Privacy Policy

Privacy Policy


As a controller, Fitch & Fitch Ltd (“Fitch & Fitch”, “we”, “us”, “our”) comply with all applicable data protection and privacy legislation in force from time to time including the UK General Data Protection Regulation, the EU General Data Protection Regulation (where applicable) (together the “GDPR”) and the Data Protection Act 2018. (“DPA18”). This privacy notice details how we process your personal data.

Fitch & Fitch may appoint professional Registered Individuals to provide our services to you. In this instance, whilst entered into the business relationship, the Registered Individual is joint controller of the personal data they process.

Under the UK GDPR we are required to notify the Information Commissioner’s Office (“ICO”) about our use of personal data. You can view our current controller registration on the ICO website here:

We place great importance on ensuring the quality, confidentiality, integrity and availability of the data we hold and in meeting our data protection obligations when processing personal data. Fitch & Fitch is committed to protecting the security of your personal data. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use or disclosure.

We collect personal data about a range of people:

If you are applying, or have applied to work with us, please refer to our job applicant privacy notice.

What personal information we process

We process personal information to act as an intermediary for financial transactions; typically to advise and apply for property finance such as mortgages or similar for clients. The same applies to advising and arranging insurance policies.

To understand how any personal information other than that provided to us through this website is processed you will need to refer to any personal communications you receive from us, check any privacy documents provided when entering into a contract with us or contact us to ask about your personal circumstances.


When you contact us, we ask for some personal information. You are under no obligation to provide this information to us. Providing that information, enables us to give you the right information or services that you ask for, or notify you of further information required to facilitate that service.

If we would like to use your information for any other purpose than those stated above, we will contact you.

As a minimum, we will hold your name and phone number for the purposes specified above. If you do not become a client of ours, your information will be erased in line with our retention policy.

Visitors to Our Website

We use Google Analytics on our website ( to provide statistics to help us give visitors the best experience when using our sites. IP addresses are collected to see how users interact with our site. Our website uses cookies, which is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns.

We use cookies to help identify and track visitors and their website access preferences. Website visitors can control which types of cookies are placed on their browser by adjusting the cookie settings in the cookie controller button, which can be found at the bottom left-hand corner of our website.

Our Clients Views

We want to receive your views on the service you received from us and any improvements you think are necessary. We use Trustpilot as a data processor to collect feedback from our customers on our behalf and to support our marketing activities. If this is something you agree to help us with, we will share your name and email address with Trustpilot in order to generate a review invite and confirm you are a verified customer of Fitch & Fitch.

Regulatory Functions and Reporting

As a regulated firm we are required to retain and provide information to the FCA regularly. We must also share regulatory data with our principal firm, JLM Mortgage Network Ltd. Most of the information is provided to us under the Financial Services and Markets Act 2000.

Purposes & bases for using your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal information in the following purposes and lawful bases:


We process your personal information in order to provide you with Mortgage and Protection Advice. In this case, the performance of a contract is simple, you ask us for advice on your mortgage and we provide it. We would be unable to provide you with this advice or arrange your mortgage without this information.

Legitimate Interest

We will process your personal information under this condition where our interest in using it is not outweighed by your privacy rights or interests. This means that we can use your personal information only in ways you would reasonably expect and which have a minimal impact on your privacy, or where there is a compelling justification for the processing.

When it comes to staying in touch, we rely on legitimate interests because we only contact existing customers or people who have contacted us directly who are expecting us to do so. Each communication provides an easy to use opt-out.

Legal Compliance

We may need to process your data in order to fulfil our legal obligations as a Financial Conduct Authority regulated business. For example we may need to verify your identity and comply with anti-money laundering legislation, and co-operate with law enforcement, legal proceedings or regulatory authorities.

Sharing your information

We sometimes need to share the personal information with other organisations. Where this is necessary, we are required to comply with all aspects of the UK GDPR. Issued Oct 2022 

What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons. Where a joint application is made, we are not able to restrict data sharing between applicants.

Fitch and Fitch ltd will only collect the information needed so that it can provide you with marketing and consulting services. We do not sell or broker your personal data. 

Where Necessary or Legally Required We Share Information With: 

Further Disclosure

We may, on occasion, pass your personal information to third parties exclusively to process work on our behalf; for example, a data destruction provider. We always require these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice and UK GDPR.

How we protect your data

Fitch and Fitch Ltd takes the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by our employees in the performance of their duties. Where we engage third parties to process personal data on our behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of the data. 

Registered Individuals

When in a business relationship with Fitch and Fitch Ltd, both the Registered Individual and Fitch and Fitch Ltd are joint controllers of the client data they process. During this time, all data subject rights requests or incidents affecting personal data security will be dealt with jointly by both Fitch and Fitch Ltd and the Registered Individual, in a transparent manner, with respective responsibilities for data protection compliance obligations agreed upon at the time of the request/incident. Upon termination of our business relationship, both Fitch and Fitch Ltd and Registered Individuals as independent controllers assume full control of client personal data and the subsequent data protection compliance obligations. 

How long we retain personal data

To ensure we meet our legal, regulatory and customer obligations, we will retain client information for the following periods. Issued Oct 2022

International transfers

It is unlikely that we will ever share your personal data outside the UK or European Economic Area. (the EU member states plus Norway, Iceland and Liechtenstein) (“EEA”). If, however, it becomes necessary for the purposes of providing our services to you, we will only share it with organisations in countries benefiting from a European Commission (“EC”) adequacy decision, approved by the UK ICO, or on the basis of EC Standard Contractual Clauses, approved by the UK ICO, which when reinforced with additional supplementary measures, contractually oblige the recipient to process and protect your personal data to the standard expected within the UK and EEA.

Your rights

At any point whilst Fitch and Fitch Ltd is in possession of, or processing your personal data, all data subjects have the following rights:

You have the right to access your personal information (subject to certain exemptions). If you wish to find out what information we hold that relates to you, please contact us; details below.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

In the event we refuse your request under rights of access, we will provide you with a reason why, which you have the right to legally challenge. 

Automated decision making

We do not make client or supplier decisions based solely on automated decision making.

Contact us

This privacy notice does not provide exhaustive detail of all aspects of the collection and use of personal information. However, we are happy to provide any additional information or explanation needed. If you have any questions or complaints, please contact us at:

Data Protection Manager
Fitch and Fitch Ltd,
340 The Crescent
Severalls Business Park

Telephone 020 7859 4098 or email

What if I am still not satisfied?

If you are not satisfied with how Fitch and Fitch Ltd has responded to your enquiry, you have the right to complain to the Information Commissioner’s Office (ICO), who is the regulator for data protection in the United Kingdom: 

Changes to this privacy notice

We update this notice from time to time in response to changes in applicable laws and regulations, to our processing practices and to the products and services we offer. When changes are made, we will update our notice on Please review this notice periodically to check for updates.