Privacy Policy
1. Who We Are
Mayfair Bridging Limited is a specialist short-term property lender incorporated in England and Wales (Companies House number 17261464). We are registered with the Information Commissioner's Office (ICO) as a data controller under registration number ZC170850. In this policy, references to "we", "us", and "our" mean Mayfair Bridging Limited.
Contact us about data protection at dataprotection@mayfairbridging.co.uk or at 16 Berkeley Street, Mayfair, London, W1J 8DZ
2. What This Policy Covers
This policy explains how we collect and use personal data when you visit mayfairbridging.co.uk, contact us through the website, or sign up to receive updates from us. It also sets out our cookie policy. It applies to all visitors to our website.
If you are a borrower or guarantor, our separate Borrower Privacy Notice (provided to you at the point of application) sets out how we handle your data in connection with a lending facility.
3. Personal Data We Collect and Why
3.1 Contact and Enquiry Forms
When you complete a contact or enquiry form on our website, we collect your name, email address, telephone number (if provided), property postcode, property value and the content of your enquiry.
Lawful basis: Legitimate interests - we have a legitimate interest in responding to enquiries submitted to us and maintaining a record of that correspondence.
How long we keep enquiry data depends on how far the enquiry progressed:
Enquiry Data Retention Periods
| Stage reached |
Retention period and reason |
| Initial contact only |
24 months from date of receipt. Bridging finance enquiries frequently return after an interval once a project is ready. After 24 months the record is securely deleted. |
| Progressed to heads of terms, AML/KYC, or credit assessment – no loan taken |
We may retain relevant customer due diligence, identity verification and transaction records for up to five years, or for such longer period as may be required by applicable law, for the purposes of financial crime prevention, compliance, risk management and the establishment, exercise or defence of legal claims. |
| Enquiry resulted in a loan |
Governed by our Borrower Privacy Notice from the point the facility is agreed. |
3.2 Mailing List Sign-Up
If you sign up to receive updates or market commentary from us, we collect your email address and, if provided, your name.
Lawful basis: Consent - we only send marketing emails to people who have actively opted in. You can unsubscribe at any time by clicking the unsubscribe link in any email we send or by contacting us at dataprotection@mayfairbridging.co.uk.
We may use an appropriately appointed email service provider to manage and deliver our mailing list communications. Where we do so, the provider acts on our behalf and is subject to appropriate data protection arrangements. We retain your details until you unsubscribe or we reasonably conclude you are no longer an active subscriber.
3.3 Website Analytics
We use self-hosted Matomo Analytics configured in cookieless mode with IP anonymisation enabled. Matomo does not use cookies, does not collect personally identifiable information, does not track you across other websites, and does not share data with any third party. It collects only aggregate anonymised statistics such as page views, approximate country, browser type, and referral source.
Because Matomo is configured without cookies and does not process personal data, no consent is required for our analytics.
3.4 Technical Data
Standard technical data (IP address, browser type, operating system, pages visited) is recorded by our hosting provider for security and performance purposes only. It is not used to identify you.
Lawful basis: Legitimate interests.
4. Cookie Policy
This section explains the cookies we use on this website, why we use them, and how you can manage your preferences. It should be read alongside the rest of this Privacy Policy.
4.1 What Are Cookies
Cookies are small text files placed on your device by websites you visit. The rules on cookies are set out in the Privacy and Electronic Communications Regulations 2003 (PECR).
4.2 Cookies We Use
| Cookie |
Category |
Duration |
Purpose |
| Session cookie (contact form) |
Strictly necessary |
Session only |
Enables the contact form to function and protects against CSRF attacks. Contains no personal data. Deleted when you close your browser. |
| Marketing preference cookie |
Functional |
30 days |
Set when you subscribe to our mailing list to record your preference and suppress the sign-up prompt on future visits. Set in direct response to your action only. |
We do not use advertising, tracking, profiling, or third-party analytics cookies. Our Matomo analytics runs in cookieless mode.
4.3 Strictly Necessary Cookies
The session cookie is strictly necessary for the contact form to operate. Under PECR, strictly necessary cookies do not require consent as they are essential to a service you have requested.
4.4 Functional Cookies
The marketing preference cookie is set only when you actively subscribe to our mailing list. It does not track your browsing or share data with third parties. You can delete it at any time through your browser settings without affecting your mailing list subscription.
4.5 Managing and Deleting Cookies
You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set notifications when cookies are placed. Guidance is available at the following links:
Disabling the session cookie may affect the contact form. Our analytics are unaffected by cookie settings as Matomo runs without cookies.
5. Who We Share Your Data With
We do not sell your personal data. We share it only where necessary: with service providers acting on our behalf, including providers supporting mailing list delivery and website hosting, subject to appropriate data protection arrangements; professional advisers where required; and regulators, law enforcement bodies, government authorities and other competent authorities where required or permitted by applicable law.
6. International Transfers
We do not routinely transfer personal data outside the United Kingdom. Matomo Analytics is self-hosted on our own UK servers. Where any transfer outside the UK is required in connection with our email service provider, appropriate safeguards are in place.
7. Your Rights
| Right |
What it means |
| Access |
Request a copy of the personal data we hold about you. |
| Rectification |
Ask us to correct inaccurate or incomplete data. |
| Erasure |
Ask us to delete your data in certain circumstances. |
| Restriction |
Ask us to restrict processing in certain circumstances. |
| Object |
Object to processing based on legitimate interests. |
| Withdraw consent |
Unsubscribe from marketing emails at any time. |
To exercise any of these rights, contact us at dataprotection@mayfairbridging.co.uk. We will respond within one calendar month. You may also complain to the ICO at ico.org.uk or by calling 0303 123 1113.
8. Security
We take appropriate technical and organisational measures to protect personal data. Matomo data is held on our own servers and not transmitted to any third-party platform. Third-party providers are contractually required to maintain equivalent security standards.
9. Changes to This Policy
We may update this policy from time to time. The current version is always available at mayfairbridging.co.uk/privacy. The version number and date at the top of this page indicate when it was last updated.
10. Contact
Data controller: Mayfair Bridging Limited
ICO registration number: ZC170850
Email: dataprotection@mayfairbridging.co.uk
Post: 16 Berkeley Street, Mayfair, London, W1J 8DZ