Data Privacy

Data Privacy Statement – Mortgage Advice Webinar

 

Waterford Mortgages and Investments Ltd.
Data Controller

Last updated: Sept 2026

 

Waterford Mortgages and Investments Ltd. is regulated by the Central Bank of Ireland and is a Tied Branch Agent for EBS d.a.c.

Waterford Mortgages and Investments Ltd. (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Data Privacy Statement explains how we collect, use, store and protect your personal information when you register for or attend our Mortgage Advice Webinar, and how you can exercise your rights under applicable data protection law.

This statement is intended to comply with our obligations under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018 and applicable Irish electronic communications and direct marketing legislation.

  1. Who is the Data Controller?

The Data Controller responsible for your personal data is:

Waterford Mortgages and Investments Ltd.
Address: 19/20 Broad Street, Waterford City
Email: MauriceMcGee@WaterfordMortgagesandInvestments.ie

Telephone: 051 872 926

If you have any questions about how we process your personal data, please contact us using the details above.

  1. What personal data do we collect?

When you register for or attend our Mortgage Advice Webinar, we may collect:

  • Your name;
  • Your email address;
  • Your telephone number;
  • Information relating to your webinar registration and attendance; and
  • Any information you voluntarily provide to us in connection with the webinar or a subsequent enquiry.

We ask that you do not provide sensitive or special-category personal data unless specifically requested and necessary for a particular purpose.

  1. How do we collect your personal data?

We generally collect your personal data directly from you when you:

  • Register for the Mortgage Advice Webinar;
  • Complete an online registration form;
  • Contact us about the webinar;
  • Attend or participate in the webinar; or
  • Subsequently contact us regarding mortgage advice or our services.
  1. Why do we use your personal data?

We may use your personal data for the following purposes:

Webinar administration

To:

  • Process and manage your webinar registration;
  • Send you information relating to the webinar;
  • Contact you if there are changes to the webinar arrangements;
  • Facilitate your attendance or participation; and
  • Respond to questions or enquiries you submit in connection with the webinar.

Follow-up enquiries

Where you subsequently ask us to contact you regarding mortgage advice or our services, we may use the contact details you provide to respond to your enquiry and provide information requested by you.

Marketing

Where you have provided the appropriate consent, we may use your name, email address and/or telephone number to contact you about mortgage-related services, products, events, webinars and other information that may be relevant to you.

Electronic direct marketing, including marketing by email, text and telephone, is subject to specific requirements under Irish law in addition to the GDPR. We will only send such communications where we have an appropriate lawful basis and have complied with applicable direct marketing rules.

You can withdraw your marketing consent or object to direct marketing at any time.

  1. What is our lawful basis for processing your data?

Depending on the circumstances, we may rely on one or more of the following lawful bases under Article 6 GDPR:

Consent: Where you have freely and specifically consented to a particular use of your personal data, such as receiving marketing communications.

Legitimate interests: Where processing is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. For example, this may include managing and administering our webinar and responding to general enquiries.

Contract or steps prior to entering into a contract: Where processing is necessary in connection with a service you have requested or steps you have asked us to take before entering into a contract.

Legal obligation: Where we are required to process personal data to comply with a legal or regulatory obligation.

The Data Protection Commission confirms that consent is only one of the lawful bases available under Article 6 GDPR and that the appropriate lawful basis depends on the particular processing activity.

  1. Marketing communications

If you would like to receive information about our mortgage services, future webinars or other relevant services, we may ask you to provide a separate marketing consent.

Where consent is required, it will be obtained through a clear affirmative action, such as ticking an appropriate consent box. Consent will not be a condition of attending the webinar.

You may withdraw your consent at any time. You may also object to direct marketing at any time, and where you object to direct marketing, we will stop processing your personal data for that purpose.

Every applicable electronic marketing communication will provide an appropriate means of opting out.

  1. Who may receive your personal data?

We may disclose your personal data to third parties where this is necessary for the purposes described in this statement.

These may include:

  • Our webinar/online event platform provider;
  • Our email or customer relationship management (“CRM”) provider;
  • IT, website and hosting providers;
  • Professional advisers and service providers;
  • Regulatory, governmental or law-enforcement authorities where disclosure is required or permitted by law; and
  • Other service providers acting on our behalf.

Where third parties process personal data on our behalf, we will take appropriate steps to ensure that they process the information in accordance with applicable data protection law and our instructions.

  1. International transfers

Where a service provider processes your personal data outside the European Economic Area (“EEA”), we will ensure that an appropriate legal mechanism and safeguards are in place in accordance with applicable data protection law. [Zoom Webinar]

 

  1. How long do we keep your personal data?

We will retain your personal data only for as long as is reasonably necessary for the purposes for which it was collected, including any applicable legal, regulatory, accounting or reporting requirements.

For webinar registrations where there is no subsequent relationship or enquiry, we intend to retain your registration/contact details for [30 days], unless we have a lawful reason to retain them for longer.

Where you become a customer or make a substantive enquiry about mortgage advice, different retention periods may apply because of our legal and regulatory obligations.

Marketing information will be retained for as long as reasonably necessary for the relevant marketing purpose, subject to your right to withdraw consent or object to direct marketing.

  1. How do we protect your personal data?

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.

Access to personal data is restricted to those who need it for legitimate business or legal purposes.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

  1. Your data protection rights

Subject to applicable legal conditions and exemptions, you have rights under data protection law including:

  • The right to access your personal data;
  • The right to have inaccurate personal data corrected;
  • The right to request erasure of your personal data;
  • The right to request restriction of processing;
  • The right to object to certain processing, including direct marketing;
  • The right to data portability in certain circumstances; and
  • Where processing is based on consent, the right to withdraw that consent at any time.

The Irish Data Protection Commission confirms that individuals should be informed of these rights and how they can exercise them.

To exercise any of these rights, please contact us at:

Email: [MauriceMcGee@WaterfordMortgagesandInvestments.ie]
Post: [EBS d.a.c.. 19/20 Broad Street, Waterford City]

We may need to verify your identity before processing certain requests.

  1. Right to withdraw consent

Where we rely on your consent to process your personal data, you may withdraw your consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before you withdrew your consent.

For marketing communications, you can also use the unsubscribe or opt-out facility provided in our communications.

  1. Complaints

If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve your concern.

You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection.

Further information is available from the Data Protection Commission at:

https://www.dataprotection.ie/

  1. Changes to this Data Privacy Statement

We may update this Data Privacy Statement from time to time to reflect changes in our business, the services we use or applicable data protection requirements.

The most recent version will be made available to you and will show the date on which it was last updated.

Waterford Mortgages and Investments Ltd.
Data Controller
[EBS d.a.c.,19/20 Broad Street, Waterford City]
[MauriceMcGee@WaterfordMortgagesandInvestments.ie]
[051 872 926]


EBS d.a.c.
Terms of Business for Tied Agents


Terms of Business
Terms of Business of Waterford Mortgages & Investments Limited. This document sets out how we will do business with
you. If you need more information after reading this, please call us on 053 914 3516.
General Information / Products and Services
Our address is EBS Wexford, 93 North Main Street, Wexford, Y35 Y91R. Waterford Mortgages & Investments Limited is
authorised and regulated by the Central Bank of Ireland. We are authorised as an Investment Business Firm under the
Investment Intermediaries Act 1995. We act as an insurance intermediary and are also registered with the Central Bank
of Ireland as an insurance intermediary under the European Communities (Insurance Mediation) Regulations 2005 (as
amended). The Registered Company Number for Waterford Mortgages & Investments Limited is 526337.
Waterford Mortgages & Investments Limited is an appointed deposit agent of EBS d.a.c. (EBS) and is a tied mortgage
agent acting exclusively for EBS. This means that we provide mortgages, current accounts, savings (demand,
notice and fixed-term deposits), insurance (life and general) and debit card products, exclusively for EBS. Waterford
Mortgages & Investments Limited acts for and on behalf of EBS and its insurers for life and general insurance products.
Waterford Mortgages & Investments Limited has a payment agreement in place with EBS for introducing and
providing their ongoing services to you for any of the above products. Full details of our intermediary payments are
available in the public notices area in our office and at www.ebs.ie/networkintermediaryremunerations
EBS is regulated by the Central Bank of Ireland. EBS is part of the AIB Group (AIB Group is a registered business name
of Allied Irish Banks, p.l.c.)
EBS d.a.c. is subject to the following Central Bank of Ireland Codes of Conduct. These codes offer protection to
consumers. More information on them can be found on the Central Bank of Ireland website at www.centralbank.ie:
• Consumer Protection Code
• Code of Conduct on the Switching of Payment Accounts with Payment Service Providers
• Minimum Competency Code
We avoid conflicts of interest, but if one arises, we will let you know.
Fees and Charges
If you hold a debit card, EBS will apply the relevant government stamp duty to your account. Government stamp duty
will also be payable for cheque withdrawals from certain accounts. You may also have to pay fees and charges for
certain account transactions and in respect of debit balances on certain accounts.
EBS also pass on transaction charges if EBS is charged fees by other service providers, these are some examples:
• unpaid cheques returned by our bankers,
• unpaid direct debits, and
• fees from third parties.
If charges or fees apply, full details are included in your account brochure or Terms and Conditions. If you take out a
life assurance policy, the Customer Information Notice, which you will receive before signing any contract, contains
details of commissions.
If you would like to find out more about fees and charges, please call into our office or log onto www.ebs.ie

Data Protection Notice
Effective 25 May 2018
We respect your trust in us to use, store and share your information. In this notice, we explain how we collect personal
information about you, how we use it and how you can interact with us about it.
We try to keep this notice as simple as possible but if you are unfamiliar with our terms, or want more detail on any of
the information here, please see our website’s Frequently Asked Questions at www.ebs.ie/dataprotection. You can also
contact us directly for more information.
1. Who we are
When we talk about “us” or “we” in this notice, we are talking about EBS d.a.c. which is a wholly owned subsidiary of
Allied Irish Banks, p.l.c.
We share your information with Allied Irish Banks p.l.c and its subsidiaries, affiliates and their respective parent and
subsidiary companies to help us provide our services, comply with regulatory and legal requirements, and improve our
products.
2. Data Protection Officer
Our Data Protection Officer oversees how we collect, use, share and protect your information to ensure your rights are
fulfilled. You can contact our Data Protection Officer at dpo@aib.ie or by writing to them at: Data Protection Officer,
10 Molesworth Street, Dublin 2, D02 R126.
3. How we collect information about you
We collect personal information from you, for example when you open an account; make a deposit; apply for products
and services; use your credit or debit card; complete transactions; or look for advice. We also collect information through
our website, apps, social media, discussion forums, market research and our CCTV footage. We will sometimes record
phone conversations and we will always let you know when we do this.
We may collect information to identify you through voice, facial or fingerprint (biometric data) recognition technology.
We always ask for your consent to do this.
Our websites use ‘cookie’ technology. A cookie is a little piece of text that our server places on your device when you visit
any of our websites or apps. They help us make the sites work better for you.
When you apply to us for products and services, and during the time you use these, we carry out information searches
and verify your identity. We do this by sending and receiving information about you to and from third parties including
credit bodies such as the Central Credit Register. We and these credit bodies may keep records of our searches whether
or not the product or service goes ahead.
4. How we keep your information safe
We protect your information with security measures under the laws that apply and we meet international standards. We
keep our computers, files and buildings secure.
When you contact us to ask about your information, we may ask you to identify yourself. This is to help protect your
information
5. How long we keep your information
To meet our legal and regulatory obligations, we hold your information while you are a customer and for a period of time
after that. We do not hold it for longer than necessary.
6. Meeting our legal and regulatory obligations
To use your information lawfully, we rely on one or more of the following legal bases:
• performance of a contract;
• legal obligation;
• protecting the vital interests of you or others;
• public interest;
• our legitimate interests; and
• your consent.
To meet our regulatory and legal obligations, we collect some of your personal information, verify it, keep it up to date
through regular checks, and delete it once we no longer have to keep it. We may also gather information about you
from third parties to help us meet our obligations. If you do not provide the information we need, or help us keep it up to
date, we may not be able to provide you with our products and services.
7. Consent
Sometimes we need your consent to use your personal information. With direct marketing for example, we need your
consent to make you aware of products and services which may be of interest to you. We may do this by phone, post,
email, text or through other digital media.
You can decide how much direct marketing you want to accept when you apply for new products and services.
If we ever contact you to get your feedback on ways to improve our products and services, you have the choice to opt
out.
When we use sensitive personal information about you, such as medical or biometric data, we ask for your consent.
Before you give your consent, we tell you what information we collect and what we use it for. You can remove your
consent at any time by contacting us.
8. How we use your information
We use information about you to:
• provide relevant products and services;
• identify ways we can improve our products and services;
• maintain and monitor your products and services;
• protect both our interests;
• meet our legal and regulatory obligations; and
• decide and recommend how our products and services might be suitable for you.
To provide our products and services under the terms and conditions we agree between us, we need to collect and use
personal information about you. If you do not provide this personal information, we may not be able to provide you with
our products and services.
We analyse the information that we collect on you through your use of our products and services and on our social
media, apps and websites. This helps us understand your financial behaviour, how we interact with you and our position
in a market place. Examples of how we use this information includes helping protect you and others from financial crime,
offering you products and services and personalising your experience.
We may report trends we see to third parties. These trend reports may include information about activity on devices,
for example mobile phones, ATMs and self-service kiosks, or card spend in particular regions or industries. When we
prepare these reports, we group customers’ information and remove any names. We do not share information in these
reports that can identify you as a customer, such as your name, or account details.
We sometimes use technology to help us make decisions automatically. For example, when you apply for a loan online.
Before we make a decision, we automatically score the information you give us, any information we already hold about
you, and any information we may get from other sources.
9. Your information and third parties
Sometimes we share your information with third parties.
For example to:
• provide products, services and information;
• analyse information;
• research your experiences dealing with us;
• collect debts;
• sell your debts;
• sell whole or part of our business;
• prevent financial crime;
• help trace, investigate and recover funds on your behalf;
• trace information; and
• protect both our interests.
We expect these third parties to have the same levels of information protection that we have.
We also have to share information with third parties to meet any applicable law, regulation or lawful request. When we
believe we have been given false or misleading information, or we suspect criminal activity we must record this and tell
law enforcement agencies, which may be either in or outside Ireland.
10. International transfers of data
We may transfer your personal information outside of the European Economic Area (EEA) to help us provide your products
and services. We expect the same standard of data protection is applied outside of the EEA to these transfers and the
use of the information, to ensure your rights are protected.
11. Your personal information rights
You will find information about your rights, when they apply and our responsibility to you on our website’s Frequently
Asked Questions section.
You can exercise your rights by contacting us directly by calling, using our social media channels, calling into an EBS
Network Office, or by visiting our website at www.ebs.ie/dataprotection.
We can help you with:
Accessing your personal information: You can ask us for a copy of the personal information we hold. You can ask us
about how we collect, share and use your personal information.
Updating and correcting your personal details.
Removing consent: You can change your mind wherever you give us your consent, such as for direct marketing, or using
your sensitive information, such as medical or biometric data.
Restricting and objecting: You may have the right to restrict or object to us using your personal information or using
automated decision making.
Deleting your information (your right to be forgotten). You may ask us to delete your personal information.
Moving your information (your right to Portability). Where possible we can share a digital copy of your information directly
with you or another organisation.
When you contact us to ask about your information, we may ask you to identify yourself. This is to help protect your
information.
We generally do not charge you when you contact us to ask about your information.
12. Making a complaint
If you have a complaint about the use of your personal information, please let a member of staff in your local EBS
Network Office (or service outlet) know, giving them the opportunity to put things right as quickly as possible.
If you wish to make a complaint you may do so in person, by telephone, in writing and by email. Please be assured that
all complaints received will be fully investigated. You can register a complaint through our contact centre, your local
EBS Network Offices, our Website, by phone, by email or in person at your local EBS Network Office.
We ask that you supply as much information as possible to help our staff resolve your complaint quickly
You can also contact the Data Protection Commission in Ireland at www.dataprotection.ie.
13. Updates to this notice
We will make changes to this notice from time to time, particularly when we change how we use your information, and
change our technology and products.
You can always find an up-to-date version of this notice on our website at www.ebs.ie/dataprotection. You will also find
a copy on display at your local branch/office or you can ask us for a copy. This notice was updated as of 1st April 2022.
If you decide to proceed with this product/service or have any other communication with AIB Group through or in
relation to its products and services, you consent to the use by AIB Group of your personal data as indicated above.
Non Payment by Customers
We have the right to take legal action to recover what is owed to us. We may withdraw benefits or cover if you miss
payments. Details of these provisions will be included in your relevant product Terms and Conditions.
Your Safeguards
The below Schemes offer compensation in the highly unlikely event that we cannot repay a deposit or return your
money. Your normal legal rights are not affected by these Schemes.
(i) Deposit Protection Scheme
EBS contributes to the Deposit Protection Account maintained at the Central Bank of Ireland, in accordance with the
provisions of the Deposit Guarantee Scheme which provide for the protection of deposits held with EBS. The maximum
amount payable to any depositor is 100% of the aggregate deposits held by the depositor, subject to a maximum
compensation payment of €100,000 per customer.
(ii) Investor Compensation Scheme
EBS is a member of the compensation scheme established under the Investor Compensation Act 1998 (as amended).
This Act provides for payment, in certain circumstances, of compensation to certain customers (known as ‘eligible
investors’). Where an entitlement to compensation is established, the compensation payable will be the lesser of 90%
of the amount of the customer’s loss which is recognised for the purposes of the Act, or €20,000.
Complaints
You have the right to complain if you are unhappy with our services. To do so, please contact our office either in
person, or by phone or post. If your complaint is still not resolved to your satisfaction, please write to: EBS Customer
Care, 10 Molesworth Street, Dublin 2, D02 R126. If you are not happy with our response, you can refer your complaint
to the Financial Services and Pensions Ombudsman, after utilising the EBS Complaints Process. You can contact the
Ombudsman by phone, e-mail or post.
Phone: (01) 567 7000
E-mail: info@fspo.ie
Post: Financial Services and Pensions Ombudsman, Lincoln House, Lincoln Place, Dublin 2, D02 VH29.
Changes to our Terms of Business
If there is any important change in our Terms of Business after you open an account, we will let you know
as soon as possible.
Effective date: 07.04.2026
Terms of Business of Waterford Mortgages & Investments Limited confirms that the Terms of Business remain up to
date.
EBS d.a.c.. Registered Office: 10 Molesworth Street, Dublin 2, D02 R126. Registered in Ireland, No. 500748.
EBS495 04.26