Privacy Notice

We take data seriously. Please read below to understand how we receive, handle, and process your information.

Our Contact Details

Name: Montgomery Financial
Address: The Gloucesters
Strixton Manor Business Centre
Strixton
Wellingborough
NN29 7PA
Phone: 01933 829444
Email: enquiries@montgomeryfs.co.uk
Website: www.montgomeryfs.co.uk

The Type of Personal Information We Collect

We currently collect and process the following types of personal information:

• Personal identifiers, contacts, and characteristics (e.g. name and contact details)
• Financial information (to help prevent fraud and money laundering)
• Health and medical data (for insurance advice)
• Property information (for mortgage underwriting)
• Estate planning information (for will writing services, including details of assets, beneficiaries, executors, and guardians)

How We Get the Information and Why We Have It

Most of the personal information we process is provided directly by you to help us deliver mortgage, insurance, and/or will writing services.

We also receive data from:

• Lenders (to assist with advice, product setup, or ongoing servicing)
• Insurance companies (same as above)
• CRM and sourcing systems we use in day-to-day processing
• Third parties or publicly available sources where relevant to your application

How We Use Your Information

We use your data to:

• Provide mortgage advice
• Provide protection and insurance advice
• Perform underwriting checks
• Assess your eligibility for financial products
• Facilitate the writing of your will in conjunction with our introducer partner, The Will Place Limited
• Manage our ongoing client relationship with you, including reviews and re-engagement when existing products approach expiry
• Respond to enquiries and complaints
• Administer and protect our business and systems

We may share your information with:

• Lenders and insurers we recommend
• The Financial Conduct Authority (FCA)
• The Information Commissioner's Office (ICO)
• The National Crime Agency and other law enforcement
• Product sourcing and CRM providers (e.g. ACRE, Airtable, iPipeline, AIR Sourcing)
• The Will Place Limited, where you have requested will writing services. Their Privacy Policy is available at www.thewillplace.co.uk/privacy-policy. By proceeding with will writing services, you expressly consent to your data being shared with them for this purpose.
• AI tool providers, where used to support our services (see Our Use of AI below)

Lawful Basis for Processing

We rely on one or more of the following legal bases:

• Contractual obligation
• Legal obligation
• Legitimate interest
• Explicit consent (where required, including for special category health data and for sharing your data with The Will Place for will writing purposes)

How We Store Your Personal Information

We store your data securely in our CRM and case management systems (ACRE and Airtable). We also use regulated sourcing software. We retain your data for as long as required by law and our regulatory obligations. When no longer needed, it will be securely deleted.

Our Use of Artificial Intelligence (AI)

We may use AI-powered tools to support the delivery of our services. This can include tasks such as drafting correspondence, summarising information to support adviser decision-making, automating administrative workflows, and helping us analyse client needs.

Where AI tools are used in connection with your personal data, we apply the following safeguards:

• We only use AI tools that do not train on your personal data
• All AI-generated output is reviewed by a qualified human adviser before being used or communicated to you

AI tools we currently use include Claude (Anthropic) and Make.com, both used in compliance with UK data protection law.

We do not use AI to make final decisions about your mortgage, insurance application, or will. All recommendations and decisions are made by a qualified human adviser. We do not currently carry out solely automated decision-making that produces legal or similarly significant effects as defined under Article 22 of UK GDPR. If this changes, we will update this notice and seek your explicit consent where required.

Marketing Communications

With your consent, we may contact you with information about products and services we offer that we consider relevant to your circumstances. You can withdraw your consent to marketing at any time by contacting us at enquiries@montgomeryfs.co.uk or by clicking the unsubscribe link in any email we send you. Withdrawal of marketing consent does not affect our right to contact you for legitimate administrative or regulatory purposes.

Your Data Protection Rights

Under UK data protection law, you have the following rights:

• Right of access — ask for copies of your personal information
• Right to rectification — ask to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data in certain cases
• Right to restrict processing — ask us to limit what we do with your data
• Right to object — object to how your data is processed in some cases
• Right to data portability — request we transfer your data elsewhere
• Right not to be subject to solely automated decision-making
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

You don't have to pay for these rights. If you make a request, we'll respond within one month. To exercise any of these rights, contact: dpo@therightmortgage.co.uk

For rights relating to data held by The Will Place, contact them directly via www.thewillplace.co.uk/privacy-policy.

How to Complain

If you're concerned about how we've handled your data, you can complain to us at: dpo@therightmortgage.co.uk

Or contact the ICO directly: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: www.ico.org.uk