Privacy notice

Who is responsible for your data

Three Keys Mortgages is a trading name of Craig Chavez, a registered individual of Capital Finance Brokers Limited, which is authorised and regulated by the Financial Conduct Authority under reference 943805. For anything you send through this website, Three Keys Mortgages is the data controller.

Contact us about anything on this page at [email protected], on 0333 339 7301, or by post to Midsummer Court, 314 Midsummer Boulevard, Milton Keynes MK9 2UB.

What we collect

• What you send us. The name, email address, telephone number, postcode and message you enter into an enquiry form on this site, together with the page you sent it from and the date and time.
• Technical information. Our web server keeps standard access logs, including your IP address, the pages requested and your browser type. These are used to keep the site running and secure.
• Nothing from the calculators. Every calculator on this site runs entirely in your browser. The figures you type in are never transmitted to us or to anybody else, and are gone when you close the tab.

Our lawful basis

• Consent when you tick the box on an enquiry form asking us to contact you. You can withdraw it at any time.
• Legitimate interests in operating and securing the website and in responding to enquiries made to us.
• Legal obligation where financial services, anti-money-laundering and record-keeping rules require us to hold information.

What we do with it

We use what you send us to reply to your enquiry and, if you go on to become a client, to give you advice and arrange the products you ask for. That is all. We do not sell your information, we do not pass it to lead-generation companies, and we do not add you to a marketing list because you used a calculator.

If you become a client we will share what is necessary with the lender, insurer, solicitor or surveyor involved in your case, and with the regulated firm we operate under. We tell you who before we do it.

How long we keep it

• An enquiry that does not become a case: up to 12 months, then deleted.
• Client records: retained for the period required by financial services regulation, which for mortgage and protection advice is generally at least six years after the relationship ends, and longer where the product itself is long-lived.
• Server access logs: a short rolling period for security and diagnostics.

Cookies

This website sets no tracking cookies, runs no advertising pixels and uses no third-party analytics. Web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers to fetch them and Google will see your IP address as part of that request. Nothing else on the page reaches out to anybody.

Your rights

Under UK data protection law you have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Have inaccurate data corrected.
• Ask us to delete data, where we are not required to keep it by law or regulation.
• Object to processing, or ask us to restrict it.
• Withdraw consent at any time, without affecting anything done before you withdrew it.
• Ask for your data in a portable format.

Email us and we will respond within one month. There is no charge.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

For complaints about advice or service rather than data, the Financial Ombudsman Service can help. Full details are at financial-ombudsman.org.uk.

Changes

If we change this notice we will update it on this page. It was last reviewed in August 2026.