Thank you for choosing to be part of our community at Zen Mortgage Solutions. We are committed
to protecting your personal information and your right to privacy. If you have any questions or
concerns about this privacy notice, or our practices with regards to your personal information, please
contact us at heather@zenmortgagesolutions.com.
When you visit our website zenmortgagesolutions.com (the “Website”), and more generally, use any
of our services (the “Services”, which include the Website), we appreciate that you are trusting us
with your personal information. We take your privacy very seriously. In this privacy notice, we seek to
explain to you in the clearest way possible what information we collect, how we use it and what
rights you have in relation to it. We hope you take some time to read through it carefully, as it is
important. If there are any terms in this privacy notice that you do not agree with, please discontinue
use of our Services immediately.
This privacy notice applies to all information collected through our Services (which, as described
above, includes our Website), as well as any related services, sales, marketing or events. Please read
this privacy notice carefully as it will help you understand what we do with the information that we
collect.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in
obtaining information about us or our products and Services, when you participate in activities on
the Website or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the
Website, the choices you make and the products and features you use. The personal information we
collect may include the following:
Personal Information Provided by You. We collect title, names (including previous names), date of
birth, gender, nationality, civil/marital status, contact details, addresses and documents that are
necessary to verify your identity; employment and remuneration information, (including
salary/bonus schemes/commissions, overtime/sick pay/other benefits), employment history.
∙Bank account details, tax information, loans and credit commitments, personal credit history,
sources of income and expenditure, family circumstances and details of child and adult
dependants.
∙Health status and history, details of treatment and prognosis, medical reports (further details
are provided below specifically about the processing we may undertake in relation to this
type of information).
∙Any pre-existing mortgage and insurance products and the terms and conditions relating to
these; and other similar information.
∙All personal information that you provide to us must be true, complete and accurate, and
you must notify us of any changes to such personal information.
∙Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device
characteristics — is collected automatically when you visit our Website.
We automatically collect certain information when you visit, use or navigate the Website. This
information does not reveal your specific identity (like your name or contact information) but may
include device and usage information, such as your IP address, browser and device characteristics,
operating system, language preferences, referring URLs, device name, country, location, information
about how and when you use our Website and other technical information. This information is
primarily needed to maintain the security and operation of our Website, and for our internal
analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
∙Log and Usage Data. Log and usage data is service-related, diagnostic, usage and
performance information our servers automatically collect when you access or use our
Website and which we record in log files. Depending on how you interact with us, this log
data may include your IP address, device information, browser type and settings and
information about your activity on the Website (such as the date/time stamps associated
with your usage, pages and files viewed, searches and other actions you take such as which
features you use), device event information (such as system activity, error reports
(sometimes called ‘crash dumps’) and hardware settings).
∙Device Data. We collect device data such as information about your computer, phone, tablet
or other device you use to access the Website. Depending on the device used, this device
data may include information such as your IP address (or proxy server), device and
application identification numbers, location, browser type, hardware model Internet service
provider and/or mobile carrier, operating system and system configuration information.
∙Location Data. We collect location data such as information about your device’s location,
which can be either precise or imprecise. How much information we collect depends on the
type and settings of the device you use to access the Website. For example, we may use GPS
and other technologies to collect geolocation data that tells us your current location (based
on your IP address). You can opt out of allowing us to collect this information either by
refusing access to the information or by disabling your Location setting on your device. Note
however, if you choose to opt out, you may not be able to use certain aspects of the
Services.
Information collected from other sources
In Short: We may collect limited data from public databases, marketing partners, and other outside
sources.
In order to enhance our ability to provide relevant marketing, offers and services to you and update
our records, we may obtain information about you from other sources, such as public databases,
joint marketing partners, affiliate programs, data providers, as well as from other third parties. This
information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or
user behaviour data), Internet Protocol (IP) addresses, social media profiles, social media URLs and
custom profiles, for purposes of targeted advertising and event promotion.
2. HOW DO WE USE YOUR INFORMATION?
In Short: We process your information for purposes based on legitimate business interests, the
fulfilment of our contract with you, compliance with our legal obligations, and/or your consent.
We use personal information collected via our Website for a variety of business purposes described
below. We process your personal information for these purposes in reliance on our legitimate
business interests, in order to enter into or perform a contract with you, with your consent, and/or
for compliance with our legal obligations. We indicate the specific processing grounds we rely on
next to each purpose listed below.
We use the information we collect or receive:
∙We will record and store Your Personal Data in our mobile devices and on our computer
systems (websites, email, hard drives, and cloud facilities). This information can only be
accessed by employees and consultants within our Firm and only when it is necessary to
provide our service to you and to perform any administration tasks associated with or
incidental to that service
∙Submit Your Personal Data to Solicitors/Estate Agents/Product Providers/Mortgage
Lenders/Commercial Lenders and/or Insurance Product providers via email or on-line via a
secure portal. The provision of this information to a third party is essential in allowing us to
progress any enquiry or application made on your behalf and to deal with any additional
questions or administrative issues that lenders and providers may raise.
∙Use Your Personal Data for the purposes of responding to any queries you may have in
relation to any mortgage/finance product or insurance policy you may take out, or to inform
you of any developments in relation to those products and/or polices of which we might
become aware
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
In Short: We only share information with your consent, to comply with laws, to provide you with
services, to protect your rights, or to fulfil business obligations.
∙We may process or share your data that we hold based on the following legal basis:
∙Consent: We may process your data if you have given us specific consent to use your
personal information for a specific purpose.
∙Legitimate Interests: We may process your data when it is reasonably necessary to achieve
our legitimate business interests.
∙Performance of a Contract: Where we have entered into a contract with you, we may process
your personal information to fulfil the terms of our contract.
∙Legal Obligations: We may disclose your information where we are legally required to do so
in order to comply with applicable law, governmental requests, a judicial proceeding, court
order, or legal process, such as in response to a court order or a subpoena (including in
response to public authorities to meet national security or law enforcement requirements).
∙Vital Interests: We may disclose your information where we believe it is necessary to
investigate, prevent, or take action regarding potential violations of our policies, suspected
fraud, situations involving potential threats to the safety of any person and illegal activities,
or as evidence in litigation in which we are involved.
More specifically, we may need to process your data or share your personal information in the
following situations:
Business Transfers. We may share or transfer your information in connection with, or during
negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of
our business to another company.
Vendors, Consultants and Other Third-Party Service Providers. We may share your data with third-
party vendors, service providers, contractors or agents who perform services for us or on our behalf
and require access to such information to do that work. Examples include payment processing, data
analysis, email delivery, hosting services, customer service and marketing efforts. We may allow
selected third parties to use tracking technology on the Website, which will enable them to collect
data on our behalf about how you interact with our Website over time. This information may be used
to, among other things, analyse and track data, determine the popularity of certain content, pages or
features, and better understand online activity. Unless described in this notice, we do not share, sell,
rent or trade any of your information with third parties for their promotional purposes. We have
contracts in place with our data processors, which are designed to help safeguard your personal
information. This means that they cannot do anything with your personal information unless we have
instructed them to do it. They will also not share your personal information with any organization
apart from us. They also commit to protect the data they hold on our behalf and to retain it for the
period we instruct.
Third-Party Advertisers. We may use third-party advertising companies to serve ads when you visit or
use the Website. These companies may use information about your visits to our Website(s) and
other websites that are contained in web cookies and other tracking technologies in order to provide
advertisements about goods and services of interest to you.
Affiliates. We may share your information with our affiliates, in which case we will require those
affiliates to honour this privacy notice. Affiliates include our parent company and any subsidiaries,
joint venture partners or other companies that we control or that are under common control with us.
Business Partners. We may share your information with our business partners to offer you certain
products, services or promotions.
4. WHO WILL YOUR INFORMATION BE SHARED WITH?
In Short: We only share information with the following third parties.
We only share and disclose your information with the following third parties. We have categorized
each party so that you may be easily understand the purpose of our data collection and processing
practices. If we have processed your data based on your consent and you wish to revoke your
consent, please contact us using the contact details provided in the section below titled
HOW CAN YOU CONTACT US ABOUT THIS NOTICE?”.
∙Advertising, Direct Marketing, and Lead Generation
Facebook Audience Network, Google AdSense, HubSpot CRM, HubSpot Lead Management,
Mortgage Keeper, keeper and ZOHO CRM
∙Allow Users to Connect to Their Third-Party Accounts
Facebook account, Instagram account, LinkedIn account and Twitter account
∙Communicate and Chat with Users
Facebook Customer Chat
∙Content Optimization
Google Calendar widget, Google Fonts, Google Site Search, YouTube video embed, Vimeo
video and Mail Chimp widget plugin
∙Data Backup and Security
Dropbox Backup, Google Drive Backup and One Drive
∙Functionality and Infrastructure Optimization
Google App Engine and Google Cloud Storage
∙Invoice and Billing
Stripe
∙Retargeting Platforms
Facebook Custom Audience, Facebook Remarketing, Google Ads Remarketing and Google
Analytics Remarketing
∙Social Media Sharing and Advertising
Facebook advertising, Facebook social plugins, Instagram advertising, LinkedIn advertising,
LinkedIn social plugins, Twitter advertising and Twitter social plugins
∙Website Hosting
WordPress
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) to access or
store information. Specific information about how we use such technologies and how you can refuse
certain cookies is set out in our Cookie Notice.
6. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
In Short: We are not responsible for the safety of any information that you share with third-party
providers who advertise, but are not affiliated with, our Website.
The Website may contain advertisements from third parties that are not affiliated with us and which
may link to other websites, online services or mobile applications. We cannot guarantee the safety
and privacy of data you provide to any third parties. Any data collected by third parties is not covered
by this privacy notice. We are not responsible for the content or privacy and security practices and
policies of any third parties, including other websites, services or applications that may be linked to
or from the Website. You should review the policies of such third parties and contact them directly to
respond to your questions.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this
privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in
this privacy notice, unless a longer retention period is required or permitted by law (such as tax,
accounting or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will
either delete or anonymize such information, or, if this is not possible (for example, because your
personal information has been stored in backup archives), then we will securely store your personal
information and isolate it from any further processing until deletion is possible.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and
technical security measures.
We have implemented appropriate technical and organizational security measures designed to
protect the security of any personal information we process. However, despite our safeguards and
efforts to secure your information, no electronic transmission over the Internet or information
storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that
hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security,
and improperly collect, access, steal, or modify your information. Although we will do our best to
protect your personal information, transmission of personal information to and from our Website is
at your own risk. You should only access the Website within a secure environment.
9. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the
Website, you represent that you are at least 18 or that you are the parent or guardian of such a
minor and consent to such minor dependent’s use of the Website. If we learn that personal
information from users less than 18 years of age has been collected, we will deactivate the account
and take reasonable measures to promptly delete such data from our records. If you become aware
of any data, we may have collected from children under age 18, please contact us
at heather@zenmortgagesolutions.com.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: In some regions, such as the European Economic Area, you have rights that allow you
greater access to and control over your personal information. You may review, change, or terminate
your account at any time.
In some regions (like the European Economic Area), you have certain rights under applicable data
protection laws. These may include the right (I) to request access and obtain a copy of your personal
information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal
information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the
right to object to the processing of your personal information. To make such a request, please use
the contact details provided below. We will consider and act upon any request in accordance with
applicable data protection laws.
If we are relying on your consent to process your personal information, you have the right to
withdraw your consent at any time. Please note however that this will not affect the lawfulness of
the processing before its withdrawal, nor will it affect the processing of your personal information
conducted in reliance on lawful processing grounds other than consent.
If you are a resident in the European Economic Area and you believe we are unlawfully processing
your personal information, you also have the right to complain to your local data protection
supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-
protection/bodies/authorities/index_en.htm
If you are a resident in Switzerland, the contact details for the data protection authorities are
available here: https://www.edoeb.admin.ch/edoeb/en/home.html.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you
prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you
choose to remove cookies or reject cookies, this could affect certain features or services of our
Website. To opt-out of interest-based advertising by advertisers on our Website
visit http://www.aboutads.info/choices/.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-
Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data
about your online browsing activities monitored and collected. At this stage no uniform technology
standard for recognizing and implementing DNT signals has been finalized. As such, we do not
currently respond to DNT browser signals or any other mechanism that automatically communicates
your choice not to be tracked online. If a standard for online tracking is adopted that we must follow
in the future, we will inform you about that practice in a revised version of this privacy notice.
12. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an
updated “Revised” date and the updated version will be effective as soon as it is accessible. If we
make material changes to this privacy notice, we may notify you either by prominently posting a
notice of such changes or by directly sending you a notification. We encourage you to review this
privacy notice frequently to be informed of how we are protecting your information.
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us
at heather@zenmortgagesolutions.com or by post to:
Zen Mortgage Solutions
37 Wildcat Drive
Cambuslang
G72 6AR
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country, you may have the right to request access to the
personal information we collect from you, change that information, or delete it in some
circumstances. To request to review, update, or delete your personal information, please submit a
request form by clicking here. We will respond to your request within 30 days.