Legal

Privacy Policy

Effective under UK GDPR and the Data Protection Act 2018.

Who we are

Apex Mortgage Advisory, 1 Kingsway, London WC2B 6AN, United Kingdom, is the data controller for the personal data described here. We are registered with the Information Commissioner's Office (registration ZA XXXXXXX).

What we collect

  • Identity and contact details: name, email, phone, address history
  • Financial data: income, outgoings, credit commitments, deposit and property details
  • Employment data: status, employer or trading details
  • Documents you upload: payslips, bank statements, identity documents
  • Technical data: IP address and essential cookie data

Lawful bases

  • Contract: to provide mortgage advice you have requested
  • Legal obligation: anti-money-laundering and FCA record-keeping
  • Consent: credit reference searches and optional marketing
  • Legitimate interests: service improvement and fraud prevention

Who we share data with

Mortgage lenders and insurers you apply to, our principal FCA network, credit reference and fraud prevention agencies, conveyancers where you instruct us, and our regulated technology suppliers acting as processors under written agreement. We never sell your data.

Retention

Advice records are retained for a minimum of six years after our relationship ends, in line with FCA and anti-money-laundering requirements. Enquiries that do not proceed are deleted after 24 months.

Your rights

You have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. Email hello@apexmortgages.co.uk and we will respond within one month. You may also complain to the ICO at ico.org.uk.

Security

Documents you upload are held in private, encrypted storage accessible only to you and your adviser, protected by row-level access controls and transport encryption.

Your home may be repossessed if you do not keep up repayments on your mortgage.