Privacy Policy

1. Who we are

Property Link Homes Ltd (“we”, “us”, “our”) is a mortgage and protection broker registered in England and Wales, company number 05234968. Our registered office is at 10–10A North Street, Ripon, North Yorkshire, HG4 1JY. We are authorised and regulated by the Financial Conduct Authority, firm reference number 429765, and are the data controller for the personal information described in this policy.

2. What information we collect

Information you give us

• Through our website forms and questionnaire: your name, email address, phone number, how you'd like to be contacted, and your answers about what you need (for example property value, deposit, loan amount, employment status, income or existing cover)
• When we advise you: your address history, date of birth, identity documents, income, outgoings, payslips, bank statements, employment details, credit history, dependants and details of the property
• For protection insurance: information about your health, medical history and lifestyle (such as smoking). This is “special category” data and we only collect it when it is needed to arrange cover
• Anything you tell us by phone, email, letter or in person

Information from others

• Joint applicants, who should make sure you are happy for them to share your details
• Lenders, insurers, credit reference agencies and fraud prevention agencies
• Estate agents, solicitors or other professionals who introduce you to us

Information collected when you use our website

Technical data such as your IP address, browser, device and the pages you visit. Google Analytics and Google Ads cookies are only used if you accept them — see our Cookie Policy.

3. How we use your information and our legal basis

Under UK data protection law we must have a lawful reason (“legal basis”) for each way we use your information:

If you don't provide information that a lender or insurer needs, we may not be able to arrange a product for you.

4. Who we share your data with

We only share your information where needed for the purposes above:

• Mortgage lenders, insurers and other product providers, to arrange products for you
• Credit reference and fraud prevention agencies (usually via the lender or insurer)
• Solicitors, conveyancers, surveyors and estate agents involved in your transaction
• Our compliance advisers and auditors
• Regulators and authorities where we are required to, such as the Financial Conduct Authority, the Financial Ombudsman Service, HMRC and law enforcement

We also use trusted service providers who process data on our behalf, under contract and only on our instructions:

• Vercel — hosts our website and provides cookie-free visitor statistics
• Supabase — secure, encrypted database where website enquiries and our client records are stored
• Google — Google Workspace (email and spreadsheets where we record enquiries), and Google Analytics and Google Ads if you accept those cookies
• Resend — delivers emails about new enquiries to our team, and appointment confirmations and reminders to you
• Microsoft — our advisers' calendars, and the Teams video meetings for appointments you book with us
• The SMS Works — sends appointment reminder texts, if you choose to receive them
• Anthropic— provides the AI (Claude) built into our staff system, which our advisers use to help prepare appointment notes and recommendation letters, summarise payslips and bank statements, and find information in our own records. Anthropic acts only on our instructions under a data processing agreement, does not use your information to train its AI, and deletes it from its systems within 30 days, unless its automated safety systems flag content as misuse, which it may keep for up to two years. Everything the AI prepares is checked by an adviser before it is used
• Our staff system— an app used only by our staff, protected by two-step sign-in, where we keep client records and appointments and are alerted when a new enquiry arrives
• Our IT, phone and document storage providers

We do not sell your data, and we do not share it with third parties for their own marketing.

5. Transfers outside the UK

Some of our service providers (for example Google, Vercel, Resend, Microsoft and Anthropic) are based in, or may process data in, the United States or the European Economic Area. Where your data is transferred outside the UK, we make sure it is protected by an approved safeguard, such as UK adequacy regulations (including the UK–US Data Bridge) or the ICO's International Data Transfer Agreement or Addendum. For example, Anthropic's data processing agreement includes the ICO's International Data Transfer Addendum.

6. How long we keep your data

• Clients: at least six years from the end of our advice or the completion of your transaction, as required by FCA rules, and longer where needed to deal with complaints or legal claims
• Enquiries that don't go ahead: up to 12 months from your last contact with us
• Website analytics: no more than 14 months in Google Analytics
• Marketing: until you unsubscribe

7. Marketing

We will only send you marketing, such as newsletters or podcast updates, if you have asked for it or you are an existing client and we are telling you about similar services. Every message includes a way to unsubscribe, or you can email us at any time.

8. Automated decisions

We do not make decisions about you based solely on automated processing. Lenders and insurers may use automated credit scoring or underwriting when assessing your application; their privacy notices explain how, and we will provide them when we pass on your application.

Our advisers use AI tools to help draft paperwork and summarise the documents you give us (see section 4). The AI does not make any decision about you: an adviser checks its work, and every recommendation we make is an adviser's own. If you would prefer we did not use AI tools with your documents, tell your adviser and we will prepare everything by hand.

9. Keeping your data secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections, access controls and limiting access to staff who need it.

10. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased (unless we must keep it by law)
• Restrict or object to how we use your data, including objecting to direct marketing at any time
• Receive your data in a portable format
• Withdraw your consent at any time, where we rely on consent

To exercise any of these rights, contact us at info@propertylinkhomes.com. There is normally no charge, and we will respond within one month.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We will update this policy when the way we use personal data changes. The date at the top shows when it was last updated.

13. Contact us

If you have any questions about this policy, please contact us: