Privacy policy

1. Who We Are

This privacy policy explains how Everest Mortgages (trading as Everest Mortgage Services) collects, uses, and protects your personal data when you use our website at everest-mortgages.co.uk or contact us about our services.

We are a whole-of-market mortgage broker and financial services firm based in Brighton & Hove, providing mortgage advice, protection products, and insurance services. We are authorised and regulated by the Financial Conduct Authority (FCA).

Data Controller:
Everest Mortgages (Everest Mortgage Services)
Brighton & Hove, East Sussex, United Kingdom
Tel: 01273 007740
Email: info@everest-mortgages.co.uk

For all data protection enquiries, please contact us using the details above.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity data – full name, date of birth, title
Contact data – email address, phone number, postal address
Financial data – income, employment status, existing debts, credit history, property details, and other information required to assess mortgage or insurance eligibility
Sensitive / special category data – health information where required for protection products such as critical illness or income protection cover
Technical data – IP address, browser type and version, device information, pages visited, and time spent on our website, collected via cookies and analytics tools
Marketing data – your preferences regarding receiving marketing communications from us
Communications data – any correspondence you send us via email, WhatsApp, phone, or our website enquiry forms

3. How We Collect Your Data

We collect personal data through the following means:

Enquiry forms, contact forms, and callback requests on our website
Appointment bookings via our online scheduling tool
Direct communications by phone, email, or WhatsApp
Information you provide during our fact-find and mortgage advice process
Lenders, insurers, credit reference agencies, and other third parties where relevant to processing your application
Cookies and analytics tools operating on our website (see Section 9)

4. How and Why We Use Your Data

We rely on the following legal bases under UK GDPR to process your personal data:

Providing mortgage and financial advice and arranging products on your behalf — performance of a contract / steps prior to entering a contract
Submitting applications to lenders, insurers, and providers — performance of a contract
Carrying out credit checks and identity verification — legal obligation / legitimate interests
Complying with FCA regulations and anti-money laundering requirements — legal obligation
Keeping records of advice given, as required by the FCA — legal obligation
Responding to your enquiries and providing customer service — legitimate interests / performance of a contract
Sending you information about our services, mortgage deals, or renewal reminders — legitimate interests (existing clients) / consent (new contacts)
Improving our website and services using analytics data — legitimate interests
Processing health data for protection product applications — explicit consent

We will never sell your personal data to third parties or use it for purposes incompatible with those set out above.

5. Who We Share Your Data With

In the course of providing our services, we may share your data with the following categories of recipients:

Mortgage lenders and banks – to submit and process your mortgage application
Insurance and protection providers – when arranging life insurance, critical illness, income protection, or other products
Credit reference agencies such as Experian, Equifax, or TransUnion, for identity verification and creditworthiness assessment
Solicitors and conveyancers – where required as part of a property purchase or remortgage
Compliance and regulatory bodies – including the FCA and HMRC where we are legally required to disclose information
Technology and software providers – such as our appointment scheduling tool, who process data on our behalf under appropriate data processing agreements
Meta (Facebook / Instagram) – via our Facebook Pixel, for advertising and retargeting purposes
Google – via Google Tag Manager and analytics, for website performance monitoring

All third parties we work with are required to process your data securely and only for specified purposes.

6. International Transfers

Some of our technology service providers, such as Meta and Google, may transfer or process your data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO) — to protect your data in line with UK GDPR requirements.

7. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in line with our regulatory obligations:

Mortgage advice records – minimum 6 years from the date advice was given, as required by the FCA
Insurance and protection records – for the duration of the policy plus 6 years
General enquiries and correspondence – up to 2 years if no service was provided
Website analytics data – as determined by third-party tools, typically 13–26 months
Marketing contact data – until you withdraw consent or opt out

After the relevant retention period, your data will be securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to request that we delete your data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data
Right to data portability – to receive your data in a machine-readable format
Right to object – to object to processing based on legitimate interests or for direct marketing purposes
Rights related to automated decision-making – to not be subject to solely automated decisions that significantly affect you
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@everest-mortgages.co.uk or call 01273 007740. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to help it function, improve your experience, and support our marketing activities. The technologies we currently use include:

Google Tag Manager – manages tracking scripts on the website (analytics / functional)
Facebook Pixel – tracks website visits for advertising and retargeting on Facebook and Instagram (marketing)
NitroPack – website performance and caching optimisation (functional)
Calendly – appointment booking and scheduling (functional)

Where cookies are not strictly necessary, we will only place them on your device with your consent. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner. For more information about managing cookies, visit allaboutcookies.org.

10. Security

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it from unauthorised access, loss, or disclosure. However, no method of data transmission over the internet is completely secure. If you have concerns about a specific communication, please contact us directly by phone.

11. Links to Other Websites

Our website may contain links to third-party websites such as lenders or insurers. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data to them.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. When we do, we will update the date at the top of this page. If we make significant changes that affect how we use your personal data, we will notify you by email or a prominent notice on our website.

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please get in touch:

Everest Mortgages
Brighton & Hove, East Sussex, United Kingdom
Tel: 01273 007740
WhatsApp: +44 7834 594951
Email: info@everest-mortgages.co.uk
Website: everest-mortgages.co.uk

Everest Mortgages is authorised and regulated by the Financial Conduct Authority (FCA).