CUSTOMERS AND SUPPLIERS PRIVACY POLICY

1. GENERAL

1.1 Mortgage Advice Hut(“we” “us” “our”) is committed to protecting and respecting your privacy. We are the data controller and will process your personal data in accordance with the Data Protection Act 1998 as amended or replaced by the General Data Protection Regulation 2016 and any national laws which relate to the processing of personal data (“data protection legislation”).
1.2 Please read the following carefully to understand our views and practices regarding Your Data and how we will treat it.
This policy applies to information we collect about:
• Visitors to our website(s)
• Customers
• Introducers
• Suppliers

2. VISITORS TO OUR WEBSITES

2.1 We may collect and process personal data about you in the following circumstances:
2.1.1 when you complete the online contact forms on our website (“Site”), providing us with your name, address, email address, and contact number;
2.1.2 whenever you provide information to us when reporting a problem with our Site, making a complaint, making an enquiry, or contacting us for any other reason. If you contact us, we may keep a record of that correspondence;
2.1.3 when you visit our Site, we may retain details such as traffic data, location data, weblogs, and other communication data, and the resources that you access; and
2.1.4 whenever you disclose your information to us, or we collect information from you in any other way, through our Site.

2.2 We may also collect data in the following ways:

2.2.1 IP Address
We may collect information about your device, including where available your Internet Protocol address, for reasons of fraud protection. We may also collect information about your device’s operating system and browser type, for system administration and to report aggregate information. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.

2.2.2 Cookies
Our Site uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse and allows us to improve our Site.
We use the following types of cookies:

Essential cookies – necessary for the website to function correctly.

Analytics cookies – we use Google Analytics to collect anonymised data about website usage, such as pages visited, time spent on site, and traffic sources. This helps us understand and improve our website.

Performance and tracking cookies – we may use these to monitor the performance of campaigns and measure conversions (for example, if we run Google Ads or other marketing campaigns in future).

You can control cookie settings in your browser or through cookie consent tools on our website. By continuing to use our website, you consent to the use of cookies as described above.

2.3 We may use your personal data for our legitimate interests in order to:
2.3.1 provide you with information or services that you requested from us;
2.3.2 respond to an enquiry submitted via our online contact forms;
2.3.3 allow you to participate in interactive features of our Site, when you choose to do so;
2.3.4 ensure that content from our Site is presented in the most effective manner for you and for your device;
2.3.5 improve our Site and services;
2.3.6 process and deal with any complaints or enquiries made by you; and
2.3.7 contact you for marketing purposes where you have signed up for these (see section 5 for further details).

Website Links
Our Site may, from time to time, contain links to and from the websites of third parties. Please note that if you follow a link to any of these websites, such websites will apply different terms to the collection and privacy of your personal data and we do not accept any responsibility or liability for these policies. Please check before you submit your information to these websites.

3. CUSTOMERS

3.1 We will collect details such as name, address, email address, contact number, date of birth, national insurance number and financial information in order to provide services to customers. We may also receive details of credit checks undertaken where you have supplied these to us.
3.2 We will share customer personal information with our employees to manage our relationship with you and we will retain customer personal data for 80 years.
3.3 We will use your personal data to comply with our contractual obligations and share data with financial institutions who can assist in providing financial services to customers, including product providers, lenders, banks, insurers, fund managers, platform providers and third-party paraplanners (including Tenet* paraplanners).
3.4 We will use customer personal data for our legitimate interests including:
3.4.1 sharing personal data with Tenet* as they are responsible for the services we provide to our clients and have a legal obligation to monitor our compliance with the FSMA and Financial Conduct Authority rules. Further details on how Tenet uses personal data can be found at www.tenetgroup.co.uk
or by contacting Tenet on 0113 239 0011;
3.4.2 with your consent, marketing our other products and services by mail and email; and
3.4.3 with your consent, obtaining your sensitive personal data from third parties, including information relating to health, ethnic origin, or criminal prosecutions from employers, credit reference agencies, fraud prevention agencies and other similar organisations.
3.5 We will not transfer any customer personal data outside the European Economic Area (“EEA”).

Tenet means Tenet Group Limited, Tenet Limited, TenetConnect Limited, TenetConnect Services Limited, TenetLime Limited, and its associated companies.

4. SUPPLIERS

We will collect details such as contact names, address, email address and telephone number in order to contact you about goods and/or services we have ordered from you, to comply with our contractual obligations and to place further orders. We may share your personal data with our employees to manage our relationship with you and we will keep your personal data for as long as we require your goods and/or services, subject to a maximum of six years from the date of our last contact with you. We will not transfer your personal data outside the EEA.

5. MARKETING

5.1 We may use customer personal data to provide you with details about our services, products, business updates and events which we think may be of interest.
5.2 You have the right to opt-out of receiving this information at any time. To opt-out, you can:
5.2.1 tick the relevant box situated in the form on which we collect your information;
5.2.2 click the unsubscribe button contained in any such communication received; or
5.2.3 email us at hello@advicehut.co.uk
or call 01772 846147 providing your name and contact details.
5.3 Where you have subscribed to receive marketing correspondence from us, we will keep your personal data for six years from when you subscribed or until you unsubscribe (whichever is earlier).

6. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

6.1 We process your personal data for the following reasons:
6.1.1 for performance of a contract we enter into with you;
6.1.2 where necessary for compliance with a legal obligation we are subject to; and
6.1.3 for our legitimate interests (as described within this policy).
6.2 We will also process your personal data, including personal sensitive data, where we have obtained your explicit consent.

7. DISCLOSURE OF YOUR DATA TO THIRD PARTIES

7.1 In addition to the third parties mentioned previously in this policy, we may disclose your personal data to third parties for the following legitimate business purposes:
7.1.1 staff members in order to facilitate the provision of services to you;
7.1.2 IT software providers that host our website and store data on our behalf; and
7.1.3 to a prospective buyer of some or all of our business or assets, in which case personal data will also be one of the transferred assets.
7.2 We may disclose your personal data to the police, regulatory bodies, legal advisors or similar third parties where required to comply with any legal obligation, enforce agreements, or protect our rights, property, or safety of our customers and others.
7.3 We will not sell or distribute your personal data to other organisations without your approval.

8. CROSS-BORDER DATA TRANSFERS

We do not transfer personal data outside the EEA. Where this is required in the future, we will ensure appropriate safeguards are in place to ensure compliance with data protection legislation.

9. DATA SECURITY

9.1 Information you provide to us is stored on our secure servers. We have implemented appropriate physical, technical and organisational measures designed to secure your information against accidental loss and unauthorised access, use, alteration or disclosure.
9.2 Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential.
9.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted to our Site; any transmission is at your own risk.

10. ACCESS TO, UPDATING, DELETING AND RESTRICTING USE OF YOUR DATA

10.1 It is important that the personal data we hold about you is accurate and current. Please keep us informed if it changes.
10.2 Data protection legislation gives you certain rights in relation to your personal data, including the right to object to processing, or to withdraw your consent.
10.3 You can also ask us to:
10.3.1 update or amend your personal data if you feel this is inaccurate;
10.3.2 remove your personal data from our database entirely;
10.3.3 send you copies of your personal data in a commonly used format or transfer your information to another entity;
10.3.4 restrict the use of your personal data; and
10.3.5 provide you with access to information held about you.
10.4 We may request specific information from you to confirm your identity. If we cannot comply with your request, we will inform you of the reasons why, subject to any legal restrictions.
10.5 Please send any requests to our Privacy Officer, Rachel Watson, at hello@advicehut.co.uk
or call 01772 846147. We reserve the right to charge a reasonable fee for access requests.

11. RIGHT TO WITHDRAW CONSENT

Where you have provided consent to the collection, processing, and transfer of your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal. To withdraw your consent, contact us at hello@advicehut.co.uk
.

12. CHANGES TO OUR PRIVACY POLICY

We reserve the right to update this privacy policy at any time. Any changes will be posted on this page. We will notify you if there are any changes that materially affect how we collect, store, or process your personal data. If we wish to use your previously collected data for different purposes, we will provide notice and seek your consent where required by law.

13. CONTACT US

We have appointed a Privacy Officer to oversee compliance with this privacy policy. If you have any questions, comments or requests regarding this policy or how we use your personal data, please contact:
Privacy Officer: Rachel Watson
hello@advicehut.co.uk

01772 846147

You also have the right to contact the Information Commissioner’s Office if you are unsatisfied with our response: https://ico.org.uk/global/contact-us/

Last updated: October 2025