Financial Services

Privacy Policy

This notice describes the data which we will hold about you, what we will do with it and why, and how we will protect it. It also describes your rights and how to exercise them.

Who Are We

MG Financial Services (PVT) is mortgage brokerage firm registered by the Financial Conduct Authority (FCA). We act as a Data Processor for the personal information you provide to us when using our mortgage advice and brokerage services.

How to contact us

If you have any questions about how we use your information, or want to exercise your rights over your information, you can contact us at:

Email: privacy@mgfinancialservices.uk

What information do we collect and process about you, what do we do with it and why?

When you visit our website

We use cookies to collect and analyse information about how you use or interact with our website (website analytics). We justify this processing based on your consent given through our cookie banner. Please see our Cookie Notice for more information. Cookies are small data files which are transferred and stored on your computer or device by a website you visit, and which may be used for different purposes.

When you contact us

If you get in touch with us – whether that is by phone, email, post or in person – you may provide us with personal information. For example, if you use our contact form, we ask for your name, email address and contact phone number. Only information that is needed to deal with your enquiry will be shared internally or with selected third parties. We process this information on the basis of legitimate interest. We will keep this information for no longer than six months from the last interaction with you, unless your enquiry progresses into a client relationship, complaint, legal matter, or regulatory matter, in which case we may retain the information for longer in line with our legal, regulatory, and record-keeping obligations.

When you use our services

In the process of using our services, we will collect and process the personal information we need to provide mortgage advice, brokerage services to you and/or insurance services. We use your information to help assess your circumstances, and communicate with you about your mortgage/insurance application enquiry. We process this information to meet our legal and regulatory obligations, and to support your mortgage/insurance application (perform a contract). We may also contact you for feedback data to meet FCA Consumer Duty requirements. We process this feedback data under our legitimate interest.

Client data may include the following types of personal data:

Identity data - such as your name, date of birth, marital status and nationality.

ID documents – such as a copy of your passport which may include your passport photo, passport number and country of birth.

Contact data – your address, email address and telephone number.

Financial data – information about your income, expenditure, credit history, bank details, savings and investments. We may also request your partners/household financial data. If we request your household financial data this is because it is a legal obligation.

Children’s data - If you have parental responsibility for children under the age of 13, it is also very likely that we will record information on our systems that relates to those children and potentially, to their Special Data.

Employment data – your employer, job title and employment status.

Property data – details of the property you intend to buy, sell or remortgage.

Special category data – health or vulnerability such as your medical history information, treatments and health status. May be required for some insurance products such as mortgage protection, life insurance or critical illness insurance.

Criminal disclosures – some types of insurance products may require criminal disclosures.

Correspondence data – information you provide when contacting us by phone, email, post or online forms.

Feedback data – information you share with us regarding your experience with MG Financial Services.

For marketing purposes

We may add you to our marketing database in several ways. When you sign up via our website to hear from us, we will collect your contact details and add you to our marketing database as requested. We keep this until you withdraw consent.

When you apply to work for us

When you apply for a position at MG Financial Services, the personal information you provide to us may include, your name, address (including email address), job and career history, educational background, professional membership and other relevant information from your CV.

We process the information you provide to us on the basis of discussing a possible contract of employment. We will keep this information for no longer than 12 months from the last interaction with you. After that time, we will retain your name, address (including email address), date of application and post applied for, and a brief and objective record of the employment decision taken until 5 years after our last contact with you.

Should you be employed by MG Financial Services please see our employee privacy notice.

Sharing your data

From time to time Your Personal Data will be shared with:

• Mortgage lenders / Finance lenders / Insurance providers

• Third parties assist us with your enquiry or application, or who are able to support your needs as identified. These third parties will include but may not be limited to, our compliance advisers, product specialists, estate agents, providers of legal services such as estate planners, conveyancing, surveyors and valuers (in each case where we believe this to be required due to your particular circumstances).

International Transfers

If any service providers store data outside the UK, we ensure appropriate safeguards such as UK GDPR‑approved Standard Contractual Clauses are in place.

How do we look after your data?

We have strict contracts with anyone with whom we share information to ensure they take appropriate care of your data, in line with relevant data protection legislation including but not limited to the General Data Protection Regulation 2016, the UK Data Protection Act 2018 (supplemented by the Data Usage and Access Act 2025).

We take the security of your data very seriously. We ensure we have various security measures including but not limited to: encrypted systems, secure servers, access controls, staff training, supplier vetting, policies aligned with FCA expectations.

Your rights

Your personal data belongs to you. We use it to provide our products and services, comply with our legal obligations, and improve the way we work.

Transparency

You have the right to understand what personal data we hold about you, how and where we use it, how long we keep it, and who we share it with. This information is set out in the details of our data processing below.

Access

You have the right to request a copy of the personal data we hold about you. We may ask you to confirm your identity before releasing your data. If you need the information for a particular reason, please let us know, as this may help us respond more effectively. Please note that no one can force you to request a copy of your personal data, and no one should ask you to share it with them.

Correction

You have the right to ask us to correct your personal data if you believe it is incomplete or inaccurate. We may ask you to confirm your identity and provide evidence to support the changes you request.

Erasure and the right to be forgotten

You have the right to ask us to delete your personal data where we no longer need it. In some cases, we may need to keep certain information to meet our obligations to you, comply with the law, or protect your interests and ours.

Review of automated decision-making

You have the right to request human review of decisions made about you solely by automated means.

Objection to processing based on legitimate interests

You have the right to object where we process your personal data on the basis of our legitimate interests, for example to improve our services or develop our business. More information about this type of processing is provided in this privacy notice.

If you object, we will carefully consider your request and respond to you. We will explain how we have taken steps to protect your rights and interests. You may also ask us not to process your data while we consider your objection.

Restriction of processing

In certain circumstances, you have the right to ask us to stop processing your personal data. These circumstances include where:

* you dispute the accuracy of the information we hold about you, while we verify it;

* we no longer need the personal data and would normally delete it, but you want us to keep it without otherwise processing it, for example because you may need it for a legal claim; or

* you believe that processing your data may cause you substantial harm or distress and that our processing is not justified under the law.

Direct marketing

You have the right to opt out of direct marketing at any time. If you do not tell us which types of marketing you no longer wish to receive, we will stop sending you all marketing communications.

To help us process your request, you will need to provide the relevant email addresses, phone numbers or other contact details. We will need to keep these details so that we can make sure you are not added back to our marketing lists by mistake. You may also opt back in to marketing at any time.

Data portability

In some circumstances, you have the right to ask us to transfer your personal data directly to another service provider. This can only be done where it is technically possible for both us and the other service provider. We, and they, will let you know if this is possible.

Withdrawal of consent

In some cases, we will ask for your consent to process your personal data. Where we rely on your consent, you have the right to withdraw it at any time. If you do so, we will stop the relevant processing. We will explain the consequences of withdrawing consent when we ask for it and again if you ask to withdraw it.

Further information and complaints

If you would like to know more about our processing of your data or would like to exercise any of your rights, or make a complaint, you can email us at privacy@mgfinancialservices.uk

Complaints will be acknowledged as soon as possible and in no longer than 30 days. We will without undue delay take appropriate steps to respond, make appropriate enquires and keep you informed of progress and the result of the complaint.

You also have the right to make a complaint to the Information Commissioner’s Office – the supervisory authority that handles data protection law in the UK. You can contact them at: 

https://ico.org.uk/make-a-complaint/

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Email: icocasework@ico.org.uk

Telephone: 0303 123 1113