We have a legal obligation under Data Protection legislation to ensure that all information held and processed about you complies with the principles of the legislation. This privacy policy details how we ensure personal information about you is kept secure and confidential. We have responsibilities under the General Data Protection Regulations to ensure you understand how our website works regarding online privacy.

Please read this policy carefully as once you use this site and/or any of our services or products you will be regarded as having accepted this policy.

Please also refer to our Cookie Policy.

If you do not accept this privacy and cookie policy please do not use this site.

Data Protection Legislation

The General Data Protection Regulation (GDPR) puts obligations on users of personal information and lays down principles for its use. Among other things, information has to be processed fairly and lawfully. The GDPR also gives individuals (data subjects) certain rights over the use of their personal information. This means that you are entitled to know how we intend to use any information you provide. You can then decide whether you want to give it to us.

Data Controller

For the activities it undertakes, Moneyfacts Group plc (company number 4063110) is the data controller. Our registered office is Moneyfacts House, 66 – 70 Thorpe Road, Norwich NR1 1BJ. If you have any queries about this Privacy Policy, please feel free to contact us at the above address.

If you have a query regarding our data protection arrangements, please contact dataprotection@moneyfacts.co.uk.

If we are requested to provide any information to assist with law enforcement enquiries, we will do so.

The information we hold:

We only hold basic information about you, and do not hold any special category data. We will only use the information we hold for the purpose specified when you gave us your information, and it will not be passed to any third party.

Lawful Basis

Under the GDPR we can only process your personal information if there is a lawful basis for us to do so. We use either contract, consent or legitimate interests bases as follows:

• Personal data held for magazine subscriptions including electronic publications is processed under the contract basis;
• Personal data and log-in information for Moneyfacts services is processed under the contract basis;
• Email addresses for news bulletins or used to deliver other Moneyfacts services is processed under the contract basis;
• Personal data regarding attendees for Moneyfacts events is processed under the contract basis;
• Personal data about employees of third party firms that Moneyfacts deals with is processed under the legitimate interests basis in order that we can contact them for various business reasons, including collection and processing of product data from financial product providers;
• Personal data regarding IFAs who complete Moneyfacts awards questionnaires or regarding awards testimonials is processed under the legitimate interests basis, eg for audit and record keeping purposes;
• Business to Business direct marketing is undertaken using the legitimate interest basis. We may use data from open sources such as social media websites, Rocketreach or purchased lists to access contact data for this purpose.

We will not pass your personal information to anyone outside the Moneyfacts Group except if you have asked us to or if we are required to do so by any legal order.

We will retain your personal information only for as long as necessary for the purpose it was collected. This retention period will differ depending on the reason the data is held.

We do not use any automated decision making processes.

There is no statutory obligation on you to supply any personal data to us.

We will need certain personal information to fulfil any contract that we agree between us. The information we request will not exceed what we need to perform the contract.

From time to time we offer user surveys and questionnaires to provide you with interesting insights, helpful tools, or to understand our user base more accurately. If you take part in a Moneyfacts survey which is hosted by Smart Survey, your personal information will be processed by SmartSurvey Ltd but Moneyfacts will be the Data Controller.

Data Subjects Rights

As a data subject, you have the following rights under the GDPR:

• The right to access a copy of the data we hold about you. There is no fee required for this. We are required to provide the information within one month of your request;
• The right to have your data supplied in a machine-readable format (e.g. a Microsoft Excel Spreadsheet / Application Programming Interface);
• The right to withdraw any consent you have given us or object to its processing if you have grounds relating to your personal situation;
• The right to erase or restrict the processing of the information we hold about you in certain circumstances, such as where the original purpose for the data collection is no longer relevant, where you object to the processing and we have no overriding legitimate interest in keeping it or where the data is being unlawfully processed.

Data Protection Regulator

The Information Commissioners Office (ICO) is the UK regulator for data protection issues. You have the right to complain to them about any breaches of your data protection rights. Moneyfacts Group plc is registered with the ICO, register no. Z747225X

27 November 2023.