Privacy Notice

Introduction and Definitions

Your Finance Today Limited(trading as ("we", "our" and "us") is committed to protecting and respecting your privacy.

This notice sets out the basis on which any personal data, which we collect about you, that you provide to us or that we have received from a third party source, will be processed by us. If you have questions about correcting or deleting your personal data please refer to sections 10 and 16 below.

References in this notice to "data protection law" mean (as applicable) the Data Protection Act 1998, the General Data Protection Regulation (Regulation (EU) 2016/679) and all related data protection legislation having effect in the United Kingdom from time to time.

References in this notice to "data or "information" include "sensitive personal data" and "special categories of data" (as defined under data protection law) where applicable.

  1. Our details   [top]
    1. The data controller with conduct of your personal information is Your Finance Today Limited (trading as of 83a Commercial Road, Southampton, Hampshire SO15 1GH.
    2. Our data protection officer is Ben Whittaker of 83a Commercial Road, Southampton, Hampshire SO15 1GH.
    3. The following sections explain what information we hold about you, why we are processing that information, the legal basis for the processing, the duration for which we keep your information and who your information will be shared with and where those recipients are based.

  2. What information do we collect about you?    [top]
    1. You will be required to provide us with certain information about yourself when you engage us for mortgage advice. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health (including any medical conditions), if this is necessary for the provision of our services.
    2. Any information requested will be specific to the services we offer and the list below provides the types of information required in order to process a mortgage and why:
      1. Your name, date of birth, nationality and documentation to verify the information provided;
      2. Your address and documents to verify the information provided.
      3. Your telephone number and email address so that we can contact you to progress your application.
      4. Information and documentary evidence to confirm your income and employment status.
      5. Details about credit commitments, any adverse credit and a credit report to ensure accuracy and the suitability of a recommended product.
      6. Information about your property and its value, the remortgage amount required and the reason for the remortgage, so that we may progress your application.
      7. Details of your residential and electoral roll status so that we may progress your application.
      8. Bank statements to confirm receipt of income and general living expenses.
      9. Such other information as may be required by us or lenders in order to assess your application.
    3. Like most other website operators, we collect non-personally identifying information of the sort that web browsers and servers typically make available. This includes technical information, such as your IP address and search engine and search terms used and information about your visit, such as records of how you navigate the pages on our website and how you interact with the pages.

  3. How do we collect data?   [top]
    1. Using an enquiry form on our website (
    2. When you speak with us by telephone or in person or we correspond with each other in writing or by email.
    3. Using a courier to collect documentation from you; and
    4. From third party referrals such as from other professionals, friends or family.

  4. Why do we need to collect and process your personal data?   [top]
    1. We process your personal data for the following purposes:
      1. To supply you with the services you have requested from us.
      2. To allow us to administer and manage your account with us.
      3. To comply with our regulatory and legal obligations to process and keep a record of your data.
      4. To ensure that content from our website is presented in the most effective manner for you and for your device; and
      5. To measure or understand the effectiveness of advertising we serve to you and others.

  5. What are the grounds for processing your information?   [top]
    1. We are processing your data on the following grounds:
      1. You have consented to the processing for the purposes stated in section4, above;
      2. The processing is necessary for the performance of the contract between you and us. This includes where you have instructed us to take some pre-contractual steps prior to us formalising the contract;
      3. The processing is necessary for us to comply with our legal and regulatory obligations applicable when acting as a mortgage broker.
      4. The processing is necessary for achieving ourlegitimate business interest of being a mortgage broker business. In accordance with data protection law, we have carefully weighed your interests and fundamental rights and freedoms against our interest to process your information and are satisfied that we are justified in processing your information for this purpose.

  6. Who is your information shared with?   [top]
    1. We won’t share your information for marketing purposes with other third parties.
    2. Our main function as a mortgage broker is to advise and arrange a mortgage on your behalf in accordance with your requirements. In order to provide this service we will need to collect data from you and share this with a mortgage lender.
    3. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you.
    4. Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit. We will use secure portals. We will also employ encryption and in some cases secure folders.
    5. To fulfil our obligations in respect of the prevention of money-laundering and other financial crime we may send your details to third party agencies for identity verification purposes.
    6. If you express an interest in a product or we identify a need as part of our advice, we may share your information with trusted partners. Our policy when sharing your data is as follows:
      1. You will be notified and your consent obtained prior to any data being shared.
      2. Your data will be sent using encrypted email or a secure portal.
      3. We will only send specific information relevant to the service our trusted partner provides.
      4. The data sent may only be used for the requested product(s) or identified need(s), unless you subsequently engage our trusted partner for additional products; and
      5. We work closely with our trusted partners to ensure your privacy is protected and respected at all times.
    7. The trusted partners we work with and the available services are as follows:
      Trusted Partner Service Provided
      DHL Courier
      Radcliffe & Co Protection; Life Cover, Critical illness Cover, Income Protection
      Lets Move Conveyancing Solicitor Instructions
      Positive Lending Secured Loans
      Smart Search Electronic Identification Checks
      Cosy Homes Building Surveys
      Paymentshield Home Insurance

    8. In order to achieve the purpose(s) set out in section 4 above, we may also share your data with the following people or group of people:
      1. Our outsourced IT providers may have access to your personal data on our IT systems if such access is required to enable them to resolve problems with our systems. Typically, your personal information will be encrypted before it is transferred to our hosts but in certain circumstances they may require access to unencrypted data, for example when we need to troubleshoot an issue with your account on our computer system. Our IT providers are subject to strict contractual obligations to treat your personal information with the utmost sensitivity, to keep it confidential and to comply with data protection law at all times.
      2. We may provide personal data to our legal advisers or other professional advisers, if necessary to defend claims, protect our rights, or receive advice on compliance with the law. Such transfers will be protected by confidentiality obligations owed by our advisers.
      3. We may share personal data with potential purchasers of our business, subject to those persons entering into strict confidentiality obligations with us and only to the extent permissible under data protection law.
    9. We may share anonymised, pseudonymised and non-personal information with sub-contractors engaged by us to help us operate our website and to analytics and search engine providers that assist us in the improvement and optimisation of our website.
    10. To the best of our knowledge, understanding and belief, your information will not be transferred outside of the European Economic Areaor to any country which is not approved by the European Commission. If this changes then we will let you know.

  7. How long do we keep hold of your data?   [top]
    1. We only keep your information for so long as it is reasonably necessary. When setting our data retention periods, we consider the amount, nature, and sensitivity of the information we hold, the potential risk of harm from unauthorised use or disclosure of the information and the purposes for which we process the information (including whether we can achieve those purposes by other means). We also take into account our other legal obligations to keep or securely dispose of personal information.
    2. Generally speaking, we retain your information for the following periods of time:
      1. If you make an enquiry via our website but we do not get to speak with you the data entered will be deleted after 6 months; and
      2. If we provide you with advice, your personal data shouldn’t be held for longer than is required under the terms of our contract for services with you. However, we’re subject to regulatory requirements to retain data for specified minimum periods. We also reserve the right to retain data for longer than this due to the possibility that it may be required to defend a future claim against us.We regularly review the duration of these longer periods of retention.

  8. Marketing and future contact   [top]
    1. We’d like to send you information about our products and services which may be of interest to you but only if you’ve consented to receive such information, you can opt-in to this service when completing our consent form or by providing verbal confirmation. If you opt in and subsequently decide you no longer wish to be contacted for this purpose, please notify us by phone, email or post and we will update your preference.
    2. We may wish to contact you again in the future following completion of our service to assist you in reviewing your financial arrangements, this would usually take place shortly before your initial mortgage rate ends and will allow us to make a further assessment of your needs and requirements, but only if you’ve consented to this service. You can opt-in by completing our consent form or by providing verbal confirmation. If you opt in and subsequently decide you no longer wish to be contacted for this purpose, please notify us by phone, email or post and we will update your preference.

  9. Automated decision making   [top]
    1. We do not make automated decisions about you based on your information.

  10. What are my rights?   [top]
    1. Under data protection law, you have the following rights, which we will always work to uphold:
      1. If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by notifying us using the details set out in section 16 below. The lawfulness of our historic processing based on your consent will not be retrospectively affected by your withdrawal of consent;
      2. The right to access a copy of your information which we hold. This is called a 'subject access request'. Additional details on how to exercise this right are set out in section 13, below;
      3. The right to prevent us processing your information for direct marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us using the details set out in section 16, below;
      4. The right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing.
      5. The right to object to us processing your personal information in certain other situations.
      6. The right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate.
      7. The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.
    2. From 25 May 2018 you will have the following additional rights under data protection law:
      1. Enhanced rights to request that we erase, rectify, cease processing and/or delete your information.
      2. In certain circumstances, the right to request the information we hold on you in a machine readable format so that you can transfer it to other services. This right is called 'data portability'. Additional details on how to exercise this right are set out in section 13, below;
    3. You also have the general right to complain to us (in the first instance) and to the Information Commissioner's Office (if you are not satisfied by our response) if you have any concerns about how we hold and process your information. Our contact details are set out in section 16, below. The Information Commissioner's Office website is
    4. For further information on your rights under data protection law and how to exercise them, you can contact Citizens Advice Bureau ( or the Information Commissioner's Office (
  11. Other websites   [top]
    1. Our website contains links to other websites. This privacy notice only applies to this website so when you link to other websites you should read their own privacy policies and notices.
  12. Cookies   [top]
    1. We use cookies to track visitor use of our website and to compile statistical reports on website activity. For further information visit
    2. You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However, it’s possible some of our website features may not function as a result.
    3. Our website uses Google Analytics, a web analysis service of Google, inc. ('Google'). Learn more from their Terms of Service and Privacy Policy
    4. Our website uses Google AdWords Conversion Tracking cookies to measure and optimise the performance and user experience related to our ads in Google Search or selected Google Display Network sites. Learn more about Google’s privacy policy here. Opt-Out by visiting Google’s Ad Settings.

  13. Access to information   [top]
    1. Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information we hold on you. If you make your request before 25 May 2018, you will need to pay a £10 fee. You must send us proof of your identity, or proof of authority if making the request on behalf of someone else, before we can supply the information to you. Requests should be sent to us using the contact details in section 16 below.
    2. From 25 May 2018 you will:
      1. No longer have to pay a £10 fee unless you are requesting copies of documents you already possess, in which case we may charge our reasonable administrative costs. We will also be allowed to charge you for our reasonable administrative costs in collating and providing you with details of the requested information which we hold about you if your request is clearly unfounded or excessive. In very limited circumstances, we are also entitled to refuse to comply with your request if it is particularly onerous; and
      2. In certain circumstances, be entitled to receive the information in a structured, commonly used and machine-readable form.

  14. Data security   [top]
    1. We will always store your digital information on secure servers. Unfortunately, however, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, we cannot guarantee the security of your information transmitted to our website or otherwise to our servers (such as by email). Any such transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

  15. Changes to our privacy notice   [top]
    1. This notice was last updated in February 2023. Any material changes we may make to our privacy notice in the future will be uploaded to our website and if the change is significant we will send you the updated notice by email.  Please check back frequently to see any updates or changes to our privacy notice.

  16. Contact   [top]
    1. Questions, comments and requests regarding this privacy notice are welcomed.Please contact us if you have any questions about our privacy notice or information we hold about you:
      Data Protection Officer By E-mail By Post
      Ben Whittaker

      Your Finance Today Ltd.
      83a Commercial Road
      SO15 1GH