Privacy and Cookies Policy

Who will process my data?

Nexpad Mortgages Limited. Nexpad is its trading style. Nexpad Mortgages Limited is an appointed representative of HL Partnership Limited, which is authorised and regulated by the Financial Conduct Authority.

What data will you ask me for?

On the broker's page we ask for:

• your first name and surname
• your mobile number and email address
• what you're looking to do, such as buy your first home or remortgage, and your rough timescale
• how you'd like us to get in touch
• anything else you choose to tell us in the notes box

If you use a form in one of our adverts on Facebook or Instagram, Meta fills in your name, email address and phone number from your account, and you can change them before you send it. You also answer the same two questions and tick to say we can contact you. Meta then passes us what you sent, with the advert it came from.

We also record which broker's page or advert you used, which campaign or post it came from, your reference number (it starts NX-), and when you ticked to say we can contact you, with the words you agreed to.

Please don't put sensitive information, such as health details, in the notes box. If you go on to take advice, your broker will ask for what they need, as our main privacy policy explains.

Do I have to provide my personal data?

You don't have to use this page. If you do, we need your name, mobile number and email address so your broker can contact you and set up your record. The notes box and the box for updates and tips are optional.

If you go on to take advice, please give us full and honest information. Without it, we may not be able to give you suitable advice.

How will you use my data?

• To pass your enquiry to your broker, who will contact you by phone, email or WhatsApp.
• We may send you a WhatsApp message from Nexpad's business number asking you to confirm it's your number. If we do, we record whether it was delivered, read or answered.
• To set up your record on the client system we use with HL Partnership, so your broker can help you and we can keep the records our regulator requires.
• To stop the form being misused. When you send it, we use your device's internet (IP) address for a short time to limit repeated sends. We don't keep it with your enquiry. Cloudflare Turnstile also checks that a person, not a bot, is sending the form.
• Only if you tick the box: to send you occasional updates and tips from Nexpad.

We use your details because you've asked us to contact you about a mortgage and agreed to the contact described on the form. We keep records because the law and our regulator require us to, and we protect the form from misuse because it's in our legitimate interests.

You can change your mind at any time, for example to stop WhatsApp messages or updates. Just tell your broker or write to us.

Who will you share my data with?

• HL Partnership Limited, the firm Nexpad is an appointed representative of. Your record is kept on its client system.
• Companies that run services for us and act on our instructions: Meta (WhatsApp, and the forms in our Facebook and Instagram adverts), Microsoft (email) and Render (which hosts these pages and the system that receives your enquiry). Cloudflare checks that the form is sent by a person, not a bot.
• The police, regulators or others, where the law requires it, including to prevent financial crime.

We never sell your details. When you use Facebook or Instagram, Meta also uses your information for its own purposes, as Meta's privacy policy explains.

Will my data leave the UK?

Some of the companies that run services for us, such as Meta, Render, Google and Cloudflare, are based in the US and may store or handle your details there. When that happens, your details are protected by the safeguards UK data protection law requires.

How long will you store my data?

Only for as long as necessary. If you go on to take advice, we keep your records for as long as our legal, regulatory and record-keeping obligations require. If you don't, we keep your enquiry only for as long as we need it to deal with your enquiry and to show you agreed to be contacted.

Can I see a copy of my personal data?

Yes. Write to the Data Controller at the address below. We'll send you a copy within one calendar month, unless an exemption applies. We may need to check your identity first.

What if my data is incorrect or incomplete?

Write to the Data Controller and we'll correct or complete it. We may also keep a record of what you originally told us.

Can I have my data erased?

In some circumstances, yes. We may not be able to erase everything, because we must keep some records to meet our legal and regulatory obligations and to deal with any legal claims.

Who is the data controller?

How can I get more information?

Write to the Data Protection Officer at the address above.

How can I make a complaint about how my data has been handled?

Please write to the Data Protection Officer at the address above first. If you're not happy with our answer, you can complain to the Information Commissioner's Office:

Cookies

These pages don't set cookies of their own. They don't use analytics. When you send the form, Cloudflare Turnstile checks your browser and connection to make sure a person, not a bot, is sending it. It doesn't read what you type in the form. When a page loads, your browser fetches fonts from Google, so Google can see your device's IP address. Render, which hosts these pages, may keep your IP address in its logs for a short time to run the service securely.

Changes to this policy

We'll post any changes on this page and update the date at the top.

Important notes on protecting your own data

Don't act on any email or message asking you to make a payment. Check first by calling us on a number from a trusted source, not one given in the message.