Last updated: 30th March 2023

Consent Procedure

Scope

Where, in accordance with the GDPR, the consent of the data subject is required for the processing of his or her personal data, it will be within the scope of this procedure.

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Responsibilities

The data controller, The Right Mortgage Ltd (We) are responsible under the GDPR for obtaining consent from the data subject under advisement from Data Protection Officer.

We shall be able to demonstrate that:

    1. the data subject has given explicit consent to the processing of his or her personal data.
    2. the data subject has consented to the processing of his or her personal data for one or more specific purposes.
    3. the data subject’s consent is easily distinguishable from any other matter relating to the data subject (if recorded in paper / electronic file format use Data Subject Consent Form, or email then attach the email to the form).
    4. the data subject’s consent is in an intelligible and easily accessible format using clear and plain language.
    5. the data subject has been informed of their right to withdraw consent before giving consent (See Right to withdraw Consent Procedure).
    6. processing of data is limited to the contract bound by the explicit consent given by the data subject.

Child consent procedure

Generally, The Right Mortgage Ltd does not need to collect a lot of information on children, as The Right Mortgage Ltd’s customers are usually adults. Sometimes there is a need to store and process child data from customers to provide protection and mortgage products. Please refer to our Children’s Privacy Policy here for full details.