Privacy policy.

1. Who we are

A&L Financial Solutions Ltd (“we”, “us”, “A&L”) is the data controller responsible for your personal information under UK data protection law. We are registered in England & Wales, company number 09731522, with our registered office at 20 The Pines, Kingswood, Hull, HU7 3GT.

We are an appointed representative of PRIMIS Mortgage Network, a trading name of First Complete Limited, which is authorised and regulated by the Financial Conduct Authority. For some regulated activities, PRIMIS may be a joint or additional controller of your data. Where that is the case, PRIMIS’ own privacy notice also applies.

2. What information we collect

To provide mortgage and protection advice we need to collect certain personal information about you and, where relevant, your partner or dependants. This typically includes:

• Identity information — name, date of birth, marital status, dependants, nationality.
• Contact information — postal address, email, phone number.
• Financial information — income, expenditure, savings, debts, bank statements, payslips, tax returns.
• Employment information — employer, job title, length of service, self-employment records.
• Property information — current property, target property, valuation.
• Health and lifestyle information — for protection advice, we may need details of medical history, smoking status and hazardous activities.
• Identity verification — passport, driving licence, or utility bills to comply with anti-money-laundering rules.

3. How we collect it

We collect information directly from you (during calls, meetings, forms and email exchanges) and, with your permission, from third parties including credit reference agencies, previous employers, product providers and identity-verification services.

4. Why we use it (lawful basis)

We use your personal information to:

• Provide you with mortgage and protection advice you have asked for (contract).
• Submit mortgage and insurance applications on your behalf (contract).
• Meet our legal and regulatory obligations, including anti-money-laundering, FCA record-keeping, and Consumer Duty requirements (legal obligation).
• Communicate with you about your ongoing policies, remortgage timing, and product reviews (legitimate interest and contract).
• Improve our services and understand which channels bring in enquiries (legitimate interest).
• Send you marketing about relevant services, where you have opted in (consent).

5. Who we share it with

We share your information only where necessary to provide the service you have asked for. That includes:

• Lenders and insurers we submit applications to on your behalf.
• PRIMIS Mortgage Network / First Complete Limited, our regulatory principal.
• Solicitors, surveyors and estate agents where they are involved in your transaction and where you have asked us to.
• Credit reference and identity-verification agencies.
• The Financial Conduct Authority, HMRC, and law enforcement where required by law.
• IT and administrative service providers we use to run the business (secure client-management software, email, cloud storage).

We do not sell your data to third parties for marketing purposes.

6. How long we keep it

Our regulator PRIMIS requires us to retain client files for a minimum of six years after the end of the relationship. For protection policies with a longer term, we retain files for the life of the policy plus six years. Some anti-money-laundering records are retained for five years from the end of the business relationship.

7. Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete personal information in certain circumstances.
• Restrict or object to certain kinds of processing.
• Ask for your information to be transferred to another provider (data portability).
• Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, contact us using the details below. We will respond within one month.

8. Making a complaint

If you are unhappy with how we have handled your personal information, please tell us first so we can put it right. If you remain unhappy you can complain to the Information Commissioner’s Office at ico.org.uk, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

9. Contact

Questions about this privacy policy or your personal information can be sent to: