Privacy Notice
Endurance Mortgages Limited
Last updated: 01/06/2026
​
1. Who we are
This privacy notice explains how Endurance Mortgages Limited (“we”, “us”, “our”) collects and uses your personal data, and your rights over it.
- Company: Endurance Mortgages Limited, registered in England and Wales, company number 15060351.
- Registered address: Worting House, Church Lane, Basingstoke, Hampshire, RG23 8PX.
- Regulatory status: Endurance Mortgages Limited is an appointed representative of The Right Mortgage Ltd, which is authorised and regulated by the Financial Conduct Authority.
- ICO registration number: ZB580863.
- How to contact us about your data: info@endurance-mortgages.co.uk, or by post to the address above.
We are the data controller for the personal data described in this notice.
​
2. The personal data we collect
Depending on the services you use, we may collect:
- Identity and contact details — name, date of birth, address history, email, phone number.
- Financial information — income, expenditure, employment details, assets, liabilities, bank details, credit history and credit scores, and details of existing mortgages or loans.
- Property information — details of properties you own or wish to buy.
- Family and personal circumstances — marital status, dependants, and similar details where relevant to advice.
- Special category data — for protection products (such as life insurance, critical illness or income protection) we may need information about your health, medical history or lifestyle. We only collect this where necessary to arrange the cover you ask for, and we handle it under the additional safeguards described in section 4.
- Website and contact data — information you submit through our contact form or client portal, records of calls and messages, and limited technical data (see section 9 on cookies).
​
3. Where we get your data
Mostly directly from you. We may also receive data from lenders, insurers, credit reference agencies, fraud-prevention agencies, your previous adviser, and (where you agree) third parties acting on your behalf.
​
4. Why we use your data, and our lawful basis
- Providing mortgage and protection advice and arranging products for you
Lawful basis (UK GDPR Article 6): Performance of a contract / taking steps to enter a contract
- Verifying your identity and meeting anti-money-laundering, FCA and other legal duties
Lawful basis (UK GDPR Article 6): Legal obligation
- Assessing affordability and submitting applications to lenders and insurers
Lawful basis (UK GDPR Article 6): Performance of a contract
- Keeping records to support a claim or defence and to evidence our advice
Lawful basis (UK GDPR Article 6): Legitimate interests and legal obligation
- Improving our service and the security of our website
Lawful basis (UK GDPR Article 6): Legitimate interests
- Sending you marketing about our services
Lawful basis (UK GDPR Article 6): Consent (you can withdraw it at any time — see section 8)
Where we rely on legitimate interests, our interest is running a compliant, well-run brokerage; we balance this against your rights and only proceed where appropriate.
Special category (health) data is processed under UK GDPR Article 9 — either with your explicit consent, or because processing is necessary for an insurance purpose under the Data Protection Act 2018. We will tell you which applies when we collect it.
​
5. Who we share your data with
We share data only where necessary, including with:
- The Right Mortgage Ltd (our principal) for compliance oversight and file checks;
- Lenders, banks, insurers and product providers to obtain quotes and submit applications;
- Credit reference and fraud-prevention agencies — searches may leave a footprint on your credit file and the agencies may keep a record. For details, see the Credit Reference Agency Information Notice (CRAIN): [insert CRAIN link — confirm with compliance];
- Our technology and administration providers, including Acre, our client-portal and case-management provider (portal.myac.re), our website platform, and our IT and email providers;
- Regulators, HMRC, courts and law-enforcement agencies where we are legally required to;
- Professional advisers such as auditors and compliance consultants.
We do not sell your personal data.
​
6. International transfers
Some of our providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place (such as UK adequacy regulations or the International Data Transfer Agreement) so your data stays protected. [Website hosted on wix.com]
​
7. How long we keep your data
We keep your data only as long as necessary. For advised mortgage and protection business we generally retain records for a minimum of six years after our relationship ends (and longer where a regulator, an ongoing product, or a legal claim requires it).
​
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data (this may be limited where we must keep records by law);
- restrict or object to certain processing;
- request portability of data you gave us;
- withdraw consent at any time where we rely on it (including for marketing — just tell us and we’ll stop).
To exercise any right, contact us using the details in section 1. We’ll respond within one month. There’s normally no charge. We may ask you to verify your identity first.
​
9. Cookies
Our website uses cookies. Strictly necessary cookies are always on; non-essential cookies (such as analytics) are only set with your consent, which you can give or refuse through our cookie banner and change at any time. See our Cookie Policy for details: [Cookie Policy].
​
10. Complaints
If you’re unhappy with how we’ve handled your personal data, please tell us first using the contact details in section 1 — we take complaints seriously, will acknowledge your complaint within 30 days, and will work to put things right.
​
You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO), at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
​
Complaints about the advice or products we arrange are handled separately under our FCA complaints procedure: [insert link to FCA complaints procedure].
​
11. Changes to this notice
We may update this notice from time to time. The “last updated” date at the top shows when it last changed.