Privacy Policy

When you use our website or submit an enquiry, we may collect personal information including your name, email address, phone number, and details about your financial circumstances relevant to the products or services you have enquired about.

We also collect technical information automatically when you visit our website. This includes your IP address, browser type and version, time zone setting, browser plug-in types, operating system, and the pages you visit on our site. We use this information to improve the performance and usability of our website.

We will never collect sensitive personal data such as details about your health, race, religion, or political opinions unless you voluntarily provide this as part of a specific enquiry and we have your explicit consent to do so.

We use the personal information you provide to respond to your enquiry, to provide mortgage and insurance advice, and to contact you about products and services that may be relevant to your needs.

Where you have given us consent, we may send you information about related products and services. You may withdraw this consent at any time by contacting us at hello@primekeyfinancial.co.uk.

We process your personal data on the legal bases of: (a) your consent; (b) our legitimate interests in operating as a financial services broker; and (c) compliance with our legal and regulatory obligations as a firm authorised and regulated by the Financial Conduct Authority (FCA).

We do not sell your personal data. We will never share your information with third parties for their own marketing purposes.

In the course of arranging financial products on your behalf, we may share your information with lenders, insurers, or other product providers as necessary to progress your application. We will always tell you before doing so.

We may also share information where required by law, regulation, or by a court order — for example, to comply with our obligations under the FCA's rules, or in response to a lawful request from a law enforcement authority.

We use trusted third-party service providers to help operate our website and communications (for example, email delivery services). These providers process data on our behalf and are bound by strict data processing agreements.

Under UK data protection law, you have the right to: access the personal data we hold about you; request that we correct inaccurate data; request that we delete your data in certain circumstances; object to or restrict our processing of your data; and receive a copy of your data in a portable format.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, if you believe we have handled your personal data improperly. You can contact the ICO at www.ico.org.uk.

To exercise any of these rights, please contact us at hello@primekeyfinancial.co.uk. We will respond to all valid requests within one calendar month.

Our website uses cookies — small text files placed on your device — to help it function correctly and to understand how visitors use the site. We use strictly necessary cookies (required for the site to work), analytical cookies (to measure traffic and usage patterns), and functionality cookies (to remember your preferences).

You can control cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of our website.

We do not use advertising or tracking cookies that follow you across third-party websites.

We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations.

As a firm regulated by the FCA, we are required to retain certain records relating to financial advice and transactions for a minimum of five years from the date of the transaction. Where longer retention periods apply under applicable law, we will retain data accordingly.

Data collected solely in connection with an enquiry that did not proceed to an application will be retained for no longer than two years, after which it will be securely deleted.