Privacy Policy

Privacy Policy & Cookie Policy

Last updated: 21 October 2026

1. Who We Are

Newquay Mortgage and Pensions provides mortgage advice and pension services.

Contact Details

Address: 6 Chesterton Place, Chester Road, Newquay, TR7 2RU
Email: info@nmandp.co.uk
Phone: 01637 851444

For data protection queries, please contact us at info@nmandp.co.uk.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Personal identification information: name and date of birth.
Contact details: email address, telephone number and postal address.
Financial information: income, employment status, expenditure, credit history and other information relevant to mortgage or pension advice.
Mortgage and pension information: details of existing arrangements, applications, financial circumstances and objectives.
Technical data: IP address, browser type, device information and website usage data.
Marketing preferences: your communication preferences and consent choices.

We only collect personal information that is relevant to the purposes for which it is used.

3. How We Collect Your Data

We may collect personal data when you:

Complete forms on our website.
Contact us by email, telephone or through an enquiry form.
Visit and interact with our website, including through cookies and analytics tools where permitted.
Engage us to provide mortgage advice, pension services or related assistance.
Provide information during meetings, consultations or the application process.

We may also receive information from third parties, such as mortgage lenders, pension providers, credit reference agencies or other professional organisations, where appropriate and lawful.

4. How We Use Your Data

We may use your personal data to:

Provide mortgage advice and pension-related services.
Assess your financial circumstances and requirements.
Process applications, enquiries and requests.
Communicate with you about our services and your arrangements.
Maintain accurate business and client records.
Improve our website and services.
Prevent fraud, protect our business and maintain security.
Meet legal, regulatory and professional obligations.
Send marketing communications where permitted by law.

We will not use your personal data for purposes that are incompatible with the reasons for which it was collected, unless we have a lawful basis to do so.

5. Legal Basis for Processing

Under UK data protection law, we rely on one or more of the following lawful bases, depending on the circumstances:

Consent: where you have agreed to a specific use of your data, such as certain marketing communications or non-essential cookies.
Contract: where processing is necessary to provide our services or take steps at your request before entering into an agreement.
Legal obligation: where we need to comply with applicable financial, regulatory, tax or other legal requirements.
Legitimate interests: where processing is necessary for our legitimate business interests, such as managing enquiries, maintaining records, improving our services or preventing fraud, provided these interests do not override your rights.
Legal claims: where processing is necessary to establish, exercise or defend legal claims, where applicable.

Where we rely on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Sharing Your Data

Where necessary and lawful, we may share your personal data with:

Mortgage lenders and pension providers.
Mortgage sourcing platforms and other financial services organisations.
Credit reference agencies and fraud prevention services, where relevant.
Regulatory authorities, including the Financial Conduct Authority (FCA), where required.
IT, website hosting, CRM, analytics and other service providers.
Accountants, legal advisers and other professional advisers.
Other organisations where disclosure is required by law or necessary to protect our legal rights.

We take reasonable steps to ensure that third parties handling personal data on our behalf provide appropriate safeguards. Some organisations may act as independent data controllers and have their own privacy policies.

We do not sell your personal data to third parties.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including providing our services, meeting legal and regulatory requirements, resolving disputes and maintaining appropriate records.

Client records may need to be retained for six years or longer, depending on the type of record, applicable regulatory requirements and the circumstances of the relationship.

When personal data is no longer required, we will take reasonable steps to securely delete it or anonymise it, unless we are legally required or permitted to retain it for longer.

8. Your Data Protection Rights

Under UK data protection law, you may have the right to:

Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: request deletion of your personal data where the law allows.
Restriction: ask us to restrict how we use your information in certain circumstances.
Data portability: request certain information in a commonly used, machine-readable format where the legal requirements apply.
Object: object to certain types of processing, including direct marketing.
Withdraw consent: withdraw consent where we rely on it as the lawful basis for processing.

These rights are subject to applicable legal conditions and exemptions. For example, we may need to retain certain records to meet our legal or regulatory obligations.

To exercise your rights, contact us at info@nmandp.co.uk. We may need to verify your identity before responding.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Further information is available at ico.org.uk.

9. Cookies Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Similar technologies may also store or access information on your device.

We may use cookies and similar technologies to operate our website, remember preferences, understand website usage and support marketing activities where enabled and permitted.

Types of Cookies We May Use

Essential Cookies

These are necessary for core website functions, security and navigation. They may include technologies required to make the website work properly.

Analytics Cookies

These help us understand how visitors use our website, which pages are visited and how the website performs. For example, we may use Google Analytics if it is enabled on our website. Non-essential analytics cookies will only be used where the required consent has been obtained.

Marketing Cookies

These may be used to measure advertising effectiveness or support relevant advertising through third-party platforms. They will only be activated where enabled and where the required consent has been obtained.

Managing Cookies

When you visit our website, you may be presented with a cookie banner that allows you to manage your preferences.

You can accept or reject non-essential cookies through the available controls. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

Where required by law, non-essential cookies will not be set before you provide consent. You can withdraw or change your consent through the cookie preference controls available on our website, where provided.

10. Third-Party Services

We may use third-party services to operate our website and provide our services. These may include:

Website analytics providers, such as Google Analytics, if enabled.
Customer relationship management (CRM) systems.
Mortgage sourcing and application platforms.
Website hosting, email and IT service providers.
Financial services providers involved in your mortgage or pension arrangements.

These providers may process personal data on our behalf or act as independent data controllers, depending on the service they provide.

Where a third party processes data on our behalf, we take reasonable steps to ensure appropriate contractual and security arrangements are in place.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Measures may include secure systems, access controls, encryption where appropriate and limiting access to personal information to authorised individuals who need it for their work.

No method of electronic storage or transmission is completely secure, but we take reasonable steps to protect the information entrusted to us.

12. International Transfers

Some of our service providers may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure that the transfer is permitted under applicable data protection law and that appropriate safeguards are in place where required. These may include recognised adequacy arrangements or approved contractual protections.

13. Changes to This Policy

We may update this Privacy Policy and Cookie Policy from time to time to reflect changes to our business, services, website technologies or legal obligations.

Any updates will be published on this page, together with a revised update date.

We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this policy, how we use your personal data, or wish to exercise your data protection rights, please contact us:

Newquay Mortgage and Pensions

Address: 6 Chesterton Place, Chester Road, Newquay, TR7 2RU
Email: info@nmandp.co.uk
Phone: 01637 851444

You can also contact us through our website contact page.

For independent information about your data protection rights, visit the Information Commissioner’s Office at ico.org.uk.