DATA PRIVACY NOTICE

We take your privacy very seriously. This notice explains who we are, how and why we collect, store, use and share personal data, your rights, and how to contact us or supervisory authorities if needed.

WHO WE ARE

Cornerstone Finance Group Ltd is the data controller responsible for your personal data.
Company No: 08458702
Registered Office: Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB
Authorised and regulated by the Financial Conduct Authority (FCA No: 767202)

WHAT WE DO

We provide advice on:

• Mortgages (residential and BTL)

• Commercial finance

• Protection (pure protection and general insurance)

PERSONAL DATA WE COLLECT

We may collect:

• Contact and identity information

• Financial and employment details

• Lifestyle and health data

• Criminal convictions or offences

• Details of dependents or beneficiaries

INFORMATION FROM OTHER SOURCES

We may also receive data from:

• Lenders and product providers

• ID and verification agencies

• Credit agencies (e.g. Equifax)

HOW WE USE YOUR DATA

Below is a summary of how we use your data, the legal basis, and who we may share it with:

1. To apply for mortgage/protection/insurance products

   • Legal Basis: Performance of a contract

   • Shared With: Lenders and product providers

2. To refer you to third-party advisers (e.g. estate planning, conveyancing)

   • Legal Basis: Consent

   • Shared With: Preferred financial/legal partners

3. To retain records for legal defence

   • Legal Basis: Legitimate interests

   • Shared With: Data storage and hosting providers

4. To provide marketing communications

   • Legal Basis: Consent

   • Shared With: Internal teams and third-party providers (if applicable)

SPECIAL CATEGORY DATA

We may process:

• Health and lifestyle data for protection insurance

• Criminal conviction data for mortgage or general insurance

• Data for legal claims or regulatory compliance

MARKETING

We may send you information about our services or third-party products with your consent.
You can opt out at any time by:

• Phone: 02921 660550 (option 2)

• Email: admin@cornerstonefinance.co.uk

• Post: Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB

• Clicking ‘unsubscribe’ in any marketing email

DATA RETENTION

We retain your data for up to 6 years from your last interaction, in line with Financial Ombudsman Service requirements.

INTERNATIONAL TRANSFERS

We do not transfer your data outside the European Economic Area (EEA).

YOUR RIGHTS

You have the right to:

• Access your data

• Correct or erase your data

• Restrict or object to processing

• Request data portability

• Contest automated decisions

• Ask how your data is used

HOW TO EXERCISE YOUR RIGHTS

Contact our Data Protection Officer:
Email: compliance@cornerstonefinance.co.uk
Post: Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB

Please include:

• Your name, address, and date of birth

• Proof of identity (e.g. passport or driving licence)

• Details of your request

SECURITY

We use appropriate security measures to protect your data.
We will notify you and regulators of any data breaches where legally required.

COMPLAINTS

If you're unhappy with how we handle your data, please contact us first.
You can also contact the Information Commissioner’s Office: www.ico.org.uk

GLOSSARY OF TERMS

• Data Controller: The organisation that decides how and why your data is used.

• FCA: Financial Conduct Authority, the UK regulator for financial services.

• Intermediary Services: Our advice and arrangement of financial products.

• Special Category Data: Sensitive data like health or criminal records.

• Vulnerability: A condition that may require extra care in service delivery.