- Introduction
At Apex Mortgage and Protection Ltd. (“Apex”, “we”, “our”), we are committed to protecting your personal data and handling it with transparency, integrity, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This privacy statement outlines how and why we collect, use, store, and share your personal data, as well as your rights in relation to that data.
- Data Controller
Apex Mortgage and Protection Ltd. is the Data Controller for the personal information you provide. We may process your data directly or through our network partner, Stonebridge Group, where applicable.
- What Data Do We Collect and Why?
To provide appropriate mortgage, protection, and financial advice, we may collect the following types of personal data:
- Identity data (e.g., name, date of birth)
- Contact data (e.g., phone number, email, address)
- Financial and employment data
- Details of your enquiry or request
We use your data for the following purposes:
- To contact you and respond to your enquiry or request
- To provide financial services including mortgage, loan, and protection advice • To liaise with third parties such as lenders, insurers, credit reference agencies, or compliance bodies
- To comply with regulatory obligations (e.g., FCA oversight, fraud prevention)
Our lawful basis for processing your data is our legitimate interest in running our business, fulfilling contractual obligations, and complying with legal requirements.
- Who Will Your Data Be Shared With?
Your data may be shared with the following third parties:
- Mortgage lenders, insurers, and related financial service providers • Credit reference agencies or your employer/accountant (for verification purposes)
- Our CRM and software providers (e.g., to manage your file securely) • Stonebridge Group and the Financial Conduct Authority (FCA) for compliance monitoring
All third parties are contractually bound to handle your data securely and only for the specified purpose.
- Communication Preferences
If you provide an email address, you consent to being contacted by email. While we take appropriate steps to secure email communications, you acknowledge the inherent risks of this method.
- Special Category Data (Sensitive Personal Data)
To support certain insurance applications, we may need to process health-related information. This data will only be collected with your explicit consent and will be handled with strict confidentiality. You may also have the option to provide such data directly to the insurer.
- Data Storage and Location
Your data is processed and stored by staff in the UK. Some data may be held in secure, UK-based cloud systems. Access to your data is restricted to authorised personnel.
- Data Retention
We will retain your personal data for a minimum of six (6) years after the end of our business relationship or longer if legally required. The relationship is considered concluded when all related mortgage or insurance products have ended.
- Marketing and Staying in Touch
We’d like to keep in touch about relevant financial products or services. We’ll only do so:
- With your express consent
- For up to five (5) years unless renewed
You can change or withdraw your marketing preferences at any time. 10. Your Rights
You have the right to:
- Access your data
- Request correction of inaccurate or incomplete data
- Request erasure of data under certain conditions
- Object to or restrict processing
- Request data portability in a structured, electronic format
- Withdraw consent for special category data
- How to Complain
If you’re concerned about how your personal data is handled, you can contact: • Complaints Email: complaints@stonebridgegroup.co.uk
If unsatisfied with the response, you may escalate the matter to the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns
By providing your data, you confirm you have read and understood this Privacy Statement and how your information may be used.