Privacy Policy
This privacy policy is for this website https://glow.mortgage/ and governs the privacy of its users who choose to use it.
As a Data Controller, we comply with Data Protection laws in the United Kingdom and the EU General Data Protection Regulation (GDPR). This Privacy Policy details how we process your personal data.
Under the GDPR we are required to notify the Information Commissioner’s Office (ICO) about our use of personal data.
The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy.
Why and How We Process Information
Sale of Personal and Financial Data to Third Parties
Purpose and Consent for the Sale of Data
At glow.mortgage we collaborate with reputable third-party companies that may offer products or services beneficial to our clients. With your explicit consent, we may share certain personal and financial information with these partners to provide you with tailored offers and insights relevant to your financial interests and requirements.
Before sharing your personal and financial data for these purposes, we will seek your explicit consent. This ensures you have complete control over whether your information is shared with third parties for marketing or lead generation purposes related to financial services.
How We Sell Personal and Financial Data
- Information We Sell: We will explicitly specify the types of personal and financial data that may be sold to third parties. This could include your name, email address, telephone number, financial status, and other details pertinent to the financial products or services you have shown interest in.
- Recipients: We will provide a list or categories of third-party companies to whom your personal and financial data may be sold. These partners are meticulously selected and are obligated to adhere to data protection laws as well as our privacy standards.
- Purpose of Sale: The purposes for which your data may be sold include providing you with bespoke marketing offers, financial product recommendations, and other services that may be of interest to you in the financial sector. We ensure that these purposes are clearly defined and that your data is used solely in a manner consistent with your consent.
Your Rights and Choices
- Withdrawal of Consent: You have the right at any time to withdraw your consent for us to sell your personal and financial data to third parties. Upon your withdrawal, we will cease to sell your data forthwith and will provide clear instructions on how to withdraw your consent.
- Access to Your Data: You are entitled to request access to the personal and financial data we hold about you, including details on its usage and the entities to whom it has been disclosed.
- Correction and Erasure: You have the right to request the amendment of inaccurate data and, under certain conditions, to request the deletion of your personal and financial data from our records.
Enquirers
When you contact us or request a mortgage quote, we ask for some personal information. You are under no obligation to provide this information to us. Providing that information, enables us to give you the right information or services that you ask for or notify you of further information required to facilitate that service.
If we would like to use your information for any other purpose than those stated above, we will contact you to ask for your consent.
As a minimum, we will hold your full name, email address and phone number for the purposes specified above. If you do not become a client of ours, your information will be erased after a period of time in line with our retention policy.
Visitors to Our Website
This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies with all UK & EU regulations and requirements for user privacy. IP addresses are collected to see how users interact with our site.
Use of Cookies
This website uses cookies to better the users experience while visiting the website. Please read our full cookie policy here: https://glow.mortgage/cookie-policy/
You may withdraw or affirm your consent at any time. Details of how to do this are on our Cookie Policy Page. Users are also advised that if they wish to deny the use and saving of essential cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies.
Warning: If you delete cookies via your web browser you will not be able to use all of the features we offer, this website will not display properly and many of our online services will not be accessible. You will not be able to store your preferences and previously saved conversation history will not be available by default on your computer or device.
What information is Recorded on our website?
- Usage patterns
- Tech specs
- Navigation
- Personal Information (except sensitive information – see below)
- Clicks
- Mouse movements
- Screen Display
- Scrolling
- Typing (except sensitive information – see below)
- Browser
- Device type
- Operating system
- Viewfinder size
- Script errors
- IP addresses
- Pages visited
- Referrers
- URL parameters
- Session duration
- Display name
- Email address
- Phone number
First and foremost, we record your movements and actions on our website in order to provide live chat support and assistance with your mortgage application if you get stuck. This helps us to advise on corrective actions when we replay your recorded session. We also record and monitor your movements across our website to identify bugs. Bugs and errors are often particular to a specific web browser or device type. This information helps developers build and ship fixes faster for each operating system and device. We do not record extremely sensitive information such as (but not limited to): passwords, payment information and national insurance numbers. These are excluded by default from being recorded. We do not record this sensitive data under any circumstances.
Contact & Communication & How we use your Email (Subscriptions / Newsletter)
Live Chat
We have integrated a secure live chat facility, where all communication between your computer and Glow is encrypted using industry-standard HTTPS/SSL whilst you are navigating our website using our live chat service. We’ll store your personal information so that we can pick up your requirements if we talk later.
Every effort has been made to ensure a safe and secure live chat but we advise users that responding to our live chat by email that they do so at their own risk. Direct email responses to our secure live chat messages that are emailed to you when you are offline are not secure. We recommend that you use the link provided in the email to continue with your secure conversation on our website rather than replying directly to the email.
Where we feel it will help you achieve your goal of obtaining a mortgage, we may share your name and email address only with close third parties that we work with. We do not sell or lease your email address (or data) in any way to third parties and we won’t share your name or email address to any third party if we don’t feel it would benefit you.
We may send you emails to follow up with you if you provide us with your email address. This website also operates an email subscription program, used to inform subscribers about products and services supplied by this website.
Users will be asked to either agree or disagree to this Privacy Policy before proceeding with a quote on our website. By agreeing to our Privacy Policy, you agree that we can send you emails in relation to our services and our third party services and you agree to opt-in to these services.
Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity. This information is used to refine future email campaigns and supply the user with more relevant content based on their activity.
In order to verify your email address, we use third-party email validation services from an ISO27001:2013 compliant UK registered Company (as determined by the British Assessment Bureau). We will use this third party to carry out Syntax, DNS A, DNS MX and MailBox verification on any email address that you provide.
- All data in transit is encrypted using HTTPS.
- All data at rest (e.g. stored for caching and reporting purposes) is secured using AES-265 bit encryption.
In compliance with UK Spam Laws and the Privacy and Electronic Communications Regulations 2003 subscribers are given the opportunity to unsubscribe at any time through an automated system. This process is detailed in the footer of each email campaign. If an automated un-subscription system is unavailable clear instructions on how to unsubscribe will be detailed instead. We have developed our tech to automatically unsubscribe your email address if you reply to any email sent from us with the word ‘unsubscribe’ written in the subject or body of your email.
External Links
Although this website only looks to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text / banner / image links to other websites)
The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should, therefore, note they click on external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Adverts and Sponsored Links
This website may contain sponsored links and adverts. These will typically be served by our advertising partners, to whom may have detailed privacy policies relating directly to the adverts they serve.
Clicking on any such adverts will send you to the advertiser’s website through a referral program which may use cookies and will track the number of referrals sent from this website. This may include the use of cookies which may, in turn, be saved on your computer’s hard drive. Users should, therefore, note they click on sponsored external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are subject to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate/engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Shortened Links in Social Media
This website and its owners through their social media platform accounts may share web links to relevant web pages. By default, some social media platforms shorten lengthy URL web addresses.
Users are advised to take caution and good judgement before clicking any shortened URLs published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine URLs are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
Regulatory Functions and Reporting
As a regulated firm, we must provide information to the FCA regularly or in particular situations. We must collect and store regulatory data from our authorised firms. Most of the information has to be provided to us under the Financial Services and Markets Act 2000. Some of this information will be personal data about our employees/advisers or their clients.
Information Processed
We process information relevant to the above purposes. This may include:
- Personal details; including information about your identity and contact details
- Family details; such as information on cohabitees, partners, children etc.
- Employment and education details
- Financial details; including income, expenditure, assets, debts and credit history
- Transaction data from services provided by us
- Technical data; IP address, browser type, device type or other ‘browsing’ data
- Who the Information May Be Shared With
We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we are required to comply with all aspects of the General Data Protection Regulation (GDPR). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
We will only collect the information needed so that it can provide you with marketing and consulting services, this agency does not sell or broker your data.
Where Necessary or Legally Required We Share Information With:
- Associates and representatives of the person whose personal data we are processing
- Financial organisations
- The Financial Conduct Authority (FCA)
- The Financial Ombudsmen Service (FOS)
- Law enforcement and prosecuting authorities
- Credit reference agencies
- Debt collection and tracing agencies
- Other companies in the same group
- Estate agents involved in the buying/selling process chain
- Solicitors involved in the buying/selling process chain
- Our service providers
- Courts and tribunals
- Undertaking research
- Consulting and advisory services
- Our professional advisers
- Staff welfare organisations
- Current, past or prospective employers
- HMRC
- Pension and payroll administrators
Further Disclosure
We may, on occasion, pass your personal information to third parties exclusively to process work on our behalf; for example, a data destruction provider. We always require these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice and GDPR.
Retention Policy
We will process personal data during the duration of any contract and will continue to store only the personal data needed for five years after the contract has expired to meet any legal obligations. After five years any personal data not needed will be deleted.
Data Location
We use services and/or suppliers who operate within the EEA and while their parent company may be US based, we require all to fully comply with GDPR or similar to ensure a continuously high level of data protection.
Your Rights as a Data Subject
At any point whilst we are in possession of or processing your personal data, all data subjects have the following rights:
- Right of access – you have the right to request a copy of the information that we hold about you
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records
- Right to restriction of processing – where certain conditions apply you have a right to restrict the processing
- Right of portability – you have the right to have the data we hold about you transferred to another organisation
- Right to object – you have the right to object to certain types of processing such as direct marketing
- Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling
In the event we refuse your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.
At your request we will confirm what information we hold about you and how it is processed.
Access to Personal Information
You have the right to access your personal information (subject to certain exemptions). If you wish to find out what information we hold that relates to you, you must make your request in writing to;
The Data Protection Officer, Glow, 2 Choats Cottages, Halstead Road, Eight Ash Green, Colchester, CO6 3PT
How to Contact Us
This privacy notice does not provide exhaustive detail of all aspects of the collection and use of personal information. However, we are happy to provide any additional information or explanation needed. If you have any questions or complaints please contact the Data Protection Officer at:
The Data Protection Officer, Glow, 2 Choats Cottages, Halstead Road, Eight Ash Green, Colchester, CO6 3PT.
What if I Am Still Not Satisfied?
If you are not satisfied with how we have responded to your enquiry, you have the right to complain to the Information Commissioner’s Office (ICO) (external link), who is the regulator for data protection in the United Kingdom.
Resources & Further Information