Last updated: 23 October 2026
Who we are
This notice explains what personal information Mortgage Lab collects through mortgagelab.ai, why we collect it, who we share it with and the rights you have over it.
mortgagelab.ai is run by Mortgage Lab AI Ltd (“Mortgage Lab”, “we”, “us” or “our”). We are the controller of your personal information, which means we decide why and how it is used.
This notice covers people who visit our website, register for free or paid membership, receive our emails, or contact us. It does not cover the websites of our sponsors or of the AI tools listed in our directory. When you follow a link to one of those sites, its own privacy notice applies.
You can contact us about anything in this notice:
- Email: mladmin@mortgagelab.ai
- Post: Mortgage Lab AI Ltd, Grove House, Albert Road, Bulphan, Upminster, RM14 3SB
- Company number: 16748068 (registered in England and Wales)
Information we collect
Most of the information we hold comes directly from you when you register, subscribe or contact us. The rest is collected automatically when you use our website.
| Type | What it includes | Where it comes from |
|---|---|---|
| Registration and account | First name, last name, email address, phone number (optional), company, area of business, areas of interest, your answer to “What else would you like to learn about AI?”, and your password (stored only in hashed form) | You, when you register |
| Membership | Your membership level (free or PRO), when you joined and when your membership changes | Our website |
| Payments | Your name, email address, subscription status and payment confirmations. We never see or store your full card details | Stripe, when you buy PRO membership |
| Email engagement | Whether you open our emails and which links you click | Mailchimp |
| Enquiries | Anything you tell us when you email or write to us | You |
| Website use | Pages viewed, how you arrived, clicks on sponsor and directory links, scrolling, and session recordings of how you interact with pages | Cookies and similar technologies, as set out in our Cookie Policy |
| Technical | IP address, browser and device type, and the date and time of requests to our server | Our server logs |
Please do not include sensitive information, such as health or financial details, in the free-text field on our registration form or in messages to us. We do not ask for it and do not need it.
How we use your information
UK data protection law requires a lawful basis for each use of your information. The table below sets out each purpose and the basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, and giving you access to member content and tools | Contract: we need it to provide the membership you asked for |
| Processing PRO membership payments and upgrading your access | Contract |
| Keeping payment and accounting records | Legal obligation |
| Sending the Friday Briefing and alerts about new AI tools and resources | Consent, which you can withdraw at any time |
| Showing you content relevant to your area of business and interests, and grouping members by membership level for our emails | Legitimate interests: making the site and our emails useful to you |
| Understanding how our website is used, through Connect Stats, Google Analytics and Microsoft Clarity | Consent, given through Cookie preferences |
| Measuring engagement with sponsor links and our AI tools directory, and reporting overall figures to sponsors | Legitimate interests: running and funding the site. Where cookies are involved, we also rely on your consent |
| Replying to your enquiries | Legitimate interests: responding to you |
| Keeping our website secure and preventing spam, fraud and misuse | Legitimate interests: protecting our website and members |
| Handling your rights requests and complaints, and meeting other legal duties | Legal obligation |
Where we rely on legitimate interests, we have weighed our interests against yours. You can object at any time, as explained under Your rights.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Our emails
We send the Friday Briefing and alerts about new AI tools and resources only to people who have agreed to receive them. You choose whether to subscribe when you register.
You can unsubscribe at any time using the link at the bottom of every email, or by contacting us. Unsubscribing does not close your account.
After you unsubscribe, we keep your email address on a suppression list so that we do not email you again by mistake.
We will still send you emails about your account when we need to, such as password resets or changes to your membership.
Cookies, analytics and embedded videos
We use cookies and browser storage to run the website, remember your choices and, with your permission, understand how the site is used. Our Cookie Policy lists each one, its purpose and how long it lasts.
Optional analytics, including Google Analytics and Microsoft Clarity session recordings, run only if you allow them. Microsoft Clarity records how you scroll, click and move around a page; what you type into form fields is masked and not recorded.
Embedded YouTube videos connect your browser to YouTube when they load, and YouTube may use cookies of its own.
You can change your choices at any time using the Cookie preferences link at the bottom of every page.
Who we share information with
We do not sell your personal information. We share it only with the service providers who help us run mortgagelab.ai, and only as far as each needs it.
| Provider | What they do for us |
|---|---|
| IONOS | Hosts our website, member database and server logs |
| Mailchimp (Intuit) | Sends the Friday Briefing and other member emails |
| Zapier | Passes registration and membership details between our website and our email systems |
| Business email (Google Workspace), Google Analytics, Google Tag Manager and YouTube video hosting | |
| Microsoft | Microsoft Clarity website analytics and session recordings |
| Stripe | Processes PRO membership payments |
These providers act on our instructions and must keep your information secure. Google (including YouTube) and Microsoft may also use some information for their own purposes, as described in their privacy notices and our Cookie Policy.
We do not pass your details to our sponsors or to the providers of tools listed in our directory. We may tell sponsors how many people viewed or clicked their content, in figures that do not identify you. If you choose to contact a sponsor or tool provider, what you share with them is covered by their privacy notice.
We may also disclose information when the law requires it, to protect our rights or the safety of others, to our professional advisers, or to a buyer if our business or website is sold.
Transfers outside the UK
Our website and member database are hosted by IONOS on servers in the UK. Mailchimp, Zapier, Google, Microsoft and Stripe are based in the United States and may process your information there or in other countries where they operate.
When your information leaves the UK, we make sure one of these protections applies:
- the recipient is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection; or
- we have a contract with the recipient based on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more detail on the protection used for any provider.
How long we keep information
We keep personal information only for as long as we need it for the purposes in this notice, then delete or anonymise it.
| Information | How long we keep it |
|---|---|
| Account and registration details | While your account is open, and 12 months after you close it or after 24 months without signing in |
| Email subscription | Until you unsubscribe. Your email address then stays on our suppression list so we do not email you again |
| Payment and accounting records | 6 years after the end of the financial year they relate to, as UK tax law requires |
| Enquiries and correspondence | 2 years after our last contact with you |
| Rights requests and complaints | 2 years after we close the matter |
| Connect Stats records | 14 months |
| Google Analytics data | 14 months |
| Microsoft Clarity recordings | Up to 30 days |
| Server logs | 30 days |
Where we are required to keep information for longer, for example because of a legal claim, we keep it only for that purpose.
Keeping your information secure
We use technical and organisational measures to protect your information from loss, misuse and unauthorised access. These include encrypted (HTTPS) connections to our website, passwords stored only in hashed form, and access to member data limited to the people who need it.
No website or internet transmission is completely secure. If we become aware of a breach that is likely to put you at risk, we will tell you and, where required, the ICO.
You can help by using a strong password that you do not use elsewhere, and by telling us straight away if you think someone else has accessed your account.
Your rights
UK data protection law gives you the following rights over your personal information:
- Access: ask for a copy of the information we hold about you.
- Correction: ask us to correct information that is wrong or incomplete. You can also update most account details yourself.
- Deletion: ask us to delete your information where we no longer have a good reason to keep it.
- Restriction: ask us to limit how we use your information while a concern is looked into.
- Objection: object to uses based on our legitimate interests. You can always object to marketing, and we will stop.
- Portability: ask for information you gave us in a commonly used electronic format.
- Withdrawing consent: where we rely on consent, withdraw it at any time. This does not affect what we did before you withdrew it.
To use any of these rights, email mladmin@mortgagelab.ai or write to us at the address above. We may need to confirm your identity first.
There is normally no charge. We will respond within one month, or tell you within that month if we need up to two more months because your request is complex.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can put it right. Email mladmin@mortgagelab.ai or write to us at the address above, using any words you like.
We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You also have the right to complain to the UK’s data protection regulator, the Information Commission’s Office (ICO), at ico.org.uk/make-a-complaint.
Children
mortgagelab.ai is for mortgage and finance professionals and is not intended for anyone under 18. We do not knowingly collect information about children. If you believe a child has registered, please contact us and we will delete their details.
Changes to this notice
We will update this notice when our website, services or use of personal information changes. The date at the top shows when it was last updated. If we make a significant change, we will tell registered members by email.
Contact us
For any question about this notice or your personal information, email mladmin@mortgagelab.ai or write to Mortgage Lab AI Ltd, Grove House, Albert Road, Bulphan, Upminster, RM14 3SB.