PRIVACY POLICY / DPN

At JP Financial Group Limited (trading as JP Mortgage), we are committed to protecting and respecting your privacy. This Data Protection Notice explains how we collect, use, and safeguard your personal data when you use our services. As a mortgage broker providing financial advice, we are required to comply with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

Please read this notice carefully to understand our views and practices regarding your personal data and how we will treat it.

1. Information We Collect

We may collect and process the following types of personal information:

1.1 Information You Provide Directly:

Name, address, email, and phone number.
Financial information, such as salary, income, and bank details.
Identification documents (e.g., passport or driving license).
Credit history and credit reference information.
Documentation related to your mortgage or financial situation, such as income statements and property details.

1.2 Information We Collect Automatically:
When you visit our Website, we may automatically collect certain information, including:

IP address.
Browser type and version.
Pages visited, time spent, and actions on our Website.
Cookies and similar tracking technologies (please refer to our Cookie Policy for more details).

1.3 Third-Party Information:
We may receive personal information about you from third parties, such as credit reference agencies, mortgage lenders, or service providers.

2. How We Use Your Information

We use your information in the following ways:

2.1 To Provide Our Services:

To process mortgage applications, financial advice, or insurance referrals.
To verify your identity and assess your eligibility for financial services.
To communicate with you regarding your inquiries, applications, or consultations.

2.2 To Improve Our Services and Website:

To analyse how you use our Website and services to improve user experience.
To ensure that our Website is functioning optimally and remains secure.

2.3 To Comply with Legal Obligations:

To meet our regulatory obligations under UK laws, including reporting to the Financial Conduct Authority (FCA).
To comply with anti-money laundering (AML) and fraud prevention regulations.

2.4 Marketing and Communications:

With your explicit consent, we may send you marketing information about our services or updates. You can opt-out at any time by contacting us at JPMortgage@Financier.com or using the unsubscribe link in marketing emails.

3. Legal Basis for Processing Your Information

We process your personal data under the following legal bases:

Contractual Obligation: To perform services related to your mortgage or financial consultation.
Consent: Where you have explicitly agreed to receive marketing communications.
Legitimate Interest: For purposes such as improving our services or ensuring Website security.
Legal Obligation: To comply with regulatory and legal requirements.

4. How We Share Your Information

We may share your personal data with:

4.1 Third-Party Service Providers:
To perform specific services (e.g., mortgage lenders, credit reference agencies, insurance providers, IT service providers).

4.2 Regulatory Authorities:
If required to meet regulatory or legal obligations, including sharing with the Financial Conduct Authority (FCA) or law enforcement.

4.3 JP Financial Group Limited Affiliates:
To streamline services across JP Mortgage.

4.4 Other Parties:
With your consent or as necessary in connection with the sale, merger, or restructuring of our business.

We ensure that any third parties we work with adhere to the same standards of data protection as we do.

5. Data Security

We are committed to ensuring that your information is secure. We use physical, electronic, and managerial procedures to safeguard and secure the personal data we collect. These measures include:

Encryption of sensitive data.
Regular security assessments.
Restricted access to your personal information to authorized personnel only.

However, please note that no method of transmitting or storing data is completely secure, and we cannot guarantee the absolute security of your information.

6. Your Rights

Under the UK General Data Protection Regulation (GDPR), you have the following rights:

6.1 Access:
You have the right to request a copy of the personal data we hold about you.

6.2 Rectification:
You have the right to request that we correct any inaccuracies in your personal data.

6.3 Erasure:
You have the right to request the deletion of your personal data where there is no legitimate reason for us to continue processing it.

6.4 Restriction:
You have the right to request that we restrict the processing of your personal data in certain circumstances.

6.5 Data Portability:
You have the right to request that we transfer your personal data to another service provider, where technically feasible.

6.6 Object to Processing:
You have the right to object to the processing of your personal data for direct marketing purposes or based on legitimate interests.

If you wish to exercise any of these rights, please contact us at JPMortgage@Financier.com.

7. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements.

When your information is no longer required, we will securely delete or anonymize it.

8. International Data Transfers

We may transfer your data to third-party service providers located outside the European Economic Area (EEA). In such cases, we will ensure that your data is protected to the same standards by using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

9. Cookies

Our Website uses cookies to enhance user experience and improve the performance of our Website. Please refer to our Cookie Policy for more information about the types of cookies we use and how to manage them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:

JP Mortgage
71-75 Shelton Street,

Covent Garden,

London

WC2H 9JQ.

JPMortgage@Financier.com

Alternatively, please use the contact form located on this website.

The Financial Adviser Firm referred to in the Contact section of this Website understands its obligations in regards to your fundamental right to a private life and has implemented systems and controls to ensure your rights and freedoms are protected.

The Financial Adviser Firm undertakes to meet its obligations under the Data Protection Act, the Privacy and Electronic Communications Regulations and the EU General Data Protection Regulation (GDPR).

WHO WILL PROCESS YOUR PERSONAL INFORMATION?

Your personal information will be initially processed by The Financial Adviser Firm. Where applicable, your personal data will be further processed by staff members of The Financial Adviser and its Principle Firm who acts on our behalf for regulatory purposes. All parties will process your personal data in accordance with this privacy notice.

WHY IS YOUR PERSONAL INFORMATION REQUIRED?

Your personal information is required to enable us to take necessary steps at your request prior to entering into a contract and to perform such a contract. This may include reviewing assets and liabilities, bank account validation, identity and age verification checks, credit checks, preventing and detecting fraud, money laundering or other crimes and any other requirements in accordance with rules set by the Financial Conduct Authority (FCA) or other applicable legislation.

WHAT HAPPENS IF WE WANT TO PROCESS YOUR INFORMATION FOR OTHER REASONS?

Though there are some legal exceptions, if we wish to process your personal data for any other unrelated purpose than those we have informed you about we will notify you.

WHAT ARE THE CONSEQUENCES IF YOU DO NOT PROVIDE YOUR PERSONAL INFORMATION?

Your personal data is essential to enable us to take steps at your request prior to entering into a contract or to perform a contract to which you are a party. Without this information we will not be able to proceed to provide any financial service.

WHAT MAKES THE PROCESSING LAWFUL?

Because the processing is necessary:

For the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
for compliance with a legal obligation to which we are subject;
for the performance of a task carried out in the public interest;
for the purposes of the legitimate interests pursued by us.

KEEPING YOUR INFORMATION UP TO DATE

We will record your information exactly as you provide it. You may ask us to update it at any time and we will action your request promptly and where possible notify relevant third parties of any changes.

WHAT ABOUT SENSITIVE PERSONAL DATA?

Unless we are processing because it is necessary for reasons of substantial public interest, we will only process sensitive personal data, such as data concerning health, with your explicit and informed consent for specific processing activities. In such cases you will be asked to sign a separate consent form to evidence this and that you understand the purpose(s) of the processing of such data. Your consent may be withdrawn at any time.

HOW WILL WE FURTHER USE YOUR PERSONAL INFORMATION (OUR LEGITIMATE INTERESTS)?

• To contact you to ensure that our records of your personal information are correct;

• To respond to questions or complaints you have about our services;

• To update you with changes in our terms;

• For statistical or research analysis relating to the performance of our business or that of our principal and understanding the changing needs of our clients;

• To review, improve and develop services we offer or handle complaints;

• To pursue debts or unpaid fees;

• To evidence company practices;

• To evidence the standards and processes carried out conform to the company's ethical standards and expectations;

• For direct marketing activities;

• To protect the business from risks which might be introduced by an individual.

You have the right to object to processing for these purposes and we shall cease unless we can show we have compelling legitimate grounds to continue.

PROCESSING WHEN PERFORMING A TASK CARRIED OUT IN THE PUBLIC INTEREST

We will use the information provided to protect members of the public against dishonesty, money laundering or fraudulent activities. This must necessarily be carried out without your explicit consent to ensure this function is not prejudiced. Part of this processing involves verifying your identity with carefully selected third parties.

WHAT INFORMATION IS REQUIRED?

We only collect information that is necessary to carry out the purposes listed above. This includes information you supply and data we receive from reference agencies. Where practical and lawful we will inform you about any personal data we receive about you from third parties that you may be unaware of.

HOW SECURE WILL YOUR DATA BE?

We will ensure that your data is only accessible to authorised people in our firm and will remain confidential at all times. Appropriate security measures will be in place to prevent unauthorised access, alteration, disclosure, loss, damage or destruction of your information. If we have a contract with another organisation to provide us with services or a service on our behalf to process your personal information, we’ll make sure they give reassurances regarding appropriate security measures in place and only process your information in the way we’ve authorised them to. These organisations won’t be entitled to use your personal information for their own purposes. If necessary, our security teams will check them to make sure they meet the security requirements we’ve set.

WILL WE SHARE YOUR INFORMATION WITH ANYONE ELSE?

We may share your information with:

• Appropriate staff such as those who carry out financial or compliance functions.

• Organisations that need your information because we are required to provide it by law (e.g. The FCA, ombudsman services, HMRC etc).

• Organisations that carry out credit references or identity checks. These organisations may keep a record of the information and may disclose the fact that a search of its records was made to its other customers for the purposes of assessing the risk of giving credit, to prevent fraud and to trace debtors.

• Sometimes other authorised firms with specialist advisers, such as pension specialists, who assist us in providing suitable financial advice and services. You will be provided with their details if this applies.

• Law enforcement agencies, courts or other public authorities if we have to, or are authorised to by law.

• Product providers we use to provide financial services or for direct marketing (see below).

• Where we or our Principal go through a business transaction, such as a merger, being acquired by another company or selling a portion of its assets, your information will, in most instances, be part of the assets transferred.

TRANSFERRING DATA OUTSIDE THE EUROPEAN UNION

We do not usually transfer any of your personal data outside of the EU except when we need to perform pre-contractual measures (credit and identity checks) or because the checks we request are necessary for important reasons of public interest. Some third party companies may transfer data outside of the EU to countries which do not, in the view of the EU Commission, offer an adequate level of protection. In such cases it their responsibility to encrypt any data it sends to other agencies and only transfer information necessary to carry out checks.

(A list of countries used to perform checks include Germany, Netherland, Belgium, France, Sweden, Norway, Finland, Luxembourg, Switzerland, Liechtenstein, Spain, USA, Estonia, Latvia, Lithuania, Poland, Slovakia, Czech Republic, Hungary, Slovenia, Bosnia, Serbia, Montenegro, Croatia, Macedonia, Kosovo, Albania, Bulgaria, Romania, Ukraine, Austria, Denmark, Moldova, Portugal, Italy, Canada, Brazil, Greenland, China, India, Australia, Russia, South Korea, Taiwan, Mexico, South Africa, New Zealand, Hong Kong, UK.)

WHAT ABOUT DIRECT MARKETING?

We will use the information provided now and, in the future, to carry out direct marketing activities as these are legitimate interests pursued by us. Sometimes this includes, with your consent, sharing data with product providers for their marketing activities. You can choose which method you’d prefer us to use to contact you (by email, telephone, SMS or post) and you have the right to object at any time to the use of your personal data for this purpose and we will cease marketing activity. Just let the person who gave you this form know about your preferences.

AUTOMATED DECISION-MAKING PROCESSES

We sometimes use automated processes when making decisions but you will not be subject to a decision based solely on automated processing, including profiling.

TELEPHONE CALL RECORDING

In line with The Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 we may record incoming or outgoing telephone conversations for the following purposes:

• Establishing facts and evidence for business transactions;

• Ensuring compliance with regulatory or self-regulatory practices;

• Ascertaining and demonstrating that standards are being met;

• Preventing or detecting crime;

• Investigating or detecting the unauthorised use of that or any other telecommunication system;

• Safeguarding the effective operation of the telecommunications system.

HOW LONG WILL WE KEEP YOUR INFORMATION FOR?

The Financial Conduct Authority lays down rules relating to how long information should be held for and we will keep your information to meet these requirements. We will not keep your information for longer than is necessary.

REQUESTING A COPY OF THE INFORMATION WE HOLD

You may at any time ask for a copy of the information we hold about you - it is your legal right. We will provide you with a copy of any non-exempt personal information within one month unless we ask you for an extension of time. To protect your personal data, we will ask you to verify your identity before we release any information. We may refuse your request if we are unable to confirm your identity.

IMPORTANT RIGHTS

You have the right, on grounds relating to your situation, at any time to object to processing which is carried out as part of our legitimate interests or in the performance of a task carried out in the public interest. We will no longer process your data unless we can demonstrate there are compelling legitimate grounds which override your rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.

You have the right to object at any time to processing your personal data for marketing activities. In such a case we must stop processing for this purpose.

WHAT ARE YOUR OTHER LEGAL RIGHTS?

In addition to the rights above the additional following rights:

• Where you have given consent, you have the right to withdraw previous consent to processing your personal data at any time;

• You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning your data;

• You have the right to receive data you have provided to us in a structured, commonly used and machine readable format;

• You have the right to lodge a complaint with the regulator (see below).

To exercise any of these rights please contact us (details below).

HOW TO CONTACT OUR DATA PROTECTION OFFICER

You can contact our data data protection officer about any data protection or marketing issues via our contact details.