Privacy notice
Last Updated: 21/05/26
This privacy notice explains how UK Finance Limited uses personal information in connection with the Mortgage Lenders’ Handbook website and platform.
The website and platform allow users to log in and access the Mortgage Lenders’ Handbook (“MLH”). It enables users to search and view lender requirements related to mortgage lending. It also allows lenders to update their own lender-specific requirements and licensed partners to access the data.
You can find more information about UK Finance by clicking here.
At a glance
Who we are
UK Finance Limited is the controller of the personal information described in this notice.
This means we decide how and why that information is used in connection with the Mortgage Lenders’ Handbook website and platform.
Registered office: 1 Angel Court, London, EC2R 7HJ
Company number: 10250295
ICO registration number: ZA274661
Privacy contact: [email protected]
Mortgage Lenders’ Handbook contact: [email protected]
What the website and platform is for
The Mortgage Lenders’ Handbook is available to people and organisations who need to check or maintain lender requirements for mortgage lending.
It is used by members of the public, industry professionals, conveyancers, lenders and licensed commercial partners (through an API).
Personal information we collect
The personal information we collect depends on how you use the website and platform.
Most personal information is collected directly from you when you create an account, log in, use the website, access the API or contact us. We may also receive limited information from your organisation. For example, where a lender administrator creates or manages your account. Technical and usage information is collected automatically when you use the website, platform or API.
How and why we use personal information
We use personal information to run the platform, manage access to it, keep it secure and respond to users.
Monitoring, security and account deactivation
We collect and review information about how the platform is used so that we can keep it secure, reliable and available for legitimate users.
If we suspect that an account has been misused, or that use of the website could put the Handbook, the platform or other users at risk, we may temporarily or permanently deactivate the account while we investigate. Users can contact us through the Contact Us form if they believe their account has been deactivated incorrectly.
Search history, login activity and page view information are not used for marketing or advertising.
Lender administration, API access and reporting
Lenders may have designated administrators who can set up and manage users for their own organisation. UK Finance administrators may also access account and usage information where needed to administer the website, support users, investigate issues, manage security, or maintain the accuracy and integrity of the Handbook.
We keep audit logs of relevant lender activity, including changes made to lender requirements, the date and time of changes, the account that made the change, and administrative changes to lender users.
Licensed API partners may access Handbook data through an API key under a commercial licence. We collect API usage information, including API calls, errors and usage patterns, to operate and secure the API, monitor availability and performance, detect misuse, support licence compliance and understand demand for the API.
We may produce reports about use of the website and API. These may include lender change reports, performance reports, security reports, API usage reports and analytics reports where analytics cookies have been accepted. Where possible, reports use aggregated or statistical information. Identifiable information is only included where needed for administration, security, audit, licence management, legal purposes or to investigate a specific issue.
Cookies and analytics
The website uses cookies and similar technologies. You can change or withdraw your cookie choices at any time using clicking the icon in the bottom right corner of the website
More information about the cookies we use, including their purpose and how long they last, is set out in our Cookie Notice.
Who we share personal information with
We may share personal information with organisations that help us run, support and secure the website. This may include website hosting and IT providers, authentication and MFA providers, security monitoring providers, analytics providers, email or notification providers, professional advisers, regulators, courts, law enforcement or public authorities where required or permitted by law.
Lender administrators may have access to limited information about users within their own lender organisation where this is needed to manage those users’ accounts.
We do not sell personal information.
Where personal information is processed
Most personal information collected is expected to be processed in the UK.
We may use service providers who process personal information outside the UK. Where personal information is transferred outside the UK, we will make sure appropriate safeguards are in place. These may include an adequacy regulation, the UK International Data Transfer Agreement, Standard Contractual Clauses, or another lawful transfer mechanism under UK data protection law.
Security of your personal data
We take appropriate technical and organisational measures to ensure that your information is secure. We have appointed a Data Protection Officer to ensure that our management of personal data is in accordance with this Privacy Notice and the applicable legislation.
The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of the data transmitted to our site; any transmission of your data is at your own risk.
UK Finance is ISO 27001 accredited. This an internationally recognised specification for information security management. To meet our commitment to protecting your data we have invested in our people, processes and technology. Independent assessments are carried out on a regular basis.
How long we keep personal information
We keep personal information only for as long as we need it for the purposes described in this notice.
Your rights
You have rights under UK data protection law. These may include the right to access the personal information we hold about you and ask us to:
correct inaccurate or incomplete information
to delete your personal information, or
restrict how we use your personal information
You may also object to our use of your personal information where we rely on legitimate interests, withdraw your consent and request data portability in certain circumstances.
Some of these rights are subject to conditions and exemptions. To exercise your rights, contact us at [email protected].
Complaints
Please contact us first if you have concerns about how we use your personal information. You can contact our Data Protection Officer at [email protected]
You can also raise a complaint with us using the Contact Us form. We will consider your complaint and let you know the outcome.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
Children
The Mortgage Lenders’ Handbook website is intended for adults who need to access lender requirements relating to mortgage lending. It is not directed at children, and we do not knowingly collect personal information from children.
Automated decisions
We do not use personal information to make decisions that are solely automated and have a legal or similarly significant effect on individuals.
We may use rules, alerts or monitoring tools to flag suspicious activity, such as possible scraping, unusual search volumes or suspicious login behaviour. Any decision to deactivate an account or take further action will involve appropriate review.
Links to other websites
The Mortgage Lenders’ Handbook website may contain links to other websites, including websites operated by lenders or other third parties.
We are not responsible for the content, security or privacy practices of those websites. If you follow a link to another website, you should read that website’s own privacy and cookie notice.
Changes to this notice
We may update this privacy notice from time to time. The latest version will be published on the website. Where we make significant changes, we may also notify registered users through the website or by email.