Just-in-Time Privacy Notice for Apex Mortgage and Protection Ltd.
Effective Date: 12 May 2025
Apex Mortgage and Protection Ltd. (“Apex”, “we”, “our”) is the data controller of any personal data you provide through our website, forms, or direct communication. We are committed to safeguarding your privacy and ensuring transparency in how we use your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What Personal Data Do We Collect?
We collect only the basic personal data necessary to respond to your enquiry or deliver requested services. This may include:
- Full name
- Contact information (e.g., phone number, email address)
- Mortgage or insurance enquiry details
We do not collect special category data (such as health or biometric data), nor do we collect location-based information unless explicitly required for the service you request.
2. Purpose and Legal Basis for Processing
Your data is collected for the legitimate interest of:
- Contacting you in response to your enquiry
- Providing relevant information about our services
- Delivering contractual or pre-contractual services upon request
All processing is carried out by Apex staff based in the UK.
3. Who Will Your Data Be Shared With?
We will not share your data with third parties unless it is necessary to fulfill your request (e.g., connecting you with a financial advisor or lender). If sharing is required, we will always seek your explicit consent beforehand.
We do not sell or trade your data. All third parties that may receive your data (if any) are required to comply with data protection laws and only use your information for the purpose intended.
4. How Long Do We Retain Your Data?
We retain your personal data for no longer than is necessary. This means:
- Up to six (6) years after the end of a business relationship, in line with financial and regulatory obligations
- Or until you request erasure, where lawful
All data is securely stored and disposed of in line with our data retention policy.
5. Your Data Protection Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data (right to be forgotten)
- Object to or restrict processing
- Request portability of your data (where applicable)
To exercise any of these rights, please email: dpo@apexmp.co.uk
If you are unsatisfied with our handling of your personal data or wish to lodge a complaint, you can contact our compliance team at: compliance@sdlgroup.co.uk
If we cannot resolve your complaint to your satisfaction, you also have the right to contact the UK Information Commissioner’s Office (ICO): https://ico.org.uk