Last updated: 01.09.26

At Paradigm we are committed to ensuring that the data you share with us is treated responsibly. We want you to be confident that the way we use, store and protect your data is done effectively and with the respect it deserves.

This policy explains how we collect, use, share and protect personal data collected through this website, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

1. Who we are

For the purposes of this privacy policy, the data controller is:

Paradigm Mortgage Services LLP (“us” or “we”)
1310 Solihull Parkway
Birmingham Business Park
Birmingham B37 7YB

We are registered with the Information Commissioner with registration no. ZB515524.

2. Changes to this policy

This privacy policy is subject to change at any time. Paradigm Mortgage Services Llp will communicate any major changes to this policy on its websites or using other methods, where appropriate. Any changes to this policy will be communicated prior to them becoming effective.

3. What personal data we collect

This website privacy policy applies to website visitors and also clients (existing and prospective) of ours who access our website and services via the Login or ‘Join’ or ‘Contact’ feature.

If you use the 'Contact' feature of our website, we will receive an email which may contain your name, email address, company/firm name, subject and additional message.
If you use the 'Join' feature of our website, we will receive an email which may contain your name, email address, phone number and company/firm FCA Number.
This information will not be shared with any other organisations other than the parties listed in sections 5 and 8 below.

4. Links to other websites

Our website may contain links to other websites not hosted or controlled by us. You should note that we cannot be responsible for the protection of information which you provide whilst visiting such sites and it's important to tell you that this privacy policy does not govern these sites.

We accept no responsibility or liability for such other websites and you should always exercise caution when entering personal information online, paying particular note to the privacy statement applicable at the point you may enter such information.

5. Newsletters and communications

For firms that subscribe to us for regulatory consultancy services, we use a third-party provider, MailChimp ®, to deliver regulatory updates and Paradigm related communications via your email address. Before we can do this we will ask for your consent, via a link on our website.

Mailchimp (part of the Intuit Group of companies) is based in the USA, but we have a data processing agreement in place with them under which they have in place various mechanisms to ensure the lawful transfer of personal data from the UK to the US, including certification under the UK Extension to the EU-U.S. Data Privacy Framework, and the UK’s International Data Transfer Addendum. For more information, please see section 6 of Mailchimp's data processing addendum - https://mailchimp.com/legal/data-processing-addendum/#6._International_Transfers.

6. Website usage data

We use a third-party service to publish our website. We use a standard service to collect anonymous information about users' activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and help us improve it.  Please see our cookies policy below for more information. 

7. Security of emails

Our mail services use Transport Layer Security (TLS) to encrypt and protect email traffic between our servers and others that are running this feature. We do not force TLS with other mail services and any transmission encryption using TLS between your mail service and ours will be purely opportunistic. We recommend that all personal or sensitive information sent to us is done using a suitably secure method.

We also monitor any emails sent to us for malicious or prohibited content. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

8. Use of data processors and other recipients

Data processors are third parties who provide some aspects of our services, particularly IT service providers, service providers like MailChimp mentioned above, website hosting suppliers etc.. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or other permitted recipients. They will hold it securely and retain it for the period we instruct.

9. What we do with the information you provide to us?

All information you provide to us will only be used for the purpose of managing our relationship with you and to deliver services to you. Our lawful bases for processing your personal information are, depending on the precise activity, legitimate interests (for example in operating and improving our website and services, managing our relationship with you and/or your organization, performing our services and any contract we have directly with individuals), and your consent where this is obtained (for instance signing up to receiving newsletters).
We will not share any of the information you provide to Paradigm with any third parties for their own marketing purposes. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

10. Automated decision-making

We do not currently make any decisions about you based solely on automated processing (including profiling) which produce legal effects concerning you or which similarly significantly affect you.

11. Where we store your information and international transfers

Our servers are situated in inside United Kingdom and all of the information that we collect about you will be stored on these servers.

In certain circumstances, your information may be processed outside the UK, such as where we engage third parties based outside the UK to assist us with the services that you have requested from us. In such circumstances, we will take all steps necessary to ensure that any of your information is adequately protected and processed in accordance with UK data protection law. (for example, our use of Mailchimp in the USA, as described above). Where this happens, we take appropriate steps to ensure your information remains protected to a standard consistent with UK data protection law.

12. How we look after your information and how long we keep it

We use appropriate technological and operational security measures to protect your information against any unauthorised access to or unlawful use. We will retain your information for as long as is necessary to provide you with the services that you have requested from us or for as long as the law otherwise permits, after which it is deleted or anonymised.  Generally speaking, we will retain your personal data for as long as our contractual relationship with you or your organization exists, plus 6 years after its expiry or termination. 
Transmission of information over the internet can be insecure, and although we employ measures to protect your information from unauthorised access, you acknowledge that we cannot always guarantee the security of information sent over the internet once it has left, or before it reaches, our organisation.

13. Consent

We will collect your consent for processing any Personal Data other than for the provision and support of your services with us. You have the right to withdraw such consent at any time by contacting us using the details in the "How to contact us" section below.

14. Your rights

Under UK data protection law, you have rights as an individual which you can exercise in relation to the information we hold about you, these are as follows:

• the right to be informed about how we use your personal data;
• the right to access the personal data we hold about you;
• the right to have inaccurate personal data corrected, or incomplete data completed;
• the right to request erasure of your personal data in certain circumstances;
• the right to restrict processing of your personal data in certain circumstances;
• the right to object to processing of your personal data, including for direct marketing;
• the right to data portability, where applicable; and
• rights in relation to automated decision-making and profiling, where applicable.

You can read more about these rights on the Information Commissioner's Office (ICO) website at this link: https://ico.org.uk/your-data-matters/.
You also have the right to raise a complaint regarding the use of your data – please see section 15 below for more information. To exercise any of these rights, please contact us using the details in the "How to contact us" section below.

15. Your right to make a complaint

Under UK data protection law, you have a right to complain to us directly if you believe we have processed your personal information in breach of UK data protection law, and we are required to deal with any such complaint.

To make a complaint, please contact us by email, telephone or in writing at the details in the "How to contact us" section below. We will acknowledge your complaint within 30 days of receipt and will investigate and respond to it without undue delay, keeping you informed of progress.

You may also complain to the Information Commissioner's Office (ICO) at any time. The ICO can be contacted at https://ico.org.uk/make-a-complaint/ or telephone: 0303 123 1113.

16. Use of Cookies by Paradigm

When somebody visits www.paradigm.co.uk we collect standard internet log information using Cookies. Our cookies are not used to identify you personally, they are used to make the site work better and allow us to analyse how it is being used. You can delete these cookies at any time you want, but some aspects of this site may not work correctly without cookies.

What are cookies?

Cookies are small text files that are placed on your computer by websites that you visit. Websites use cookies to help users navigate efficiently and perform certain functions. Cookies that are strictly necessary for the website to operate properly are allowed to be set without your permission. All other cookies need to be approved before they can be set in the browser – we will collect your consent via a Cookies pop-up banner on our website before we use such optional Cookies.

How do we use cookies?

We use cookies to remember if you have agreed (or not) to our use of cookies on this site.

Videos embedded in our pages may use a cookie to anonymously gather statistics on how you got there and what videos you visited.

Google Analytics sets first party cookies via a piece of JavaScript code. It sets four cookies automatically, and a fifth via opt-in.  We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

17. How to control cookies

You can control and/or delete cookies as you wish using our cookie settings tool or your browser settings. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

18. How to contact us

If you would like further information about this privacy policy, wish to exercise any of your data protection rights, or wish to make a complaint, please contact:

Data Governance Manager
Paradigm Mortgage Services LLP
1310 Solihull Parkway
Birmingham Business Park
Birmingham
B37 7YB
Email: [email protected]
Telephone: 03300 536061