- Mortgage Distributor
- Mortgage Packager
- Mortgage Broker
As a data controller, Vincent Burch Limited (“Vincent Burch Ltd/we/us/our”) comply with all applicable data protection and privacy legislation in force from time to time in the UK including the General Data Protection Regulation ((EU) 2016/679) and the Data Protection Act 2018. This Privacy Notice details how we process your personal data. Under the GDPR we are required to notify the Information Commissioner’s Office (ICO) about our use of personal data. You can see our current data notification on the ICO website.
We place great importance on ensuring the quality, confidentiality, integrity and availability of the data we hold and in meeting our data protection obligations when processing personal data. Vincent Burch Ltd is committed to protecting the security of your personal data. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use or disclosure.
We collect personal data about a range of people:If you have applied to work with us please refer to our job applicant privacy notice.
When individuals apply to work with us we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from the Criminal Records Bureau we will not do so without informing you beforehand unless the non-disclosure is required by law.
Personal information about unsuccessful candidates will be held for six-weeks after the recruitment exercise has been completed, it will then be destroyed or deleted. We retain de-personalised statistical data about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.
Once a person has taken up employment with us, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment.
Once their employment with us has ended, we will retain the file in accordance with the requirements of our retention schedule.
We process personal information to act as an intermediary for financial transactions; typically to advise and apply for property finance such as mortgages or similar for clients. The same applies to advising and arranging insurance policies.
To understand how any personal information other than that provided to us through this website is processed you will need to refer to any personal communications you receive from us, check any privacy documents provided when entering into a contract with us or contact us to ask about your personal circumstances.
When you contact us, we ask for some personal information. You are under no obligation to provide this information to us. Providing that information, enables us to give you the right information or services that you ask for or notify you of further information required to facilitate that service.
If we would like to use your information for any other purpose than those stated above, we will contact you.
As a minimum, we will hold your name and phone number for the purposes specified above. If you do not become a client of ours, your information will be erased in line with our retention policy.
We use Google Analytics on our website (vincentburch.co.uk/) to provide statistics to help us give visitors the best experience when using our sites. IP addresses are collected to see how users interact with our site. Our website uses cookies, which is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns.
We use cookies to help identify and track visitors and their website access preferences. Website visitors can control which types of cookies are placed on their browser by adjusting the cookie settings in the cookie controller button, which can be found at the bottom left-hand corner of our website.
We use your details to produce a mortgage illustration and confirm where the illustration should be sent. Mortgage products are sourced through a variety of sources, including Twenty7Tec and Iress. Upon receipt of your illustration you will be able to choose if you want to be contacted by one of our advisers. Our advisers will discuss your eligibility for the illustrated mortgage product and confirm how you would like to proceed. We will not contact you without your prior consent.
We want to receive your views on the service you received from us and any improvements you think are necessary. We use Trustpilot and other review platforms as a data processor to collect feedback from our customers on our behalf and to support our marketing activities. If this is something you agree to help us with, we will share your name and email address with TrustPilot and these other platforms in order to generate a review invite and confirm you are a verified customer of Vincent Burch Ltd.
As a regulated firm we required to retain and provide information to the FCA regularly. We must also collect and store regulatory data from our authorised firms, called Appointed Representatives. Most of the information is provided to us under the Financial Services and Markets Act 2000.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal information in the following purposes and lawful bases:
Purpose: Carrying out due diligence on our clients and performing risk assessments. This includes carrying out standard due diligence checks in relation to financial affordability checks for the mortgage and insurance products we recommend to you.Lawful basis for processing: Necessary to comply with legal obligations to which we are subject. Our legitimate business interest to assess the risk associated with providing you with our services. When processing sensitive personal data, we do so with your explicit consent.
Purpose: Legal and regulatory compliance and compliance with law enforcement requests. This includes performing checks and monitoring transactions for the purpose of preventing and detecting crime and to comply with laws relating to money laundering, and fraud. Also, sharing information on suspected financial crimes, fraud and threats with law enforcement and regulatory bodies.
Lawful basis for processing: Necessary to comply with legal obligations to which we are subject. When processing sensitive personal data, we do so with your explicit consent.
Purpose: Providing our mortgage and insurance advisory and administration services to you, covering any services we provide to you as a private client.
Lawful basis for processing: Necessary for the performance of the contract agreement to which you are a party.
Purpose: Managing and developing our relationship with you. This includes providing account management, contacting you for feedback and inviting you to participate in customer satisfaction surveys.
Lawful basis for processing: Our legitimate business interest to develop our relationship, collect your feedback, assess your level of client satisfaction and to improve our services.
Purpose: Sending you marketing about our services, our news and events. This includes sending you our news emails, information about our services, related information which may be of interest to you and to invite you to our events.
Lawful basis for processing: Our legitimate business interest to send you marketing and promotional materials from time to time. Where we have obtained your consent to send marketing rely on consent as the legal basis. You can tell us to stop sending you marketing information at any time by objecting or withdrawing your consent. You can do so by contacting us at compliance@jlmms.co.uk or by using the unsubscribe link in any marketing email you receive from us.
Purpose: Internal management, administrative and organisational purposes. This includes maintaining internal records and carrying out other business administration tasks.
Lawful basis for processing: Our legitimate business interest to process your personal data to manage and improve our business processes.
Purpose: Statistics and other data analysis. This includes creating forecasts and business plans, improving our services and developing new services.
Lawful basis for processing: Our legitimate business interest to process your personal data to develop and improve our business through aggregated and anonymised reporting and analysis.
Purpose: Sharing data with entities in our group. This includes sharing client records and results of due diligence with our Appointed Representatives entities.
Lawful basis for processing: Our legitimate business interest to identify and develop shared clients across our network of advisers and to utilise existing due diligence and risk assessment information when providing our clients with services.
Purpose: Sharing data with other third parties, including third parties who process personal data on our behalf.
Lawful basis for processing: Our legitimate business interest to share your data with trusted third parties who provide us with services relevant to our provision of services to you, including professional advisers, screening service providers and IT service providers.
We sometimes need to share the personal information with other organisations. Where this is necessary, we are required to comply with all aspects of the UK GDPR.
What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons. Where a joint application is made, we are not able to restrict data sharing between applicants.
Vincent Burch Ltd will only collect the information needed so that it can provide you with marketing and consulting services. We do not sell or broker your personal data.
We may, on occasion, pass your personal information to third parties exclusively to process work on our behalf; for example, a data destruction provider. We always require these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice and GDPR.
Vincent Burch Ltd takes the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by its employees in the performance of their duties. Where we engage third parties to process personal data on our behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of the data.
To ensure we meet our legal, regulatory and customer obligations, we will retain client information for the following periods:
It is unlikely that we’ll ever share your personal data outside the European Union or European Economic Area. If, however, it becomes necessary for the purposes of providing our services to you, we will only share it with organisations in countries benefiting from a European Commission adequacy decision or on the basis of Standard Contractual Clauses approved by the European Commission which contractually oblige the recipient to process and protect your personal data to the standard expected within the EU/EEA.
At any point whilst Vincent Burch Ltd is in possession of or processing your personal data, all data subjects have the following rights:
In the event we refuse your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
You have the right to access your personal information (subject to certain exemptions). If you wish to find out what information we hold that relates to you, please contact, details below.
We do not make client or supplier decisions based solely on automated decision making.
This privacy notice does not provide exhaustive detail of all aspects of the collection and use of personal information. However, we are happy to provide any additional information or explanation needed. If you have any questions or complaints please contact the Data Protection Officer at:
The Data Protection Manager, JLM Mortgage Services Ltd, 21a Churchyard, Hitchin Hertfordshire SG5 1HP
Telephone 01462 455 655 or email compliance@jlmms.co.uk
We have also appointed an independent Data Protection Officer at data protection consultants, Evalian Limited who can be contacted by email at dpo@evalian.co.uk
If you are not satisfied with how JLM has responded to your enquiry, you have the right to complain to the Information Commissioner’s Office (ICO), who is the regulator for data protection in the United Kingdom.
We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify of the changes where required by applicable law to do so.
v.1.2