← Back to Home Equity Release

Data privacy

Data Privacy Notice

Last updated: 8 October 2026

We take your privacy very seriously. This notice explains who we are, how and why we collect, store, use and share personal data, your rights, and how to contact us or a supervisory authority if you have a complaint.

Who We Are

Home Financial Services Ltd collects, uses and is responsible for certain personal data about you. When we do so, we are required to comply with data protection regulation and are responsible as a data controller of that personal data.

When we mention “Home Financial Services”, “we”, “us” or “our”, we are referring to Home Financial Services Ltd.

Home Financial Services Ltd is registered in England and Wales, company number 15250542. Its registered office is 4 Castleton Court, Fortran Road, St. Mellons, Cardiff, CF3 0LT. Home Financial Services Ltd has FCA reference number 1013614.

Home Financial Services Ltd is an appointed representative of Cornerstone Finance Group Ltd, which is authorised and regulated by the Financial Conduct Authority (FCA Register number 767202).

We provide advice on residential, lifetime and buy-to-let mortgages, commercial finance, pure protection and general insurance.

The Personal Data We Collect and Use

In the course of providing our service, we may collect the following personal data when you provide it to us:

  • Contact information.
  • Identity information.
  • Financial information.
  • Employment status and employment information.
  • Lifestyle information.
  • Health information.
  • Data about criminal convictions or offences.
  • Details of any vulnerability.
  • Details of your dependants and/or beneficiaries under a policy.
  • Product details.

The equity release enquiry form on this website asks for property type and estimated value, age, the amount you are considering releasing, your intended use, preferred consultation method and time, and your name, email address and telephone number. It also records the page address, referrer and campaign identifiers when present.

Enquiry submissions are sent through Zapier. Website technologies include Cookiebot, Google Tag Manager and Google Ads; the consultation date selector requests bank-holiday information from GOV.UK. Our Cookies Policy explains how to manage cookie preferences.

If you provide information about another person, we expect you to ensure they know you are doing so and are content for their information to be provided to us. You may find it helpful to show them this privacy notice.

Information Collected From Other Sources

We also obtain personal data from other sources while providing intermediary services. The party sharing it is responsible for explaining this and, where necessary, obtaining permission.

  • Lenders and product providers: product details.
  • Identification and verification agencies: identity and sanction-check information.
  • Credit agency, Equifax: credit scores and CIFAS returns.

How We Use Your Personal Data

The table below explains why we process personal data, the lawful basis we rely on and the third parties routinely linked to that activity.

Rationale or reason for processingLawful basisThird-party recipients
  • To apply for decisions in principle for mortgage products and/or quotations for protection and/or general insurance products on your behalf.
  • To apply for products on your behalf.
Performance of a contract.Lenders and product providers.
To refer you to third-party advisers for estate planning, conveyancing, overseas mortgages, currency advice and specialist advice on second charges.Consent.Preferred partners specialising in financial and legal services not offered by Cornerstone Finance Group Ltd.
To retain records of services or advice provided to defend potential legal claims or complaints.Legitimate interests.External B2B suppliers of data storage and hosting services retaining records on our behalf.
To provide details of products and services from us and third parties that may interest you, in accordance with your preferences.Consent.Relevant providers where you have given consent.

Special Category Data

Some personal data is considered more sensitive and receives additional protection. This includes health data, racial or ethnic origin, genetic data, sexual orientation, and information concerning criminal convictions or offences.

We may process health and lifestyle information when providing intermediary services for protection insurance, and criminal conviction or offence information when providing services relating to general insurance or mortgage products.

In addition to the lawful basis shown above, we process this information to advise on, arrange or administer an insurance contract, to establish, exercise or defend legal claims, or to comply with regulatory requirements concerning financial crime, unlawful acts and dishonesty.

Marketing

Where we have obtained your consent and have a legitimate business reason, we may use your personal data to identify, tailor and provide details of products and services that may interest you. Where you consent, we may also provide details of third-party products and services.

You can opt out at any time by using the unsubscribe link in an email or by contacting us:

  • Phone: 02921 660550, option 2.
  • Email: admin@cornerstonefinance.co.uk.
  • Post: Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB.

Whether Information Has to Be Provided

We will tell you when providing personal data is optional, including where we ask for consent. In all other cases, you must provide the required personal data for us to provide intermediary services.

Retention and International Transfers

How Long Your Personal Data Will Be Kept

We retain personal data only for as long as necessary for the purpose for which it was collected. Cornerstone Finance Group Ltd will not keep intermediary-services data longer than six years from your last interaction with us. This supports Financial Ombudsman Service complaint investigations.

Transfers Outside the EEA

Some website and enquiry-service providers may process information outside the UK or European Economic Area. Where a restricted international transfer takes place, we will use a transfer mechanism and safeguards required by data-protection law. Contact our Data Protection Officer for more information.

Your Rights

You have legal rights under data protection regulation. We may request proof of identity so that we disclose information or change details only for the correct person. We normally charge no fee, unless a request is unfounded, repetitive or excessive.

We aim to respond to valid requests within one month. Complex or multiple requests may take longer, in which case we will tell you. We may not be able to meet a request fully where it would affect another person's confidentiality or where the law permits us to respond differently.

Access your data

Ask whether we use your personal data, receive a copy and understand how we process it.

Correct or erase data

Ask us to correct inaccurate data or erase data we no longer need, subject to legal and claims-related requirements.

Restrict its use

Ask us to restrict processing while accuracy, lawfulness, legal claims or an objection are considered.

Object to its use

Object where processing relies on legitimate interests and you believe your rights outweigh those interests.

Transfer your data

Request eligible automated data in a structured, commonly used, machine-readable format or transfer it to another controller.

Contest automated decisions

Where applicable, contest a solely automated decision, express your view and request human review.

More information about exercising your rights

To exercise a right, email or write to our Data Protection Officer. Please provide enough information to identify you, proof of identity and address, and details of the information or request concerned. Contact details are set out below.

We may continue restricted processing with your consent, to establish, exercise or defend legal claims, or to protect another person's or company's rights. Erasure may not be possible where information is needed for a legal obligation or legal claims.

Security and Complaints

Keeping Your Personal Data Secure

We use appropriate measures to prevent personal data from being accidentally lost, used or accessed without authorisation. Access is limited to those with a genuine business need, who are authorised and bound by confidentiality duties.

We have procedures for suspected data security breaches and will notify you and the relevant regulator where legally required.

Our Supervisory Authority

If you are unhappy with how we handle your information, you may complain to the Information Commissioner's Office, which has enforcement and investigation powers. Visit ico.org.uk. We ask that you try to resolve the issue with us first.

How to Contact Us

For questions about this notice, the information we hold or to exercise a data-protection right, contact our Data Protection Officer and/or Head of Risk and Compliance.

Email compliance@cornerstonefinance.co.uk or write to Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB.

Glossary of Terms

we, us or our
Home Financial Services Ltd, registered in England and Wales number 15250542, with registered office at 4 Castleton Court, Fortran Road, St. Mellons, Cardiff, CF3 0LT. Cornerstone Finance Group Ltd is registered in England and Wales number 08458702, with registered office at Unit E Copse Walk, Cardiff Gate Business Park, Cardiff, CF23 8RB.
contact information
Details used to contact a person, including their name, telephone number, email address, home or work address, country, postcode or city.
data controller
A person or organisation that determines how and why personal data is processed. We act as controller when providing intermediary services.
data protection regulation
Applicable data privacy and protection laws.
employment status
Information about whether you are employed, self-employed, unemployed, a student or receiving jobseeker support.
FCA
The Financial Conduct Authority, the independent regulator of financial services.
financial information
Information about financial status, including income, expenditure, tax rate and P60 details.
health information
Medical history and health-related information, including symptoms, diagnoses, procedures, outcomes, height, weight and family medical history.
identity information
Information used to distinguish or verify a person, such as name, date of birth, gender, marital status, passport, driving licence and National Insurance number.
intermediary services
  • Advising on and arranging regulated mortgage products.
  • Advising on and arranging pure protection and general insurance products.
  • Advising on and arranging commercial finance products.
lenders
Mortgage lenders we work with. Contact us using the details above for a current list.
lifestyle information
Work and leisure behaviour patterns, including smoking, alcohol consumption, health, retirement age and exercise habits.
product
A mortgage, protection or general insurance product in respect of which we provide intermediary services.
product provider
A company providing protection and/or general insurance products. Contact us for a current list.
sanction check information
Information concerning politically exposed person status and HM Treasury financial sanctions, recorded to prevent fraud and money laundering.
vulnerability
Personal circumstances that make someone especially susceptible to harm. Categories include health, financial resilience, life events and financial capability.
0800 680 0072 Call free 0800 680 0072