Effective as of 13 July, 2018
Mount Street Mortgage Servicing Limited together with its affiliates (“Mount Street”, “we”, “us” or “our”) is committed to protecting your privacy. The following discloses the information gathering and dissemination practices for Mount Street.
Pursuant to the European Union General Data Protection Regulation (GDPR), we function in the capacity of a “processor” for the services we provide. The scope of applicable data protections and processing for those services are set forth in contractual agreements covering the relevant data processing.
Controller versus Processor: We may process certain personal information in order to maintain and provide the services to our clients, such as names, addresses, email addresses, and other contact information for designated client representatives or personnel (“Client Relationship Data”). In addition, we may send marketing materials or communications to potential or existing clients (“Marketing Activities”). For purposes of Client Relationship Data and Marketing Activities, we function as a “data controller” under GDPR.
Information You Provide: You may provide us with your personal information when you visit our Websites and express interest in obtaining information from us or in engaging with us. “Personal Information” is defined as any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
In some cases, we will ask for your consent so that we may process your personal information. However, in certain circumstances, applicable data protection laws allow us to process your personal information without needing to obtain your consent. Those situations might include:
For the performance of a contract. To perform our contractual obligations to you, including our fulfilling orders or requests you have made, contacting you in relation to any issues with your order or use of our services, or where we need to provide your Personal Data to our service providers related to the provision of the services.
To comply with legal obligations. To comply with laws, regulators, court orders, or other legal obligations, or pursuant to legal process.
Legitimate Interests. To operate our business and provide our services (other than in performing our contractual obligations to you) for our “legitimate interests” and for the purposes of applicable law, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Legitimate interests may include:To operate our business and provide our services (other than in performing our contractual obligations to you) for our “legitimate interests” and for the purposes of applicable law, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Legitimate interests may include:
The information you provide may include the following:
Information you provide to us voluntarily, such as your first and last name, email address, street address, phone number, title, company name, country and area of interest when you register with the Website to request additional information from us, download thought leadership content, or for client services or events. Information you post or provide when using the Websites, including comments or feedback you may provide. Information you may choose to provide in response to an email or phone contact with us that you have requested. Information obtained from satisfaction and product surveys that you may have opted in to receive. Information you provide when you submit an application for a position, or query about a job opening.
Visitors who provide information to us about the company for which they work are presumed to have the authority to provide such information.
Registration To use certain portions of our Sites and to access certain requested content and information, a user must first complete registration and request forms. During registration and requests, users are required to provide personal information.
Information We Collect Automatically: Like most websites, we also automatically collect and store certain anonymous information from visitors on our Sites. This may include the Internet Protocol (“IP”) address or device ID, operating system, browser type, traffic, the pages of the Sites that you visit, the time spent on those pages, access dates and times, and location data.
Do Not Track Our web servers do not change the way they respond to your browser when they receive a “do not track” signal.
How We Use Your Information: We use contact and other information obtained through our Websites to deliver, maintain, develop and monitor the Websites and to enhance user experience on our Sites and/or Websites by personalizing the experience. Information we collect may also be used in the following ways:
To third-party vendors, consultants or other service providers in connection with the operation of the Websites and our business, who need access to such information to carry out their work for us. This may include cloud computing companies, cloud communications platform as a services (PaaS), web analytics services, employment-related service providers, and mailing and emailing services. For example, we may use credit card processing or verification service companies to verify credit card information. To our affiliated companies with proper consent. As required by law to respond to judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law. To protect the rights, property or safety of Mount Street or other of its Websites’ users.
Social Media: You may log onto third party social networking websites via social network sharing widgets to share, comment or recommend our blog posts. The social network sharing widgets may provide information to their associated social networks or third-parties about your interactions with our web pages that you visit, even if you do not click on or otherwise interact with the plug-in or widget. Information is transmitted from your browser and may include an identifier assigned by the social network or third party, information about your browser type, operating system, device type, IP address, and the URL of the web page where widget appears. If you use social network tools or visit social networking sites, we encourage you to read their privacy policies to learn what information they collect, use, and share.
Your Access, Opt-Out and Other Data Rights: You have the right to request confirmation from us as to whether or not we are processing your Personal Information in our capacity as a Data Controller. Where we are processing your Personal Information as a Data Controller, you also have the right to request access to, modification of, or deletion of such Personal Information.
You also have the right in certain circumstances to receive the Personal Information concerning you that you provided to us, to restrict processing of your Personal Information, or to transmit such data to another data controller.
To exercise these rights with respect to your Personal Information, please contact us at Compliance@mountstreetllp.com.
You may inquire about these rights as follows:
Security: We are committed to protecting the security, integrity and confidentiality of the data through the use of a variety of commercially reasonable, industry standard physical, administrative and technical safeguards. This includes, but is not limited to, access controls, employee training, industry-standard encryption, firewalls, and server authentication technology to protect data when the Sites are accessed using a supported web browser. We host data in cloud-based environments including Amazon Web Services (AWS), Google Cloud Platform (GCP), and EMC that use intrusion protection and intrusion detection systems and other industry-standard technology in an effort to prevent access from outside intruders.
It is your responsibility to keep confidential the user name and password provided to you by Mount Street at the time of your registration on the Website. If you become aware of any unauthorized use of an account, loss of your account credentials or suspect a security breach, notify us immediately.
The Internet, however, is not perfectly secure and we are not responsible for security incidents not reasonably foreseeable or reasonably within our control.
Data Retention: We retain data for as long as necessary to provide access to the Websites to you or as long as legally permissible in accordance with applicable law, including as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, comply with applicable industry standards, and in accordance with disaster recovery procedures.
Children: We do not direct any Sites or Websites to, nor do we knowingly collect any Personal Information from children under thirteen.
Contact Us: If you have any questions about this privacy statement, the practices of this Website, or your dealings with this Website, you can contact:
Mount Street Mortgage Servicing Limited, Woolgate Exchange, 25 Basinghall Street, London EC2V 5HA Compliance@mountstreetllp.com