Privacy Notice

Remortgage Expert is a trading style of Hotpond Media Limited which is authorised and regulated by the Financial Conduct Authority, FCA number 723662. Companies House Number: 08487030 This Privacy Notice is issued on behalf of Remortgage Expert so when we mention “We”, “Our”, “Us” or “Mojo” in this Privacy Notice, we are referring to the relevant company in the Remortgage Expert responsible for processing your data.
The Remortgage Expert is committed to protecting and respecting your privacy and the integrity of information entrusted to us. We comply with all relevant data protection laws including the retained EU law version of the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this Privacy Notice to learn about your rights, what information we collect, how we use and protect it.
Our data protection officer for the purpose of applicable data protection law may be contacted at [email protected]. If you have any questions or would like to discuss anything in this Privacy Notice, you can email us at [email protected]. You can find more information about us by clicking here:https://remortgageexpert.co.uk

What Personal Data Do We Use

• Personal information including name and address, date of birth, employment details, gender, nationality and phone and email addresses
• Information about your family, lifestyle, and social circumstances such as dependants, marital status, property details
• Health data, if necessary
• Financial information, bank, mortgage and credit arrangements, income source
• Identity information including visual images (such Passports and Driving Licences)
• Credit history information
• Marketing Communications preferences
• Cookies Consent preferences
• Complaint Information
• Online profile information and activity based on your interaction with us and our websites and applications, including for example, login information, Internet Protocol (IP) address, smart device information, location coordinates, site

How We Get The Information And Why Do We Need It?

You may give us information about you

When filling in forms on our website or by corresponding with us by phone, e-mail, webchat, letter, social media or otherwise. This includes information you or your representative acting on your behalf provides when you, create an account online, provide information during advice meetings, report a problem with our site, make a complaint, request further services, make general enquiries If you are providing us with another person's information or special category data (such as health data), as a joint applicant or as a policyholder you should first ask them to read our Privacy Policy and our Terms and Conditions. By giving us information about another person you are confirming that they have consented for you to provide the information to us on their behalf and they understand how this will be used. We may be required to confirm this information with that person(s) at a later stage

Information we collect about you

We may collect personal information from other sources, including through:

• Third party identity verification services, credit searches and anti-money laundering checks to meet our own regulatory requirements, to validate information you have provided, and to meet mortgage and protection providers requirements.
• Product providers, lenders, partners and affiliates, or external review sites
• Law enforcement and fraud prevention agencies, regulatory bodies, to combat, prevent and detect economic criminal activity

Please see ‘Use of Personal Information with Credit Reference Agencies’ and ‘Use of Personal Information in relation to services involving CRAs’ sections below for more information on how your personal data is shared with and used by Credit Reference Agencies.

With regard to each of your visits to our site, or communications with us, we may automatically collect the following information:

• Any phone number used to call our office or communication address provided
• When you visit our website we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site, this assists us in the improvement and optimisation of the website. This information is only processed in a way that does not directly identify anyone. We do not make, nor allow Google to make, any attempt to find out the identities of those visiting our website.

How we use your personal data and the lawful basis for processing

We will only use your personal data when the law allows us to. We have set out in the sections below a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so. Also, please see ‘Use of Personal Information with Credit Reference Agencies’ and ‘Use of Personal Information in relation to services involving CRAs’ sections below for more information on how your personal data is shared with and used by Credit Reference Agencies in particular.

The following processing is conducted under the lawful basis of, necessary for the performance of a contract.

• To carry out our obligations arising from any agreements entered into between you and us and to provide you with the information, products, and services that you request from us. This would include us sharing personal information with our third-party service providers and referral partners if requested by you
• To provide you with service messages and updates on the product or service provided
• To use sourcing solutions to research products and complete applications on your behalf with provider
• The processing of health data to source products, provide illustrations and applications to product providers.

The following processing is conducted under the lawful basis for compliance with a legal obligation

• To verify your identity and to prevent fraud and money laundering
• To meet with our regulatory obligations such as complaints investigation, regulatory requests, and enforcement agencies requests

The following processing is conducted under the lawful basis of legitimate interests

• To provide you with information on related products and services which we feel may interest you
• To allow you to participate in interactive features of our services, when you choose to do so
• For security reasons and website optimisation to ensure that content from our site is presented in the most effective manner for you and for your computer or device
• Review and audit purposes, and analytics and statistical analysis to ensure we are meeting the needs of customers and the business
• To respond to general enquiries
• Collating and responding to feedback reviews to ensure we are meeting the needs of our customers and the business
• To provide confirmation of a completion of a sale to partners where they may have offered you a reward

The following processing is conducted with your consent

• Marketing material regarding unrelated products or services. We will never pass your information to a third party for marketing purposes without your consent.
• Non-essential Cookies, we use a cookies tool on our website to gain consent for the optional cookies we use. You can read more about how we use cookies on our cookies policy.

You have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent before withdrawal.
You may withdraw your consent at any point, however this may mean that we may be unable to continue to provide certain services to you, but we will inform you if that is the case.
If you change your mind, you can withdraw your consent and opt out at any time by:

• Contacting us on 01625 919754
• Writing to us at Remortgage Expert, [email protected]
• To change your cookie preference you can do this through the website
• To opt out of marketing, by using the unsubscribe link in marketing emails
• or by emailing us at [email protected].

Your request to opt out of receiving marketing or promotional material will be processed as soon as it is received. Please allow up to 14 business days for your new preferences to take effect.

With Whom We Share Your Personal Data

We take your privacy very seriously and we’ll only share your information where:

• We have a lawful basis for doing so e.g. for the purposes of providing you with products or services you have requested
• We have a public or legal duty to do so e.g. to assist with detecting fraud and tax evasion, economic crime prevention, regulatory reporting, litigation or defending legal rights
• We have asked you for your permission to share it, and you’ve agreed.

We may share your information with:

• Third party providers who help us provide our proposition and services. These third parties are bound by strict confidentiality agreements before any personal information is shared and are restricted from using the information for any other purpose. Please see ‘Use of Personal Information with Credit Reference Agencies’ and ‘Use of Personal Information in relation to services involving CRAs’ sections below for more information on how your personal data is shared with and used by Credit Reference Agencies.
• Business partners, lenders, your agents such as your solicitor, and product providers to carry out our obligations arising from any agreements entered into between you and us
• Business partners who introduced you to Mojo to provide statistical information, and so they may complete any incentive or reward scheme offered by them to you
• Fraud prevention agencies in the prevention of fraud and money-laundering and to verify your identity
• Any member of our group, which means our subsidiaries, our ultimate holding company, and its subsidiaries
• In the event that we buy or sell any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets and
• If Mojo, in whole or in part thereof, is acquired by a third party, and this relates to customer data assets, in which case personal data held about its customers will be one of the transferred assets

Your adviser will provide you with details of any specific lender or product provider with whom we need to share your data with at your meeting.

Use of Personal Information with Credit Reference Agencies

In order to find the most suitable product for you we may use the information held at credit reference agencies (CRAs). A CRA is a company that collects personal information from various sources and provides that personal information for a variety of uses (including to prospective lenders for the purposes of making credit decisions).
How we and the CRAs will use your information is detailed in the section called ‘use of personal information in relation to services involving CRAs’. By confirming your agreement to proceed you are confirming that we may each use your information in this way.

Use of Personal Information in relation to services involving CRAs

We will search CRAs who will provide us with publicly held data, including the electoral roll and shared credit performance data. If you have a financial associate their data may also be provided.
We will use the information provided to us by a CRA to help decide which products may be best for you and to validate the information you have provided to us. It is important to note that there may be other products available from lenders who are not represented by this service.
When the CRA receives a search from us they will place a quotation search footprint on your credit report, whether or not you decide to apply for the product. This search will not affect your ability to gain credit.
The information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing, and collection of debt. The CRA may also use the data to undertake statistical analysis.
In certain instances, your data will be shared with lender(s) to validate if you are an existing customer (which may affect whether you can be accepted for one of their cards) or for fraud prevention purposes. Note that the lender does not have permission to use your data for any other purpose.
If you choose to apply for a product, the lender will undertake a credit check and provide you with the terms and conditions for that product.
The identities of the CRAs, their role also as fraud prevention agencies, the data they hold, the ways in which they use and share personal information, data retention periods and your data protection rights with the CRAs are explained in more detail at www.experian.co.uk/crain. CRAIN is also accessible from each of the three CRAs – clicking on any of these three links will also take you to the same CRAIN document:

• Call Credit: www.callcredit.co.uk/crain
• Equifax: www.equifax.co.uk/crain
• Experian: www.experian.co.uk/crain

Additionally, you can contact any of the CRA’s as follows, if you wish to obtain a copy of your credit report.

• CallCredit, Consumer Services Team, PO Box 491, Leeds, LS3 1WZ or call 0870 0601414
• Equifax PLC, Credit File Advice Centre, PO Box 1140, Bradford, BD1 5US or call 0844 335 0550 or log on to www.myequifax.co.uk
• Experian, Consumer Help Service, PO Box 8000, Nottingham NG80 7WF or call 0844 4818000 or log on to www.experian.co.uk.

Links To Or From Other Websites

Where there are links from other websites to Mojo or where we provide links to websites of other organisations, this Privacy Notice does not cover how those organisations process personal information. We encourage you to read the Privacy Notices on the other websites you visit.

International Transfer of Personal Data

Mojo will only ever send personal information to recipient organisations outside the UK where those recipient organisations are required to protect personal information in a similar way as they would be required to protect personal information if they were based in the UK. We do this by ensuring at least one of the following safeguards is implemented:

• The data is only being transferred to countries that have been deemed to provide an adequate level of protection for personal data by UK law.
• Where the contract between us and the recipient organisation contains specific terms approved for use in the UK which give personal data the same protection it has in the UK.

Automated Decision-Making

We perform automated checks to quickly establish your eligibility for a mortgage and whether we, or selected partners, are best placed to help with your mortgage needs. In some instances, this will also mean that neither us (Mojo) or our selected partners can help you to get a mortgage. We may look at your credit profile, affordability, property details and product availability based on everything you have provided to make this decision. If we cannot help, this does not mean you cannot get a mortgage at all, just that we cannot help you at this time.

How We Store Your Information

The security of personal data is extremely important to us and therefore we have put in place appropriate security measures to protect personal information from being lost, used, or accessed in an unauthorised way.

How Long We Store Your Personal Data

We will not store your personal data for longer than necessary. The retention period will depend on factors such as the purpose and lawful basis at the point of collection of the data and any ongoing relationship we have with you. We will ensure that any data retention is fair and proportionate to meet your needs, and our legal and regulatory requirements and in line with our agreements with you.

Your Rights Over Your Data

The right to be informed

Organisations need to tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties. This information must be communicated concisely and in plain language.

The right of access

Individuals have the right to access their personal data (commonly known as a “data subject access request”). This enables individuals to receive a copy of any personal data an organisation holds about them and to check that it is being processed lawfully. Organisations usually have one month to produce this information, although there are exceptions for requests that are manifestly unfounded, repetitive, or excessive.

The right to rectification

If an individual discovers that the information an organisation holds about them is inaccurate or incomplete, they can request that it be updated. As with the right of access, organisations have one month to do this, and the same exceptions apply.

The right to erasure

The right to erasure is also known as ‘the right to be forgotten’.
Individuals can request that organisations erase their data in certain circumstances – for example, when the data is no longer necessary, the data was unlawfully processed, or it no longer meets the lawful ground for which it was collected. This includes instances where the individual withdraws consent.
Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

The right to restrict processing

Individuals can request that an organisation limits the way it uses personal data. It’s an alternative to requesting the erasure of data and might be used when an individual contests the accuracy of their personal data. An individual can also exercise this right when they no longer use the product or service for which it was originally collected, but the organisation needs it to establish, exercise or defend a legal claim.

The right to data portability

Individuals are permitted to request the transfer of their personal data to themselves or a third party. This right only applies to personal data that an individual has provided to data controllers by way of a contract or consent.

The right to object

Individuals can object to the processing of personal data that is collected on the grounds of legitimate interests or the performance of a task in the interest/exercise of official authority. Organisations must stop processing information unless they can demonstrate compelling legitimate grounds for the processing that overrides the interests, rights, and freedoms of the individual. They can also refuse this right if the processing is for the establishment or exercise of defence of legal claims.

Rights related to automated decision-making including profiling

UK data protections laws include provisions for decisions made with no human involvement, such as profiling, which uses personal data to make calculated assumptions about individuals. There are strict rules about this kind of processing, and individuals are permitted to challenge and request a review of the processing if they believe the rules aren’t being followed.

Data Requests

Please contact us at if you wish to make any data requests by:

• Email [email protected]
• Calling us on 01625 919754
• You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up and assist with our response.
We try to respond to all legitimate data requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

How to Complain

If you have any concerns about your data, please contact us either by

• Email [email protected]
• Calling us on 01625 919754

You have a right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
Website: www.ico.org.uk
We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.