hello@united-mortgages.com
0203 451 7973
Privacy Policy
Your privacy matters to us
Introduction
United Mortgages™ are an introducer of Mainly Mortgages Ltd T/A Goocho Mortgages who are authorised and regulated by the Financial Conduct Authority: FCA Register Number: 923399.
This privacy policy explains how we collect, use, and protect your personal information when you use our services, including our website and online application forms. We are committed to ensuring your privacy is protected and that we comply with all applicable data protection laws including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Mainly Mortgages Ltd
ICO Registration: ZA124100
Last Updated: February 2026
What Data We Collect
To provide you with our mortgage services, we may collect the following information:
Personal Details
- Full name and title
- Date of birth
- Contact information (email, phone)
- Address history (current and previous)
- National Insurance number
- Marital status
- Nationality
- Electoral register status
- Number and ages of dependents
Financial Information
- Income and employment details
- Employer information and address
- Self-employment financials
- Bank account information
- Credit history and issues
- Existing loans and commitments
- Credit card balances and payments
- Deposit amount and source
- Assets and liabilities
Property Details
- Current property information
- Desired property details
- Mortgage requirements
- Property valuation information
- Purchase type (first-time buyer, remortgage, etc.)
Online Application Forms & Data Processing
When you complete our online Agreement in Principle (AIP) or mortgage application forms, we collect and process your data through secure digital systems:
💾 Form Data Storage
Information submitted through our online forms is securely transmitted and stored in our customer relationship management (CRM) system, HubSpot. HubSpot is a certified data processor that complies with UK GDPR and provides enterprise-level security for your data.
🔄 Automatic Data Processing
When you submit an online form, your data is automatically processed through our secure backend systems hosted within the EU. This processing includes:
- Validation and formatting of your information
- Creation of your client record in our CRM
- Association of joint applicant records (where applicable)
- Secure transmission of data to relevant third parties
🍪 Draft Saving & Browser Storage
To improve your experience, our online forms may temporarily store draft information in your browser's local storage. This allows you to return to a partially completed form without losing your progress. This data:
- Remains stored only on your device
- Is not transmitted to our servers until you submit the form
- Can be cleared by clearing your browser data
- Is automatically removed once you submit the form
🔗 Third-Party Form Services
Some of our forms may be hosted through HubSpot's form infrastructure. When using these forms, you are also subject to HubSpot's privacy policy. HubSpot acts as a data processor on our behalf and processes your data only according to our instructions.
Important: Once you click "Submit" on any of our online forms, your data will be processed according to the terms outlined in this privacy policy. Please ensure you have read and understood this policy before submitting your application.
How We Use Your Data
We process your personal data under the following legal bases as defined by UK GDPR:
📋 Contract Performance
We use your data to provide mortgage advice, process applications, and fulfill our services to you. This includes:
- Assessing your eligibility for mortgage products
- Submitting applications to lenders on your behalf
- Managing your client relationship throughout the application process
- Providing ongoing advice and support
⚖️ Legal Obligations
We process data to comply with anti-money laundering regulations, FCA requirements, and other legal obligations including:
- Identity and address verification
- Credit reference checks
- Regulatory reporting requirements
- Record-keeping for compliance purposes
✅ Legitimate Interests
We may use your data to improve our services, prevent fraud, and maintain business records, including:
- Analyzing application trends to improve our service
- Detecting and preventing fraudulent applications
- Maintaining accurate business records
- Internal quality control and training
📧 Marketing Communications (Consent)
With your explicit consent, we may use your contact information to send you:
- Newsletters and market updates
- Information about new products and services
- Invitations to events or webinars
You can withdraw your consent at any time by clicking "unsubscribe" in any marketing email or contacting us directly.
Who We Share Your Data With
To provide our services, we may share your information with:
Data Transfers: Some of our service providers may be located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK Government
- Adequacy decisions recognizing equivalent data protection
- Binding Corporate Rules for group companies
We never sell your personal data to third parties for marketing purposes.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your data in certain circumstances
Right to Restrict
Request limitation of processing in specific situations
Right to Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for marketing
Important Limitations: These rights are not absolute. In some circumstances, we may need to retain your data to:
- Comply with legal obligations (e.g., FCA record-keeping requirements)
- Establish, exercise, or defend legal claims
- Complete a contract you have with us
If we cannot fulfill a request, we will explain why.
To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.
Data Security & Retention
🔒 How We Protect Your Data
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption: All data transmitted through our online forms is encrypted using industry-standard SSL/TLS protocols
- Secure Storage: Data is stored in secure, EU-based data centers with enterprise-grade security
- Access Controls: Only authorized personnel have access to your data, with role-based permissions
- Regular Audits: We conduct regular security assessments and vulnerability testing
- Staff Training: All staff receive regular training on data protection and security
- Multi-Factor Authentication: Our systems require multi-factor authentication for access
- Backup & Recovery: Regular backups ensure data can be recovered in case of system failure
📅 How Long We Keep Your Data
We retain your personal data in line with FCA requirements and our legitimate business needs:
- Active client records: Duration of our relationship plus 6 years
- Completed mortgage records: 6 years from completion of mortgage
- Declined applications: 6 years from application date
- Marketing preferences: Until you withdraw consent, or 3 years of inactivity
- Complaint records: 6 years from resolution
- Identity verification documents: 6 years from verification
- Draft form data (browser storage): Until you clear browser data or submit the form
After the retention period, personal data is securely destroyed or anonymized for statistical purposes. Anonymized data does not identify you and may be retained indefinitely for business intelligence.
Data Breaches: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.
Contact Us
If you have any questions about this privacy policy, how we handle your data, or wish to exercise your data protection rights, please contact us:
Data Protection Queries
📧 privacy@united-mortgages.com
📞 0203 488 9773
✉️ United Mortgages, [Your Address]
When contacting us about your data, please include your full name and the email address you used when applying for our services to help us locate your records.
Supervisory Authority
If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
🌐 ico.org.uk/make-a-complaint
📞 0303 123 1113
✉️ Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to This Policy: We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
Have Questions About Your Privacy?
Our team is here to help you understand how we protect your data
Contact Our Team