Privacy Policy

1. Introduction

My Mortgage Sorted, operated by TLC Marketing Limited ("we", "us", or "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at www.mymortgagesorted.com.

We are a lead generation service that connects individuals seeking mortgage advice with FCA-authorised mortgage brokers and advisers. This policy applies to all visitors to our website and all users who submit their personal information through our forms and quizzes.

By using our website and submitting your personal information, you agree to the collection and use of your data as described in this policy.

2. Data Controller

For the purposes of UK GDPR and the Data Protection Act 2018, the data controller is:

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide

• Contact Information: First name, last name, email address, telephone number
• Property Information: Property value, property type, postcode
• Financial Information: Annual income, existing mortgage balance, deposit amount, loan amount required, loan term preferences
• Mortgage Preferences: Type of mortgage (purchase, remortgage, buy-to-let, secured loan), property usage intentions

3.2 Information Collected Automatically

• Device Information: Browser type and version, operating system, device type, unique device identifiers
• Usage Data: Pages visited, page views, time spent on site, session duration, number of sessions, referring website, clicks, interaction events
• Technical Data: IP address (for consent logging and fraud prevention), user agent, time zone, language preferences
• Geographic Data: Country, city, region (derived from IP address)
• Cookie Data: As described in our Cookie Policy

3.3 Tracking Data (With Consent)

With your consent, we may collect additional data through the following services:

• Google Analytics 4: Website usage patterns, session statistics, page views, user journeys, browser information, device information, geographic data (city, region). Google utilises this data to track and examine website use and prepare reports. For more information, see Google's Privacy Policy.
• Meta (Facebook) Pixel: Conversion tracking, advertising interactions, unique device identifiers for advertising (such as Google Advertiser ID or IDFA), usage data. Meta ads conversion tracking connects data from the Meta Audience Network with actions performed on this website. For more information, see Meta's Privacy Policy.

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Lead Generation Services

• To assess your mortgage requirements and eligibility
• To match you with suitable FCA-authorised mortgage advisers
• To share your information with selected third-party mortgage advisers who can help with your enquiry
• To contact you regarding your enquiry

4.2 Website Operation

• To provide and maintain our website
• To improve our services and user experience
• To detect and prevent fraud or abuse

4.3 Analytics and Marketing (With Consent)

• To analyse website usage and improve our services
• To measure the effectiveness of our advertising campaigns
• To deliver relevant advertisements on social media platforms

4.4 Legal Compliance

• To comply with legal obligations
• To maintain records of consent for GDPR compliance
• To respond to regulatory requests

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: You have given explicit consent for us to process your data for specific purposes (e.g., sharing with mortgage advisers, marketing cookies)
• Contract: Processing is necessary to provide our lead generation services
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided this does not override your rights
• Legal Obligation: Processing is necessary to comply with legal requirements

6. How We Share Your Data

6.1 Lead Generation Disclosure

My Mortgage Sorted is a lead generation service. When you submit your information through our website, we share your personal data with third-party mortgage advisers and brokers who are authorised and regulated by the Financial Conduct Authority (FCA). These third parties pay us a fee for receiving your enquiry.

6.2 FCA-Authorised Mortgage Advisers

We share your contact details, property information, and financial information with selected FCA-authorised mortgage advisers and brokers. These third parties will contact you directly to discuss your mortgage requirements. They are independent data controllers and process your data according to their own privacy policies.

6.3 Service Providers

• Supabase: Database and data storage (UK/EU data centres)
• Vercel: Website hosting and analytics
• Google: Analytics services (with consent)
• Meta: Advertising services (with consent)

6.4 Legal Requirements

We may disclose your data if required by law, court order, or government request, or to protect our legal rights.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

• Lead Data: Retained for up to 3 years from submission for business purposes and regulatory compliance
• Consent Records: Retained for 7 years to demonstrate GDPR compliance
• Analytics Data: Retained according to the respective platform's policies (typically 26 months for Google Analytics)
• Cookie Preferences: Stored in cookies for 12 months

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at max@theleadcloud.com. We will respond to your request within one month.

Note: Once your data has been shared with third-party mortgage advisers, you will need to contact them directly to exercise your rights over the data they hold.

9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure database storage with row-level security
• Access controls and authentication
• Regular security assessments
• Secure handling of API credentials and access tokens

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK, including the United States, where our service providers (such as Vercel, Google, and Meta) are located.

Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions, to protect your data in accordance with UK data protection law.

11. Cookies and Tracking

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

You can manage your cookie preferences at any time by visiting our Cookie Settings page.

12. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Complaints

If you have any concerns about how we handle your personal data, please contact us first at max@theleadcloud.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: