Privacy Policy | A&S Mortgages

This policy explains how A&S Mortgages collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data Controller: A&S Mortgages is an appointed representative of CDEALS LTD, which is authorised and regulated by the Financial Conduct Authority (FCA No. 600521). Registered in England and Wales, Company No. 08479134. Registered address: 2a Hilltop, Off Horringer Road, Bury St Edmunds, IP33 2EA.

For any data protection enquiries, please contact us at: [email protected]

2. What personal data we collect

Contact and enquiry data

When you complete our consultation booking form, we collect:

Your full name
Your phone number
Your preferred time to be called

We do not ask for, or store, financial information, mortgage account details, or sensitive personal data at this stage. Any such information is collected only during a subsequent consultation call.

Analytics and marketing data (with your consent)

If you accept cookies, we may collect anonymised data about how you found our website and how you interact with it. This includes general location data (region-level only), the pages you visited, and the actions you took. This information is used to improve our website and measure the effectiveness of our advertising.

3. How we use your personal data

Purpose	Legal basis	Retention
To call you back and arrange a free mortgage consultation	Legitimate interests — you have requested this contact	12 months from submission, or until the enquiry is resolved
To record the outcome of your enquiry for FCA compliance purposes	Legal obligation — FCA regulated firm record-keeping requirements	6 years from the date of any advice given, in line with FCA rules
To measure website performance and optimise advertising (analytics & marketing cookies)	Consent — you may accept or decline via the cookie banner	Up to 26 months (Google Analytics default)

We will never sell your personal data to third parties, or use it for any purpose other than those listed above.

4. Who we share your data with

We share your data only where necessary to provide the services described above:

Formspree (form processing)

Our consultation booking form is processed by Formspree, Inc. Your submission is transmitted securely and forwarded to our secure email address. Formspree operates as a data processor on our behalf. View their privacy policy at formspree.io/legal/privacy-policy.

Google (analytics & advertising — consent required)

With your consent, we use Google Tag Manager and Google Analytics 4 to understand how visitors find and use our website. Google may process data in the United States; appropriate safeguards (Standard Contractual Clauses) are in place. View Google's privacy policy at policies.google.com/privacy.

Lifetime mortgage lenders

If you proceed to a mortgage application following our consultation, we will share necessary personal and financial information with the relevant lender(s). We will inform you clearly and obtain your explicit consent before doing so.

5. Cookies

Cookies are small text files stored on your device. We use the following categories of cookie:

Category	Purpose	Consent required
Strictly necessary	Our website does not set any strictly necessary cookies. Our contact form is processed by Formspree and does not rely on cookies set on our domain.	No
Analytics	Google Analytics 4 (via Google Tag Manager) measures visitor behaviour and traffic sources to help us improve our website.	Yes — set only after you accept via the cookie banner
Marketing	Google Ads conversion tracking (via Google Tag Manager) records which ads lead to enquiries, so we can measure and improve campaign performance.	Yes — set only after you accept via the cookie banner
Preference	A single cookie (`as_cookie_consent`) stored in your browser's local storage to remember your cookie preference and avoid showing the banner on every visit.	No — necessary to remember your choice

You can change or withdraw your consent at any time by clearing your browser's local storage, or by contacting us at [email protected]. Note that withdrawing consent will not affect the lawfulness of processing that occurred before withdrawal.

6. Your rights under UK GDPR

You have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data where there is no legal obligation to retain it
Right to restrict processing — to ask us to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. We may need to verify your identity before processing a request.

7. How to complain

If you believe we have handled your personal data incorrectly, we would ask that you contact us first so we can try to resolve the matter. If you remain unsatisfied, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113 • ico.org.uk/make-a-complaint

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Where changes are material, we will take reasonable steps to make you aware — for example by updating the notice on our website.