Legal
Privacy & GDPR notice
This notice explains how Common Thread Mortgages & Protection ("we", "I") collects and uses your personal data, in line with the UK GDPR and the Data Protection Act 2018. It is a starting template and should be reviewed before you go live.
Who is the data controller
Common Thread Mortgages & Protection is the data controller for the information you provide. You can contact us at sam@commonthreadmortgages.com or 07961 725455.
What we collect
Contact details you submit through the enquiry form or booking calendar (name, email, phone and your message), plus any information you share during advice conversations such as income, expenditure, health and credit history where relevant to a recommendation.
Why we use it, and our lawful basis
- To respond to your enquiry — consent, or steps prior to entering a contract.
- To provide mortgage and protection advice — performance of a contract.
- To meet regulatory and record-keeping duties — legal obligation.
- Special category data (e.g. health information for protection quotes) is processed for insurance purposes under Schedule 1 of the Data Protection Act 2018.
Who we share it with
Lenders, insurers, our network/compliance provider, and service providers such as our scheduling and email tools — only where needed to progress your case or meet our obligations. We never sell your data.
How long we keep it
Enquiries that don't proceed are deleted within 12 months. Client records are retained for a minimum of six years after the advice or the end of the policy, as required by the FCA.
Your rights
You have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. Email sam@commonthreadmortgages.com and we'll respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.