Website Privacy Policy

1. Introduction


 
Crystal Specialist Finance, a trading style of Crystal Mortgages Limited is committed to keeping your personal data secure and protecting your privacy. This Privacy Policy (the Policy) explains how we collect, use, process and disclose your personal information and usage data, when you visit our website https://www.crystalsf.com/.

Data Protection laws (UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018) impose obligations on us as a Data Controller, when we collect, hold, amend, share or use or erase/destroy (process) data.

Under those obligations we should process your personal data fairly, lawfully and in a transparent manner. This Policy is designed to help you understand what we hold, why we hold it and how your personal data is used.

References in this Policy to “we”, “us”, and “our” are references to Crystal Specialist Finance. References to “you” or “your” are references to any person reading this Policy. If we change how we use your information, we’ll update this Policy. If the changes are significant, we will aim to inform you directly about these changes.

The Policy also explains our use of cookies and other similar technologies across the website.

 

2. Who We Are


 
Crystal Specialist Finance is a UK leading specialist finance distributor. We aim to deliver outstanding service levels to professional Mortgage Intermediaries, and in all areas of our business. We offer solutions across Bridging Finance, Buy-to-let Mortgages, Commercial Finance, Development Finance, Second Charge Loans, Specialist Residential Mortgages and Specialist Support Services.

 

3. Information We Collect


 
The website provides users (Mortgage Intermediaries) with an opportunity to submit online forms and view information, if they are interested in our products/services. While using our website, we may ask you to provide us with certain types of data.
We collect the following types of information:
 
(a) Personal Information

When you voluntarily submit information via contact forms, we may collect:

  • First name and last name;

  • Email address;

  • Phone number;

  • Company name;

  • Reason for callback;

  • Your FCA number;

  • Any personal information you include, when submitting a complaint online

  • Data shown in the ‘Comments Forms’ when visitors leave comments on the website; and

  • Visitor’s IP address and browser user agent string, to help spam detection.

 
(b) Usage Data

When you visit our website, we automatically collect information about your device and usage patterns, including:

  • IP address,

  • Browser type,

  • Pages visited,

  • Length of visit,

  • Time and date of visit; and

  • Referring URLs.

 
(c) Cookies and Tracking Technologies

Our website uses cookies and other similar technologies to distinguish between users.
We use cookies and similar tracking technologies to analyse website traffic and enhance user experience. See section 8 for more details.

 

4. How We Collect Information


 
We will collect personal data from a variety of sources:

  • You;

  • Your employees/employer and representatives;

  • Connected Firms;

  • Borrowers and potential borrowers;

  • Solicitors and persons working on your behalf;

  • Your representatives or advisers; and

  • Firms providing services to Networks and Mortgage Clubs, distribution partners or those submitting applications to us.

If your personal details change, please let us know as soon as possible. We will update our records once we have confirmed the new information (such as your new address or contact details) is correct.

 

5. How We Use Your Information


 
We will use your information to:

  • Respond to enquiries or provide requested services;

  • Improve website functionality and user experience;

  • Communicate marketing offers (if consented);

  • Analyse website performance via analytics tools; and

  • Comply with legal obligations.

 

6. Sharing Your Information


 
We do not sell your personal data. We may share information with:

  • Service providers, such as Google Analytics 4 and Dot Digital, for analytics and marketing automation;

  • Legal or regulatory authorities when required to comply with the law; and

  • IT support providers and other professional advisers, if necessary for our operations.

 

7. Legal Basis for Processing


 
Under UK GDPR, our legal bases for processing your data may include:

  • Your consent;

  • Contractual requirement (e.g., responding to an enquiry);

  • Legitimate interests (e.g., improving our services); and

  • Compliance with a legal obligation.

 

8. Cookies and Tracking Technologies


 
Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit a website. With your permission, they’re added to your device and can be used to track the pages you visit. This helps websites remember your preferences and improve your experience.

We use necessary cookies for website functionality. They enable core features like page navigation, secure access to forms, and ensure the site performs as expected. The website cannot function properly without these cookies, and can only be disabled by changing your browser preferences.

We use session cookies to help you move between pages on our website without having to re-enter the same information multiple times.

We use marketing cookies to store information about users and their behaviour on our site. This data helps us better understand our audience and deliver more relevant, targeted advertising. These cookies are typically set by third-party platforms and help to improve the effectiveness of our marketing campaigns.

We may also use analytical cookies to recognise your device when you return. This helps us understand your interests and adjust our content to better suit you and our other visitors. We only use this information for statistics.

Cookies do not give us access to your computer or any personal information – only what you choose to share.

How can you manage your cookies?

You can choose to accept or decline cookies. Most browsers accept them automatically, but you can change your settings if you prefer. Just keep in mind that declining cookies may affect how well the website works for you.

 

9. Embedded Content and Third-Party Services


 
Some pages on our website include embedded content from other websites, such as videos, images, or articles. This content works the same as if you were visiting the original website directly.

These third-party websites may:

  • Collect data about you;

  • Use their own cookies or tracking tools; and

  • Monitor how you interact with their content – especially if you’re logged into their service (like YouTube, X, or LinkedIn)

Because this content comes from other websites, we don’t control the cookies or data they collect. If you want to manage or block these cookies, you’ll need to check the cookie settings on the third-party websites themselves.

We also use social sharing buttons to let you share our content on platforms like Facebook, LinkedIn, or X. These websites might set cookies if you’re logged in to your account.

Please note that we don’t control these cookies, so we recommend visiting the relevant site to learn how they use your data and how to manage their cookies.

 

10. Data Retention


 
We retain personal data only as long as necessary to fulfil the purposes for which it was collected or as required by law. Usage data may be retained for up to one year.

 

11. Your Rights (Under UK GDPR)


 
You have the right to:

  • Access the personal data we hold about you;

  • Request correction or deletion of your data;

  • Object to or restrict certain processing;

  • Withdraw consent at any time (where applicable); and

  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at info@crystalsf.com.

 

12. Children’s Privacy


 
Our website is not intended for children under the age of 16 and we do not knowingly collect personal data from children.

 

13. Changes to this Privacy Policy


 
We may update this Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review it periodically.

 

14. Contact Us


 
We respect your right to privacy. If you have questions about this Policy or wish to exercise your data rights, please contact:

The Data Protection Officer

Crystal Specialist Finance

Unit A Ventura House, Ventura Park Road, Tamworth, B78 3LZ, United Kingdom

Email: info@crystalsf.com

Website: https://www.crystalsf.com/

 

15. Where can I get more information?


 
For more information on cookies and your rights, visit the ICO website;

https://ico.org.uk/for-the-public/online/cookies/