Mortgage Prisoners

Letter 1: Human Rights & Your Mortgage

This letter invokes your rights under Article 1 of Protocol 1 of the Human Rights Act — the right to peaceful enjoyment of your property. If you’re being charged unaffordable interest rates or treated unfairly by a closed-book lender, you have the right to demand an explanation. This letter asks the lender how they are applying this right in your case — and insists on a proper response.

Letter 2: Standard GDPR Request

This is a General Data Protection Regulation (UK GDPR) request for anyone who wants to know how their personal data is being stored, used, or shared. Every company that holds your data has a legal duty to respond within one calendar month.

Letter 3: GDPR Request for Mortgage Transfers

Use this version if your mortgage has been sold or transferred to another company (e.g. from Northern Rock to Landmark, or Landmark to Bloom). It asks for all data relating to your account, including internal decisions, communications, and sale documents.

Letter 4: Complaint to the ICO

If a company ignores or delays your GDPR request, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO). This letter helps you do exactly that.

You have every right to understand who holds your data, how it’s being used, and whether it’s been passed on to third parties. You also have the right to enjoy your own home without unfair interference from corporate lenders.

For use with closed-book mortgage lenders (e.g. Landmark, Bloom, Hessonite, Heliodor, Hyalite, etc.) This letter applies if your mortgage has not been sold to another lender.  If your Mortgage has been sold to another company at some time then fill out the next one below.

[Your Full Name]
[Your Address]
[Postcode]
[Email Address]
[Phone Number – optional]
[Date]

To:
[Insert Lender Name]
[Insert Correspondence Address / Email Address]

Subject: Subject Access Request Under the UK General Data Protection Regulation (UK GDPR)

Dear Sir/Madam,

I am writing to formally request disclosure of all personal data that you hold about me under the UK General Data Protection Regulation (UK GDPR), which is enforced through the Data Protection Act 2018.

I understand that I am entitled to receive:

A copy of all personal data you hold about me in any format (electronic, paper, scanned, archived, etc.)

Details of how and why my personal data has been processed, including:

The legal basis for processing

All third parties my data has been shared with, including asset purchasers, debt servicers, and credit agencies

The source of the data (if not collected from me directly)

Copies of all correspondence or communications in which my personal data is used or referenced

Any contracts, agreements, or records relating to the assignment, sale, or transfer of my mortgage account, including securitisation or transfer to a third party or SPV

Internal memos, system notes, and recorded decisions concerning the setting or amendment of my mortgage interest rate or terms

The name and contact details of your Data Protection Officer (DPO)

To help you locate my records, please see the following account details:

Full Name: [Insert Name]
Mortgage Account Number(s): [Insert Number(s)]
Property Address Linked to Account: [Insert Property Address]
Previous Lender(s) (if known): [Insert Known Lender Chain]
Date of Birth: [Insert DOB, optional for verification]

Please provide the information in electronic format (via secure email or USB if necessary), unless otherwise required.

Under the UK GDPR, you are legally required to respond within one calendar month of receipt of this request. If you require identification to process this request, please inform me without delay, specifying exactly what is needed.

If you fail to comply with this request within the required timeframe, I reserve the right to lodge a complaint with the Information Commissioner’s Office (ICO) and pursue my rights through other appropriate channels.

Please confirm receipt of this request at your earliest convenience.

Yours faithfully,
[Your Name]

Notes for Copy-Paste Users:

• You do not have to explain why you’re making the request.

• It’s free of charge unless your request is excessive or repetitive.

• Always send it via tracked post or email and save a copy.

This version includes specific language about mortgage sale, transfer, and securitisation — ideal for customers affected by closed book lenders like Landmark, Bloom, etc.

[Your Full Name]
[Your Address]
[Postcode]
[Email Address]
[Phone Number – optional]
[Date]

To:
[Insert Lender Name]
[Insert Correspondence Address or Email Address]

Subject: Subject Access Request – UK GDPR – Sale and Transfer of Mortgage

Dear Sir/Madam,

I am writing to make a formal Subject Access Request (SAR) under Article 15 of the UK General Data Protection Regulation (UK GDPR), as enacted in the Data Protection Act 2018.

This request specifically relates to my personal data in connection with my mortgage account, particularly following its sale or transfer to your organisation, or to any third party or legal entity acting on your behalf.

Please provide the following:

A complete copy of all personal data you hold about me, whether held in physical, digital, archived, or call-recorded form.

All correspondence or internal records involving the sale, transfer, assignment, or securitisation of my mortgage, including the date(s) such transactions occurred and the parties involved.

Information about any third party or SPV that has purchased or holds beneficial ownership of my mortgage.

Details of any changes to the terms or interest rate of my mortgage following its sale or transfer, including internal decision-making records or system notes.

All communications, internal or external, involving my name, address, or account number since your acquisition or servicing of my account.

Any automated decisions or profiling applied to my account (e.g. regarding interest rates or risk scoring).

A list of all third parties my data has been shared with, including any data processors or outsourcing partners such as mortgage servicers or legal firms.

The legal basis under which my data is processed, and your justification for continuing to do so following the sale or transfer.

A copy of your privacy policy and your Data Protection Officer’s contact details.

My details for identification and account matching are as follows:

Name: [Insert Full Name]
Mortgage Account Number(s): [Insert]
Property Address: [Insert]
Date of Birth: [Insert]
Previous Lender(s): [Insert if known]

I request this data in electronic format. If further identification is required, please inform me immediately and specify the documents you require.

As required under UK GDPR, I expect a full response within one calendar month. Failure to respond within this timeframe may result in a formal complaint to the Information Commissioner’s Office.

Please confirm receipt of this request.

Yours faithfully,
[Your Name]

Subject: Complaint – Failure to Respond to Subject Access Request (SAR)

Dear Information Commissioner’s Office,

I am writing to raise a formal complaint regarding [Insert Lender Name], who has failed to comply with their obligations under the UK General Data Protection Regulation (UK GDPR).

On [Insert Date], I submitted a Subject Access Request (SAR) to [Insert Lender Name] requesting a full copy of the personal data they hold about me, including data relating to the sale or transfer of my mortgage. This request was made under Article 15 of the UK GDPR and included all necessary information to identify my account.

As of today, [Insert number of days since request], they have failed to respond / have only partially responded / have requested unnecessary identification information [choose one as appropriate].

I believe this is a breach of their statutory duty under the Data Protection Act 2018 and I would appreciate the ICO’s support in enforcing my rights.

Please find attached:

• A copy of my original request

• [Any response received, if applicable]

Yours faithfully,
[Your Full Name]
[Contact Details]

Their physical address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Email address: https://ico.org.uk/make-a-complaint/