Ahauz Limited (registered company number 10206939) (“Ahauz”, "we" or "us") is committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us.
Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it. By visiting www.ahauz.com ("our website") you are accepting and consenting to the practices described in this policy.
For the purpose of the General Data Protection Regulation (GDPR) 2018, the registered data controller is, Ahauz Limited, whose registered office is at Forward Partners Commercial Unit 2, Aurora Building, 124 East Road, London, England, N1 6FD.
Our FCA principal Beneficial Life (London) Limited (company no. 09903981) is also a data controller as part of our services. Beneficial Life’s registered office is located at 131-151 Great Titchfield Street, London, England, W1W 5BB.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK independent supervisory authority for data protection issues (www.ico.org.uk). We’d always appreciate the chance to deal with your concerns before you approach the ICO however, so please contact us in the first instance.
Information we may collect from you
When you submit the application form on our website, we collect the following information from you:
- Name and contact details;
- Personal, family and educational details;
- Financial information such as salary, savings, and financial commitments; and
In addition to the above, we may collect information from you through your communications with us – for example:
- Identification and address verification;
- Payslips and contracts of employment;
- Self-assessment tax returns and tax year overviews;
- Bank statements;
- Your credit report;
- Any other personally identifiable information necessary for the completion of a mortgage application.
We may also collect personal information from you over the telephone for mortgage purposes. We may record telephone calls for training and monitoring purposes.
How we use your personal information
We use personal information about you in the following ways:
- We will use this information to carry out our obligations and to provide you with the information, products and services that you request from us;
- Carry out market research, profiling and business and statistical analysis including the formation of a view on you as an individual in order to service you and others better;
- to administer any referral campaign, promotion or competition that you enter via our website;
- to allow you to participate in interactive features of our service, when you choose to do so;
- to provide you, or permit selected third parties to provide you, with information about other goods or services that are similar to those that you have already purchased or enquired about or may interest you;
- to customise or improve your experience on our website and services, including via direct communications you receive from us;
- to administer our website and for internal business administration and operations, including troubleshooting, data analysis, testing, development, research, statistical and survey purposes;
- to notify you about changes to our service and to send you service emails relating to your application;
- comply with any regulatory obligation we must comply with;
- as part of our efforts to keep our website safe and secure; and
- to provide information and services to partners that allow them to monitor and benchmark their own performance.
We may carry out automated decision making and profiling in order to provide you with the most suitable products and services for your needs.
We’ll only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we'll notify you and we'll explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Disclosure of your personal information
We may disclose your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006
We may also disclose your personal information with the following selected third parties:
- any regulatory or governmental body or ombudsmen who has jurisdiction;
- any credit bureaux (or similar organisation) with your explicit permission;
- any mortgage lender to which you have asked us to introduce you to;
- any third parties that participate in your mortgage journey (e.g. solicitors, valuers and conveyancers);
- any business partner, supplier or sub-contractor for the performance of any contract we enter into with them or you; and
- Analytics and search engine providers that assist us in the improvement and optimisation of our site; and
- any person or legal entity to whom we sell or transfer (or initiate discussions with to sell or transfer) our business or any part of it or any of our rights or obligations under any agreement we may have with you. If the transfer goes ahead, you agree that the purchaser can use your data in the same way as us.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We don’t allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes as part of providing the service to you, and in accordance with our instructions.
We’ll also share your personal data with the following data processors where necessary to provide the service to you, and for regulatory obligations:
- Zendesk, Mailchimp to communicate with you
- Amazon Web Services to provide our web services
- Beneficial Life (London) Limited as our FCA principal (acting as a data controller)
- Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the UK in instances where such professional services are required.
We may disclose information to either the Financial Service Ombudsman or the Financial Conduct Authority where they request this to resolve complaints, or our auditors in connection with their duties.
Where your personal information is stored
We will ensure your data remains within the European Economic Area (EEA) and as a result is captured under the General Data Protection Regulation. If for any reason we use third parties that are domiciled outside of the EEA any such data storage will undergo further enhanced controls and checks, dependent on the country of storage. We will inform you of any such instance where this may occur. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.
We treat your data with the utmost care and security. Our systems meet or exceed industry standards. We will never store passwords in plain text, nor will we allow anyone to access your data unless they have a justifiable reason to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent any form of unauthorised access.
We won’t hold your data for any longer than we need to make sure you’re getting maximum benefit from our services. Find out more here.
How long will you use my personal data for?
We’ll only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will keep a full record of your interactions for the lifetime of your mortgage after you complete a transaction with us. This will help us answer any questions you, the lender or the regulators may have later down the line. If you don’t transact with us, depending on the stage of your application, we may delete your information sooner in accordance with our data retention policy.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
By law we have to keep basic information about our customers who receive an Ahauz product (including Contact, Identity, Financial and Transaction Data) for six years after the transaction for UK Money Laundering regulatory purposes.
In some circumstances you can ask us to delete your data: see below.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Rights regarding the data
Your rights under the General Data Protection Regulation (GDPR) 2018
Under the General Data Protection Regulation 2018, you have various rights in relation to your information. Detailed below are your rights and a description of each one.
You have the right to:
- Be informed – this means you have the right to be informed about the collection and use of your personally identifiable data.
- Have access to your information – you have the right to access your personally identifiable data and supplementary information. This will be provided free of charge. However, when a request is manifestly unfounded, excessive or repetitive we reserve the right to charge a fee. We may also charge a reasonable fee to comply with requests for further copies of the same information. You can request access to your information by emailing us at firstname.lastname@example.org
- Have personally identifiable information rectified – you have a right to have inaccurate personal data rectified, or completed if it is incomplete. We will inform you when any inaccurate information is corrected.
- Erase your personally identifiable information – the right to erasure is also known as ‘the right to be forgotten’. You can make a request for erasure of information verbally or in writing. We will respond to your request within one month. The right is not absolute and only applies in certain circumstances. For example, it does not apply when we have statutory or regulatory obligations to keep your data.
- Restrict processing of personally identifiable data – you have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances. When processing is restricted, we are permitted to store the data, but not use it.
- Port your personally identifiable data – this right allows you to obtain and reuse your personally identifiable data for your own purposes across different services. It allows you to move, copy or transfer personally identifiable data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
- Object to the processing of your data – you have a right to object to the processing of your data for purposes of scientific or historical research and statistics, as well as for the purposes of direct marketing (including profiling).
If you have changed your mind about receiving marketing from us, you can opt out at any time by clicking the unsubscribe button or the link at the bottom of any of our marketing emails. Alternatively, you can email us at email@example.com
Credit decisions, the prevention of fraud and money laundering
The mortgage lender may use credit reference and fraud prevention agencies to help them make decisions. A short guide to what the lender does and how the lender, credit reference and fraud prevention agencies will use your information is detailed below. If you would like to read the full details of how your data may be used, we can put you in touch with the lender.
A condensed guide to the use of your personally identifiable information by the lender and at credit reference and fraud prevention agencies
If you apply for Ahauz’s product, we will provide the information we hold about you to our lender partner. The lender will use this information to help make its decision about whether or not to lend to you. This will involve checking the following records about you and others:
Its own records;
Those at credit reference agencies (CRAs); and
Those at fraud prevention agencies (FPAs).
When CRAs receive a search request from the lender they will place a search footprint on your credit file that may be seen by other lenders. They supply to lenders both public (including the electoral register) and shared credit and fraud prevention information. Having multiple search footprints on your credit file may affect your ability to borrow in the future.
The lender will make checks such as assessing your application for credit and verifying the applicants’ identities to prevent and detect crime and money laundering. The lender may also make periodic searches at CRAs and FPAs to manage your account with them.
If you are making a joint application or tell us or the lender that you have a spouse or financial associate, the lender will link your records together, so you must be sure that you have your partner’s agreement to disclose their information. CRAs also link your records together and these links will remain on your and their files until such time as you or your partner successfully files for a disassociation with the CRAs to break that link.
Information on applications will be sent to CRAs and will be recorded by them. Where you borrow from the lender, the lender will give details of your accounts and how you manage it/them to CRAs. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs and FPAs to perform similar checks and to trace your whereabouts and recover debts that you owe.
Records remain on file for 6 years after they are closed, whether settled by you or defaulted.
If you give false or inaccurate information and the lender suspects or identifies fraud, the lender will record this and may also pass this information to FPAs and other organisations involved in crime and fraud prevention.
If you have borrowed from the lender and do not make payments that you owe them, the lender will trace your whereabouts and recover debts.
The lender and other organisations may access and use the information recorded by fraud prevention agencies based in other countries.
What cookies do we use?
These cookies are used to help us analyse and improve the performance of our website, understand what interests our users and measure how effective our advertising is. They also help us improve the website by measuring any errors that occur. These cookies help us see how you use our website e.g. which pages you visit.
Sometimes cookies are managed for us by third parties, but we don't allow the third party to use the cookies for any purpose other than those listed above.
These are used to help us customise website content based upon your selections.
We use identification cookies to remember choices you have made and show you when you're logged in to the website.
You can control whether or not these cookies are used, but preventing them may mean you are unable to access certain features or services. Preventing these cookies may stop us remembering that you didn't want a specific feature or service.
We use targeting cookies to personalise content and to show material we think would be of interest to you. These are used to send you relevant information and see which content you use.
Third party cookies
Consent and how to withdraw, control and/or delete cookies
By using our site, you accept the use of Performance, Identification and Targeting cookies.
This information has been provided to show our commitment to legislation regarding cookie awareness so that you can understand what cookies we use and why we use them. This ensures transparency in the data collected on you.
If you have a complaint about how we handle your data, please write to us:
By email at firstname.lastname@example.org; or
By letter, addressed to: Ahauz Limited, Commercial Unit 2, Aurora Building, 124 East Road, London, N1 6FD, United Kingdom
Please include your name and address, a contact telephone number, the email address you signed up with, your application number (if applicable), and details of why you are unhappy. If we do not have enough information to investigate your complaint, we will contact you to ask for further information.
We will investigate your complaint promptly and will respond to you as soon as we can, detailing our findings of your complaint.
If we have been unable to resolve your information rights concern, you can raise the matter with Information Commissioner's Office (“ICO”). They will use the information you have provided, including our response to your concerns, to decide if your concern provides an opportunity to improve information rights practice.
You can contact the ICO by either:
Calling their helpline on 0303 123 1113 or;
Using their 'live chat' system.
How to find out more
If you wish, you can contact the CRAs direct. The information they each hold about you may not be the same so it is worth contacting them all. You should check with them if a fee is payable for this information.
CallCredit, Consumer Services Team, PO Box 491, Leeds, LS3 1WZ or call 0870 0601414
Equifax PLC, Credit File Advice Centre, PO Box 3001, Bradford, BD1 5US or call 0870 010 0583 or log on to www.myequifax.co.uk.
Experian, Consumer Help Service, PO Box 8000, Nottingham NG80 7WF or call 0844 4818000 or log on to www.experian.co.uk.