX).
What we collect
- Identity and contact details: name, email, phone, address history
- Financial data: income, outgoings, credit commitments, deposit and property details
- Employment data: status, employer or trading details
- Documents you upload: payslips, bank statements, identity documents
- Technical data: IP address and essential cookie data
Lawful bases
- Contract: to provide mortgage advice you have requested
- Legal obligation: anti-money-laundering and FCA record-keeping
- Consent: credit reference searches and optional marketing
- Legitimate interests: service improvement and fraud prevention
Who we share data with
Mortgage lenders and insurers you apply to, our principal FCA network, credit reference and fraud prevention agencies, conveyancers where you instruct us, and our regulated technology suppliers acting as processors under written agreement. We never sell your data.
Retention
Advice records are retained for a minimum of six years after our relationship ends, in line with FCA and anti-money-laundering requirements. Enquiries that do not proceed are deleted after 24 months.
Your rights
You have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. Email hello@apexmortgages.co.uk and we will respond within one month. You may also complain to the ICO at ico.org.uk.
Security
Documents you upload are held in private, encrypted storage accessible only to you and your adviser, protected by row-level access controls and transport encryption.