Privacy Policy

1. Introduction

OSL Financial Services ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is OSL Financial Services. If you have any questions about this Privacy Policy or our data practices, please contact us using the details at the end of this policy.

3. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, title, date of birth.
• Contact Data: Email address, telephone number, postal address.
• Financial Data: Income, employment status, mortgage requirements (provided voluntarily).
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our website and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

4. How We Collect Your Data

We collect data through:

• Direct interactions: when you fill in forms on our website, correspond with us by post, phone, email, or otherwise.
• Automated technologies: as you interact with our website, we may automatically collect Technical Data using cookies, server logs, and other similar technologies.
• Third parties or publicly available sources: we may receive personal data about you from mortgage brokers you choose to connect with through our platform.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as marketing communications.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.

6. How We Use Your Data

We use your personal data to:

• Provide our mortgage broker matching service.
• Facilitate introductions between you and suitable mortgage brokers.
• Communicate with you about your enquiries and our services.
• Improve our website, products, and services.
• Send you marketing communications (only with your consent).
• Comply with legal and regulatory requirements, including FCA obligations.
• Protect against fraud and unauthorised transactions.

7. Data Sharing

We share your personal data with mortgage brokers and advisers you choose to connect with through our platform. We may also share data with service providers who assist us in operating our website and delivering our services (e.g., hosting providers, IT support), and with regulatory authorities when required by law. We do not sell your personal data to third parties.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain personal data for up to 6 years after the end of our relationship with you, in line with UK regulatory requirements.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we limit the processing of your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to the processing of your data based on legitimate interests or direct marketing.
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at any time.

11. Cookies

Our website uses cookies to distinguish you from other users, which helps us provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Preferences panel, accessible via the banner when you first visit our site. You can manage your cookie preferences at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: