Privacy Notice

Last updated 24 March 2026

M&E Curtin Financial Services T/A MC Financial is committed to protecting and respecting your privacy.
We wish to be transparent on how we process your data and show you that we are accountable under
GDPR in relation to not only processing your data but ensuring you understand your rights.

For the purposes of the GDPR the data controller is M&E Curtin Financial Services T/A MC Financial.

Our contact details are:

M&E Curtin Financial Services T/A MC Financial
Unit 1 Coolmine Enterprise Centre
Coolmine
Dublin 15
Tel: 01 8228022
Email: info@mcfinancial.ie

When we refer to we/us, we mean M&E Curtin Financial Services T/A MC Financial
Please read this Privacy Notice carefully as this sets out the basis on which any personal data, we collect
from you, or that you provide to us, will be processed by us.

Who are we?
M&E Curtin (Financial Services) Limited trading as MC Financial is a financial services intermediary
authorised by the Central Bank of Ireland.

Our principal business is to provide advice and arrange transactions on behalf of clients in relation to:

• Mortgages
• Life assurance and protection products
• Pensions

Our GDPR Owner
For the purposes of the GDPR the data controller is M&E Curtin (Financial Services) Limited trading as
MC Financial.

Our GDPR Owner can be contacted at:
Michael Curtin
M&E Curtin Financial Services Limited t/a MC Financial
Unit 1, Coolmine Enterprise Centre
Coolmine
Dublin 15
Email: info@mcfinancial.ie

How do we collect your information and what information do we collect?
The personal information we collect varies depending upon the nature of our services. We will endeavour
to provide you with an overview of those categories of personal data our organisation collects and our
purpose for using that data.

Our organisation collects personal data in the following ways, if you:
• Request financial advice or services from us such as mortgages, life assurance or pensions
• Use our website or contact us through online forms
• Use our website where cookies or similar technologies may collect technical information
• Engage with us through social media platforms such as LinkedIn, Facebook or Instagram
• contact us with a complaint or query
• apply for a position with us

What information do we collect?
The information we collect about you includes the following:

1. Contact and Identifying information, e.g., Name, address, email address, telephone
number and date of birth. We may also collect identification documents required for
regulatory or verification purposes.
2. Unique identifiers e.g.
• PPS number – the reason why we collect your PPS number is to enable us to
identify you correctly when arranging financial products and to meet regulatory
and taxation requirements.
• Pension scheme reference number – the reason why we collect this is to identify
and administer pension arrangements.
• Insurance policy numbers – the reason why we collect this is to identify and
administer insurance policies.
3. Demographic details, Information such as age, marital status, dependants and lifestyle
information where relevant to assessing financial needs or insurance requirements.
4. Family and Beneficiary Data, e.g.,
Details of dependants, next of kin or nominated beneficiaries and professional advisers
such as solicitors or accountants where relevant to the services provided.
5. Employment information
Employment status, employer details, income, employment benefits and employment
history where required to assess financial suitability or mortgage affordability.
6. Publicly available sources: e.g., Information about you available in the public domain such
as director information from the Companies Registration Office.
7. Health information
Health Information such as medical history, medical assessments and lifestyle information
(for example smoking or alcohol consumption) where required for life assurance, protection
or insurance products.
We may also process certain special categories of personal data where necessary in
connection with the provision of financial services or to meet regulatory obligations.
8. Pensions and Insurance Benefits information
Information relating to existing insurance policies or pension arrangements such as current
benefits, pension entitlement information, retirement dates and any matters impacting
those benefits, including voluntary contributions.
9. Financial information
Financial details such as bank account details, income, financial commitments, credit
history, tax information, assets and liabilities where required to assess mortgage
affordability, financial suitability or pension requirements.
10. Claims Data
Information relating to insurance claims provided by you or relevant third parties where
necessary to assist in the administration of insurance policies.
11. Marketing preferences:
We may contact you in relation to services you have received from us, such as mortgage,
pension or protection reviews, where this forms part of our ongoing client servicing.
Where we send you direct marketing communications about our services, we will do so
only where you have provided your consent or where permitted under applicable data
protection legislation.
You may withdraw your consent to receive marketing communications at any time by
contacting us.
12. Online information:
Information relating to your use of our website, such as technical information including IP
address, browser type and website usage data collected through cookies or similar
technologies.
Further information on how we use cookies is available in our Cookie Policy on our website.
13. Events information
Information relating to your interest in or attendance at events organised by MC Financial,
such as webinars, seminars or client information events.
14. Social media information
Information relating to your interactions with our social media pages, such as LinkedIn,
Facebook or other social media platforms.
15. Criminal records information
Information relating to criminal convictions or alleged offences where required for
insurance or regulatory purposes.
16. Anti-Money Laundering and Regulatory Checks
We may carry out identity verification and regulatory checks including anti-money
laundering checks, sanctions screening, politically exposed person (PEP) checks and adverse
media screening using third-party providers such as Credit Logic (Jumio).

Information we automatically collect.
We may automatically collect certain technical information when you visit our website or interact with
our communications. This may include your IP address, browser type, device information and details of
how you use our website.
This information may be collected using cookies or similar technologies. Further information is available
in our Cookie Policy on our website.

How do we use your personal data?
Your personal data will be used to enable us to fulfil our contractual obligations in relation to your request
for mortgage, pension and protection products and financial advice.
1. Providing services to you
To provide financial advice and arrange mortgage, pension and protection products based on
your needs and circumstances.
2. Regulatory and Legal Obligations
To comply with our legal and regulatory obligations, including:
• anti-money laundering and identity verification requirements
• Know Your Customer (KYC) and fact finding
• obligations under the Consumer Protection Code
3. Client servicing
To maintain ongoing contact with you in relation to products arranged by us, including mortgage,
pension and protection reviews where appropriate.
4. Marketing communications
To contact you about our services where you have provided consent or where permitted under
applicable data protection legislation.
5. Responding to queries and communications
To respond to any enquiries, requests or communications from you.
6. Administering our business and systems
To manage our business, including record keeping, data analysis and system administration.
7. Processing claims
To assist with the administration of insurance claims where relevant.
8. Complaints handling
To manage and respond to any complaints received.
9. Contractual obligations
To carry out our obligations arising from any agreements entered into between you and us.

Legal Basis
We process your personal data in accordance with applicable data protection legislation. The legal bases
we rely on include the following:

Performance of a contract
We process your personal data where it is necessary to provide you with financial advice and to arrange mortgage, pension and protection products.

Legal obligation

We process your personal data where necessary to comply with our legal and regulatory obligations, including obligations under anti-money laundering legislation and the Consumer Protection Code.

Consent

We may rely on your consent to process certain types of personal data, including:
• special categories of personal data (such as health information)
• information relating to criminal convictions where required
• direct marketing communications
You may withdraw your consent at any time. Sometimes if you refuse to provide information that we reasonably require to provide the services, we may be unable to offer you the services and/or we may terminate the services provided with immediate effect.

Legitimate interests

We may process your personal data where it is necessary for our legitimate interests in operating and managing our business, provided that such interests do not override your rights and freedoms.

If you require further information on any of the above basis for processing your data, we can provide
you with further details.

How we share your data

We may share your personal data with third parties where necessary to provide our services, comply with legal obligations or operate our business. We will only share your information where it is necessary and appropriate safeguards are in place.

1. Product providers
Insurance companies, lenders and pension providers to arrange and administer financial
products on your behalf.
2. Regulatory and public authorities
Regulators such as the Central Bank of Ireland and other authorities where required by law.
3. Anti-money laundering and compliance providers
Third-party providers who assist with identity verification, anti-money laundering checks,
sanctions screening and fraud prevention (such as Credit Logic (Jumio)).
4. Professional advisers
Professional advisers such as accountants, auditors, legal advisers or compliance consultants
where required.
5. IT and service providers
Third-party service providers who support our business systems, including IT providers, CRM
systems and data storage providers.
6. Other third parties
Other parties where necessary in connection with providing services to you, including where
you have authorised us to do so.
7. Claims-related parties
Insurance providers, claims assessors or medical professionals where necessary to assist
with insurance claims.

We have appropriate data processing agreements in place with third parties where required to ensure
your data is protected.

Transferring personal data outside of Ireland

In some cases, your personal data may be transferred to or stored in countries outside the European
Economic Area (EEA), for example where we use cloud-based systems or third-party service providers.

Where this occurs, we will ensure that appropriate safeguards are in place to protect your personal data,
such as:
• reliance on EU Commission adequacy decisions; or
• the use of Standard Contractual Clauses approved by the European Commission.

We take all reasonable steps to ensure that your data is treated securely and in accordance with this
Privacy Notice.

Security

We take the security of your personal data seriously and have implemented appropriate technical and
organisational measures to protect it from unauthorised access, loss, misuse or alteration.
Access to your personal data is restricted to those who require it for legitimate business purposes.

Retention

We will retain your personal data only for as long as necessary for the purposes for which it was collected
and to comply with our legal and regulatory obligations.
In general, we retain client records for a minimum of 6 years after the end of the business relationship or
completion of a transaction. In certain circumstances, records may be retained for longer where required
for regulatory, legal or professional indemnity purposes.
Personal data will be securely deleted or disposed of when no longer required.
Further details are available in our Record Retention & Disposal Policy.

Data Subject Rights:

You have the following rights under data protection legislation:
• Right of access – to request a copy of the personal data we hold about you
• Right of rectification – to have inaccurate or incomplete data corrected
• Right to erasure – to have your data deleted in certain circumstances
• Right to restriction of processing – to restrict how your data is used
• Right to data portability – to have your data transferred to another provider
• Right to object – to object to certain types of processing, including direct marketing
• Rights in relation to automated decision making – including profiling

If you wish to exercise any of these rights, please contact us using the details provided in this Privacy
Notice.

We will respond to your request in accordance with applicable data protection legislation.

Complaints

If you have any concerns about how your personal data is being processed, please contact us in the first instance and we will do our best to resolve the issue. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Email: info@dataprotection.ie
Website: www.dataprotection.ie

Failure to provide information

Where we require your personal data to provide our services and you do not provide this information, we
may be unable to offer or continue to provide our services to you.

Profiling – automatic decision making

We may use automated tools and systems to assist in assessing your financial needs, including
affordability assessments, risk profiling and regulatory checks.
These tools support our decision-making process; however decisions are not made solely by automated
means without human involvement.

Special Categories of personal data

We may collect and process special categories of personal data (such as health information) where this is
necessary to provide financial services, including insurance and pension products.

Where we process such data, we will ensure that:

• the data is necessary for the services provided;
• we have obtained your explicit consent where required; and
• appropriate safeguards are in place to protect your data in accordance with applicable data protection legislation.

Contact Us

Your privacy is important to us. If you have any comments or questions regarding this statement, please
contact us on (01) 8228022 or email info@mcfinancial.ie

Privacy notice/ statement changes

When we update this Privacy Notice/Statement, we will post a revised version online. Changes will be effective from the point at which they are posted. We would encourage you to review our Privacy Notice so that you are aware of updates.

Approved by: Michael Curtin
Approval Date: 25 March 2026