We take your privacy seriously. This Privacy Statement explains what personal information we collect and how we use it.
Turney & Associates Ltd is responsible for processing the personal information you provide to us and we comply with the Data Protection laws in the United Kingdom and the EU General Data Protection Regulation (GDPR). We are registered with the Information Commissioners Office in the UK under the UK Data Protection Act 1998 (registration number Z9204167).
Your rights to how we use your personal information
It’s really important that you understand your rights in relation to your personal information – as well as how you can contact us if you have any questions or concerns. This section covers just that.
You have the right to see and receive a copy of any personal information we hold about you. This is known as a Subject Access Request and we will respond without delay with the maximum timescale being one month from the date of the request or 3 three months for complex requests. You also have the right to have any inaccurate information corrected. We’ll be happy to talk through these requests with you. But, as we’re sure you’ll appreciate, there’s a need for us to protect your confidentiality. The broker has the Right to object rights related to automated decision making and profiling.
One of the ways we protect your confidentiality is to check that anyone asking for personal information has the right to receive it. Sometimes we may ask you to prove your identity or provide a written authority before making information available.
To ask for a copy of your details, or to make a change to your details, please write to:
Data Protection Officer, Turney & Associates Ltd, 5-7 Covent Garden, Cambridge, CB1 2HS
You can also ask us to restrict access, stop processing, correct mistakes or delete the information we hold on you. It’s worth noting that in some cases we’re not always required to correct, delete or stop processing personal data, even if you ask us to.
In certain circumstances (e.g. where you provide your information to us (a) with consent to process it or (b) where the processing is necessary for the performance of our contract with you) you can require that we provide the information we hold about you either to you or a third party in a commonly used format. This only applies if we’re processing it solely using automated processes.
Complaints
We take the privacy of your personal information very seriously. But if you ever feel you need to complain about how we’ve handled things, you can contact us in any of the following ways:
- Write to Turney & Associates Ltd, 5-7 Covent Garden, Cambridge, CB1 2HS
- Email: sarah.turney@turneyassoc.co.uk
- Call: 01223 329666
If you’re still unhappy with any aspect of how we handle your personal information, you also have the right to contact the Information Commissioner’s Office (ICO). This is the supervisory authority that regulates handling of personal information in the UK. You can contact them in the following ways:
- Go to their website: www.ico.org.uk
- Call: 0303 123 1113
- Write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.
Why do we collect your personal information?
Rest assured, we only ever collect information that helps us provide our services to you. We will keep your information for as long as is needed and only for the following purposes:
- legitimate business activities
- statutory or legal obligations
- auditing and regulatory purposes
Your personal information is required to enter into any contract you may undertake with us as your broker for a mortgage or protection product, and for us to provide information on relevant products and services. Without this information, it would not be possible for us to provide these services.
Lawful basis for handling personal information
We understand that personal information is just that – personal. So when we process your personal data, we make sure we satisfy the conditions prescribed by data protection laws to do so. This section covers what those conditions are.
Data protection laws require that, to process your personal data, we must meet at least one prescribed condition for it. We rely on the following conditions for the activities we carry out.
Necessary for performance of a contract or to comply with the law
In most cases, you’ll provide information because you want to use our services. This means that our use of your information is governed by contract terms. It’s your choice to give us this information. If you choose not to, we may not be able to provide all the services you want.
This condition is one we rely on for data processing in the following scenarios:
- letting you know about significant changes to our products, terms or privacy policy
- confirming your identity and verifying the information you provide
- providing and improving customer support
- responding to your enquiries and complaints
- providing you with products and services and keeping you up to date with important changes and developments to their features and how they work
- managing offers and promotions
- understanding your requirements
- assessing risks
- updating, consolidating, and improving the accuracy of our records
Consent
Where we collect other information from you – or when third parties do so for us – we always ask for your consent first. For example, before you use our website you’ll be asked to consent to us using cookies to collect data about the device you’re using. If you don’t want to give consent, or you remove your consent at a later point, we may not be able to provide all the services you want.
We also seek your consent in the following scenarios:
- Marketing – To help you explore all your options, from time to time we’d like to let you know about products, services and offers from Turney & Associates Ltd.
- Administering promotional activities
Necessary in our legitimate interests or those of a third party
In the United Kingdom, organisations can use personal information where the benefits of doing so are not outweighed by the interests or fundamental rights or freedoms of individuals. The law calls this the “Legitimate Interests” condition for processing.
We rely on this condition for processing personal data for the following benefits:
- Helping to prevent and detect crime such as fraud and money laundering – Fraud and money laundering cost the British economy billions of pounds every year. This cost ultimately reaches the public in the form of higher prices. We can help stop this from happening by using your personal data to avoid fraud and identity theft.
- Complying with legal and regulatory requirements – We must comply with various legal and regulatory requirements. And the services we provide also help other organisations comply with their own legal and regulatory obligations. For example, Turney & Associates Ltd is regulated by the Financial Conduct Authority and Prudential Regulation Authority, who may require us to provide information to them as part of our regulatory responsibilities.
- Training our staff – To offer you the best possible standards of service, we use the information we collect to train our staff so they can better meet your needs.
- Marketing services – Like any commercial organisation, we run a business and – where necessary – process information that helps us do this. We’ve put in place various safeguards to make sure that the individuals whose personal information we handle are not disadvantaged by the activities we use their personal data for. These include making sure people can access the information they need to understand how their personal data will be used by us. We also try to make sure people are aware of the rights they have to obtain the information we hold and to have their information corrected or restricted – and how to complain if they’re unhappy.
- Reporting and analytical purposes – Processing personal information helps us analyse the service we’re providing and spot ways to improve.
- Tracking activity – Understanding how people use our website or get in touch with us helps us to improve our services.
- Maintaining our records and other administrative purposes – We always strive to provide the most accurate information to our customers and clients.
- Resolving complaints and disputes – If you have a reason to make a complaint, we’ll use your information to help us look into things for you.
- Improving data accuracy and completeness
- Email tracking – This helps us to improve our communications to our customers.
The personal information we collect
Personal information collected can include:
- Identity data including forenames, last name, maiden name, date of birth, gender, marital status, and username or similar identifier
- Contact data including home address, email address and telephone numbers
- Employment details
- Financial data such as (bank statements, income & expenditure details, debit card details, savings, debts such as loans and credit cards, other assets, and employer & pension benefits)
- Sensitive personal data – For products such as insurance, we’ll need to collect and process information that the Data Protection Act defines as “sensitive”. This could include details about your health. If we need to ask for anything like this, we’ll always explain what information we require and why. Rest assured, we’ll always process and store this information securely.
- Other related information to support your application and confirm your identity (such as UK residency status, retirement age)
- Payment information e.g. If you apply for a mortgage through us, we’ll ask you for your direct debit details to pass onto your chosen lender so that they can collect your mortgage payments. Also, if the product you’ve applied for carries a cost – for example, a valuation fee – we’ll ask you to provide payment information such as your debit card or credit card details.
Joint applicants
If you give personal information about someone else (such as a joint applicant), then it’s really important to make sure you have their permission to do so.
If someone gives information about you – or you give us details about someone else – we may add it to the personal information we already hold about you or them. This will only be used in the ways we describe in this privacy notice.
The majority of this personal information is collected by our mortgage advisors when completing our fact find for a mortgage or protection product, from our mortgage administrators as part of our internal compliance checks or from the enquiry forms on our website.
How do we use your personal information?
As your broker, we use your personal information to discuss your personal circumstances with mortgage lenders and/or protection providers, in order to determine the most appropriate product for your needs.
The personal information you provide may be used by automated decision-making systems to check your eligibility for products and services. For example, a lender may then undertake credit enquiries upon receipt of your mortgage application and this will be one of the sources of information the Lender might use to make a decision.
We use your personal data to confirm your identity. When any of our customers apply for a product, the law requires us to check their identity. This makes it harder for criminals to use financial systems, or to use false names and addresses to steal the identities of innocent people. Checking everyone’s identity is an important way of fighting money laundering and other criminal activities.
Your personal information may be used by Turney & Associates Ltd for marketing purposes to provide continuing advice as your broker and to inform you about relevant products and services.
We will also use your personal data to let you know about significant changes to our services, terms or privacy policy.
Complying with the law – As you might expect, the law requires us to comply with lots of regulations – including ones about processing customer information. Where necessary, we use your personal data to allow us to fulfil our legal requirements.
Who we share your personal information with?
Because of the nature of our role as a mortgage adviser, we share the personal information you give us with people who need to handle it so that we can provide our services to you.
We disclose personal information to third parties such as lenders and protection product suppliers, but only to what is necessary to conclude the mortgage and/or protection contracts and the ongoing servicing of these contracts.
It may also be necessary to share your personal information with non-affiliated companies who perform support services on our behalf including those that provide professional, legal or accounting advice to Turney & Associates Ltd.
These companies are required to ensure appropriate security measures are in place and maintain the confidentiality of your information, and to use your personal information only in the course of providing such services as specified by Turney & Associates Ltd.
Finally, under limited circumstances, your personal information may be disclosed to third parties as permitted by, or to comply with, applicable laws and regulations, for instance, to meet our obligations to the Financial Conduct Authority (FCA), the Prudential Regulation Authority (PRA) and when responding to subject access requests, proceedings of a court of law or similar legal process, to protect against fraud, and to otherwise cooperate with law enforcement or regulatory authorities.
The personal information you provide will not be passed to any third-party organisation for marketing purposes.
Sharing personal information within the European Economic Area (EEA)
As a UK based company, all the personal information we process is protected by European data protection standards. We do not share personal data with organisations outside of the UK.
How we keep your personal information secure
We’re committed to keeping your personal information safe and sound. In this section, you’ll read about the security measures we take to protect our customers’ data.
At Turney & Associates Ltd, we understand how important it is to keep your personal information secure. We use a variety of technologies and procedures to protect your private data from being accessed, used or disclosed in any way it shouldn’t be. For example, we store the information you give us on computer systems with limited access, which are located in controlled facilities. We also regularly review our policies and procedures to make sure they remain relevant.
The security arrangements we’ve put in place include physical, organisational, and technological measures. Together, they help to protect the personal information we hold from risks including:
- loss
- theft
- unauthorised access, collection, use, disclosure, copying, modification, disposal and destruction
We may have to share your information with third parties to carry out some of our services, including lenders and insurers among others. We require every third party that we share information with to keep up adequate security safeguards and comply with all the required laws and standards for protecting personal information.
What happens if there is a serious data breach
A serious breach is defined in GDPR as one that is likely to result in a high risk to the rights and freedoms of individuals. In the unlikely event this occurs you will be informed right away. We will explain the likely consequences of the breach and the measures taken to deal with the breach including any measures to mitigate any possible adverse effects.
How long we keep your personal information for
Don’t worry about your information sitting around in a database or file forever – we only keep it for as long as we need to.
As the reasons that we keep your personal information can vary – depending on what it is and what products or services you’re signed up to – we may need to keep certain details for longer than others. For example, details of your mortgage may be kept for several years but in contrast, payment details provided to pay for a survey will be securely destroyed following completion of the transaction.
In every case, we regularly reassess whether we need to hold your personal information. And anything that we don’t need anymore will be securely disposed of.
Personal information and marketing purposes
You will have the opportunity to indicate if you wish to receive communications from Turney & Associates Ltd about relevant services and products, together with other marketing communications when you provide your personal information.
You can opt-out of receiving these types of communications at any time by contacting our Data Protection Officer at sarah@turneyassoc.co.uk
Cookies
We use analytics cookies to collect non-personal / anonymous data to help us improve the website.
See more in our cookie policy.
Other websites
This website contains links to other websites. This privacy policy only applies to this website. When you visit another website, you should read their privacy policy.
Changes to our privacy policy
We regularly review this policy and we will place any updates on this page and/or inform you of any changes.
This policy was last updated 27/02/26.
