Privacy Policy

MortgagesBooked ("we", "us") operates www.mortgagesbooked.co.uk — a platform that connects people looking for mortgage advice with FCA-authorised mortgage brokers. This policy explains what personal data we collect, why, and your rights over it.

Who we are

MortgagesBooked is the data controller for the personal data described here. You can contact us about anything in this policy at hello@em1.mortgagesbooked.co.uk.

What we collect and why

If you enquire about a mortgage

• Contact details — name, email address, phone number — so a broker can contact you about your enquiry.
• Enquiry details — the information you give in our forms, such as property value, deposit, mortgage balance, employment type and preferred appointment time — so we can match you with a suitable broker.
• We share these details with the mortgage broker who takes on your enquiry, so they can hold your appointment and advise you. Brokers on our platform are independent firms and act as data controllers for the advice they give you.

If you are a broker using our platform

• Account details — name, email, phone, company — to run your account, billing and support.
• Billing data — processed by Stripe; we never see or store full card numbers.
• Usage data — actions in the broker portal (claims, outcomes, settings) to operate the service.

Calendar data (Google and Microsoft)

Brokers can optionally connect their Google Calendar or Microsoft Outlook calendar so we can check when they are free before offering appointment slots.

• We request read-only free/busy access. We see only whether a time slot is busy or free — never event titles, descriptions, attendees or locations.
• Calendar data is used solely to determine availability for appointment booking. We do not use it for advertising, do not sell it, and do not share it with anyone.
• Connection tokens are stored encrypted (AES-256) and a broker can disconnect at any time from their portal settings, which deletes our stored tokens.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and analytics

We use cookies for essential site functions (such as keeping brokers signed in) and analytics/advertising measurement, including Meta (Facebook) and Google advertising tags, to understand which of our adverts lead to enquiries. You can control cookies through your browser settings.

How long we keep data

We keep enquiry and account records for as long as needed to provide the service and meet legal and accounting obligations, then delete or anonymise them. You can ask us to delete your data sooner (see your rights below).

Your rights

Under UK GDPR you can ask us to access, correct, delete or restrict the use of your personal data, object to processing, or request a copy of it in a portable format. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office (ICO).

Changes

If we make material changes to this policy, we will update this page and the date at the top.