Guardian Financial Limited (our Firm, we, our, us), an Appointed Representative of Stonebridge Mortgage Solutions Ltd (Stonebridge).
Stonebridge Mortgage Solutions Ltd is authorised and regulated by the Financial Conduct Authority for mortgages, protection insurance and general insurance products. The Financial Conduct Authority does not regulate most Buy-to-Let Mortgages.

Why are we giving you this document?

While working with us, we will ask you to provide detailed personal information about your current circumstances, financial situation, and in some cases your health and family health history (“Your Information”). This notice explains how we use Your Information and the rights you have in relation to it.

What do we mean by “Your Information”?

“Your Information” refers to any information that describes or relates to you. It can identify you directly (e.g. name, address, date of birth, National Insurance number) or indirectly (e.g. employment details, health history, or information connected to your cultural or social identity).

When we provide advice or services for your mortgage and/or insurance needs, Your Information may include:

Personal details such as title, name, date of birth, gender, nationality, marital/civil status, contact details, addresses, and identity documents.

Employment and income information (salary, bonuses, benefits, overtime, sick pay, employment history).

Bank details, tax information, credit history, loans, financial commitments, family circumstances and dependents.

Health details including medical history, treatment, and prognosis (when relevant to insurance needs).

Details of existing mortgage/insurance products and their terms.

The basis upon which we use Your Information

When you engage us to advise on mortgages and/or insurance, a contract exists between us. We use Your Information to perform that contract and arrange the products you need.

We may also use Your Information:

Where it is in our legitimate business interest (and does not override your rights), for example to respond to queries from lenders, insurers, or Stonebridge, or to seek feedback on our service.

To comply with legal, regulatory, or contractual obligations, such as responding to requests from regulators or fulfilling responsibilities to Stonebridge.

Processing of sensitive information (“Special Data”)

When assisting with insurance needs, particularly life insurance or cover related to accident/illness, we may require sensitive information such as ethnic origin, health and medical history (“Special Data”). This enables us to approach insurers for suitable products and provide tailored advice.

If you have children under 16, information relating to them (including Special Data) may also be recorded.

In some cases, you may need to disclose details of past or current criminal convictions or offences (“Criminal Disclosures”), particularly where relevant to insurance.

We process Special Data and Criminal Disclosures in line with UK data protection laws, where it is necessary in the public interest to provide essential insurance products.

How we collect Your Information

We collect most information directly from you—through meetings, conversations, forms, and correspondence (including email).

We may also gather information from:

Credit checks, employers, or public records such as the electoral roll.

Technology solutions (e.g. ID verification, credit or bank account checks), where your consent will be obtained beforehand.

What happens when we receive Your Information?

We may:

Record and store it securely on paper, mobile devices, computer systems, and cloud storage.

Share it with mortgage lenders/insurers (via paper or secure online systems) to progress applications.

Input it into Stonebridge’s systems to record advice and arrangements made for you.

Use it to respond to queries, update you on products, or carry out necessary administration.

✅ With this, the network details are now aligned with Stonebridge Mortgage Solutions Ltd and the FCA disclosure is correctly included.

Would you like me to also add the missing GDPR sections (your rights, how long we keep your information, who we share it with, complaints process, and contact details), so this becomes a complete Privacy Notice you can give directly to clients?