Privacy Notice
This privacy notice explains how Excel Money Limited collects, uses and protects your personal data. We take your privacy seriously and handle your information in line with UK data-protection law.
1. Who we are
Excel Money Limited is a trading style of The Mortgage Shop (Barnsley) Limited, registered in England & Wales (company number 14723880) with registered office at Office 23, Silkstone House, Pioneer Way, Wath upon Dearne, S63 7JZ. We are authorised and regulated by the Financial Conduct Authority (firm reference 450713) and registered with the Information Commissioner's Office (registration Z6817340).
For the purposes of UK GDPR, we are the data controller for the personal data we hold about you.
2. The data we collect
Depending on which of our services you use, we may collect:
- Identity: full name, date of birth, gender, marital status, dependants, nationality, photo ID
- Contact: address, email, phone number(s)
- Financial: income, expenditure, assets, liabilities, bank statements, payslips, tax returns, credit history, deposit source
- Health (for protection insurance): medical history, smoker status, occupation, hobbies, only where relevant and only with your explicit consent
- Property: current address, intended purchase address, property type, valuation, ownership history
- Technical: IP address, browser type, device, pages visited (via website analytics)
- Communications: recordings of phone calls (for training and quality), email correspondence, meeting notes
3. How we use your data
We use your personal data to:
- Provide regulated mortgage, loan and protection advice
- Source products from the whole market and present recommendations
- Submit applications to lenders and insurers on your instruction
- Manage applications through to completion
- Conduct identity, fraud and anti-money-laundering checks (a regulatory requirement)
- Review your circumstances at renewal (typically every 2–5 years)
- Comply with our regulatory and legal obligations
- Improve our services and respond to feedback
4. Lawful bases
We process your personal data on one or more of the following lawful bases:
- Contract: to provide the services you've engaged us for
- Legal obligation: for AML/KYC, FCA reporting, tax, and other statutory requirements
- Legitimate interests: for fraud prevention, business administration and analytics
- Consent: for any marketing communications and for processing health data
5. Who we share data with
We share your data only where necessary, and only with:
- Lenders, insurers and providers you've instructed us to approach
- Credit reference agencies (Experian, Equifax, TransUnion) for soft and hard searches
- Conveyancing solicitors, where instructed by you
- Our regulators (FCA, ICO, HMRC) where legally required
- Our IT, accountancy and compliance suppliers, under written data-processing agreements
We do not sell, rent or share your data with third parties for their own marketing purposes.
6. International transfers
Your data is stored within the UK and EEA. Any transfer outside the UK/EEA (which is rare and only ever to specific cloud providers) is protected by approved transfer mechanisms including UK adequacy regulations, the International Data Transfer Agreement and Standard Contractual Clauses.
7. How long we keep it
We are required by FCA rules to retain mortgage advice records for the lifetime of the mortgage plus six years, and protection-policy records for the duration of the policy plus six years. After this, your data is securely deleted or anonymised. Marketing data is retained until you unsubscribe.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (a "subject access request")
- Rectify inaccurate data
- Erasure ("right to be forgotten"), subject to our regulatory retention obligations
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent at any time (without affecting the lawfulness of past processing)
- Complain to the Information Commissioner's Office at ico.org.uk
To exercise any of these rights, please email info@excelmoney.co.uk or write to us at the address above. We will respond within one calendar month.
9. Security
We take the security of your data seriously. Our systems are encrypted in transit and at rest. Access is restricted to authorised staff. We are ISO 27001-aligned, and we maintain professional indemnity insurance with Hiscox covering data-breach risk.
10. Cookies
This website uses essential cookies for basic functionality and (with your consent) analytics cookies to help us understand how visitors use the site. You can manage your cookie preferences via the consent banner shown on first visit, or in your browser settings. We do not use advertising or tracking cookies.
11. Changes to this notice
We review this notice annually and will publish any updates here. Material changes will be notified to existing clients by email.
12. Contact
If you have any questions about this notice or how we handle your data, please email info@excelmoney.co.uk, call 0800 448 0298, or write to:
The Data Controller
Excel Money Limited
Office 23, Silkstone House
Pioneer Way, Wath upon Dearne
S63 7JZ