Skip to content
Mortgage Savings Expert
4.8/5 | 308+ reviews

Privacy Policy

Effective Date: 1st December, 2020
Last Updated: 7th August, 2025

1. Who We Are

This Privacy Policy explains how we collect, use, share, and protect your personal data. We operate as a lead generation company under the trading name Mortgage Savings Expert and may operate additional branded websites.

Data Controller:

Digital Roo Ltd
49 Station Rd, Polegate, BN26 6EA
Email: compliance@digitalroo.co.uk
Registered in England and Wales
Company Number: 11496923

2. What Personal Data We Collect

We may collect the following types of data when you use our website:

  • Contact details: name, phone number, email address, postcode
  • Demographic details: date of birth, marital status, employment status
  • Financial information: income, expenses, mortgage details, credit profile (if entered)
  • Lead qualification data: answers you provide in our web forms
  • Technical data: IP address, browser type, device ID, referral source
  • Location data: approximate geographic location based on your IP address
  • Cookies & tracking data: see our Cookie Policy

3. How We Collect Your Data

We collect personal data when you:

  • Fill in a form on our website
  • Click on our advertisements (e.g. Facebook, Google, TikTok)
  • Interact with our website or landing pages
  • Communicate with us via email or phone

We may also use tools and analytics to detect your geographic location, device type, and browsing behaviour using your IP address and browser data.

4. How We Use Your Data

We use your personal data to:

  • Match you with a relevant third-party provider or adviser
  • Share your enquiry with selected partners so they can contact you
  • Optimise which provider receives your enquiry, based on your form responses and approximate location
  • Improve the performance and experience of our website
  • Comply with legal or regulatory obligations
  • Send follow-up communications, where permitted

By submitting your information, you acknowledge that we may share your data with relevant third-party providers who may offer financial services. In some cases, we may receive a fee or commission from these partners when we introduce you to them.

5. How Decisions Are Made About Your Data

Some decisions about which partner receives your enquiry are made automatically based on your form responses and geographic location. For example:

  • Your answers may determine which product or provider is most relevant
  • Leads with similar answers may be distributed using a round-robin system

These decisions are made using automated business rules. They do not involve pricing, eligibility, or credit decisions. You may request human review or object to this type of processing at any time.

6. Who We Share Your Data With

We may share your data with:

  • Selected third-party partners or clients who offer the services you’re interested in
  • Our technology providers, who help us store and process your data securely. These include:
    • Leadbyte (lead distribution and CRM management)
    • Leadshook (form logic and data capture)
    • Vultr (cloud infrastructure for hosting)

All third-party processors are contractually obligated to comply with UK GDPR and to process your data securely and only as instructed.

We do not share your data with unrelated parties. We never sell your data in bulk or for general marketing lists.

7. Lawful Basis for Processing

We rely on the following legal bases:

  • Consent – when you provide your details and agree to be contacted
  • Legitimate interests – in operating our service and matching you with relevant providers
  • Legal obligations – where we must comply with applicable laws or industry regulations

8. How Long We Keep Your Data

We retain your personal data for only as long as necessary:

  • Unconverted leads: typically up to 12 months
  • Converted leads: according to the policies of the receiving provider
  • Analytics & cookie data: typically up to 26 months, depending on the platform

We regularly review and securely delete data when it is no longer required.

9. International Transfers

Some of our providers may process data outside the UK. When this happens, we ensure that your data is protected by:

  • UK-approved standard contractual clauses, or
  • Adequacy decisions for countries with equivalent data protections

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct any inaccuracies
  • Withdraw your consent at any time
  • Object to or restrict certain processing
  • Request deletion of your data
  • Request human review of automated decisions
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at compliance@digitalroo.co.uk.

11. How We Keep Your Data Safe

We take appropriate steps to protect your personal data, including:

  • Secure cloud infrastructure provided by Vultr
  • Encryption of data in transit and at rest
  • Firewalls and access controls
  • Internal policies and staff confidentiality training

12. Profiling & Ad Targeting

We may use tools like Google Ads, Meta Pixel, TikTok Pixel, or other analytics platforms to understand your behaviour and interests. This helps us improve advertising relevance and website performance.

These tools may track how you interact with our website and use this data to serve personalised ads on other platforms.
For more information, and to control these settings, please see our Cookie Policy.

13. Support for Vulnerable Individuals

We aim to ensure that everyone can access our services fairly and without discrimination. If you have specific accessibility needs or feel that a vulnerability may affect how you use our website or understand this policy, please contact us. We will do our best to support you.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review their policies before submitting any data.

15. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, with a revised “Last Updated” date above. Please check back regularly to stay informed.

16. Children’s Privacy

Our services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe we have mistakenly collected information from a child, please contact us.