Privacy Notice and cookies

1. Introduction

This Privacy Notice explains how MONY Group plc (‘us’, ‘our’ or ‘we’), will use your personal data and your rights. We are a controller in relation to the processing of your personal data collected in relation to our Services. 

If you are a customer or user of our customer-facing brands, MoneySuperMarket, MoneySavingExpert, TravelSupermarket, Decision Tech or Quidco, please refer to the privacy notices on their respective websites.

2. Personal data we process and why

Shareholders (including beneficial shareholders)

The personal data of all our shareholders (both current and former shareholders and whether legal or beneficial) who hold shares directly, or details of the nominee accounts in which some retail and institutional shareholders hold their shares, are held and maintained on our behalf by our Registrar.

We collect personal data about you, including:

  • your name;

  • your address;

  • details of your past and present holdings of shares and/or interests in shares in MONY Group plc, whether you hold or held these as legal owner or have or had a beneficial interest in them;

  • details of how you have in the past exercised, or intend in the future to exercise, your voting rights attached to shares in MONY Group plc;

  • your bank and building society account details into which dividends and other income or capital returns on your shares have in the past, or should in the future, be paid; and

  • your contact details, such as email addresses and telephone numbers, where you have provided these to us.

We use this personal data for the purposes of:

  • complying with our regulatory and legal obligations including those that require us to keep records and returns about the shareholdings in MONY Group plc (e.g. registering share transactions and processing administrative changes to shareholder records) and complying with disclosure requirements imposed or enforced by governmental authorities and regulatory agencies, including law enforcement agencies and tax authorities. Legal basis: Legal obligation.

  • complying with our contract(s) with you, as set out in our Articles of Association and/or in any share scheme or plan trust deed or rules, including giving you the information and communicating with you in the ways referred to therein. Legal basis: Contract.

  • communicating with shareholders and disseminating information about MONY Group plc (including the mailing, in physical or electronic format, of Annual Reports, AGM or EGM notices or proxy cards, or communications in relation to other corporate actions and answering questions you ask of us). Legal basis: Contract and legitimate interest in ensuring effective communications with shareholders.

  • enabling us to enforce or defend our legal rights, including by bringing or defending legal claims that may be made by or against MONY Group plc in relation to your shareholdings or interests in shares. Legal basis: Legal obligation and legitimate interest in protecting our business. 

  • enabling our Registrar to offer an online web portal which shareholders can use to access and manage their shareholdings in MONY Group plc online and provide information on shareholder services available to them. Legal basis: Contract.

  • facilitating the payment of dividends. Legal basis: Contract.

  • facilitating Dividend Reinstatement Plans (‘DRIP’) instructions. Legal basis: Contract.

Personal information of suppliers, professional advisers and business contacts

We will collect personal data such as your name, job title, employer organisation, contact details and communications with us. We typically collect this information directly from you, for example if you meet one of our representatives or email us, or from your employer. If you do not provide personal data that is necessary for a contract with you/your organisation we may not be able to provide our Services to you/your organisation.

We will process this personal information for the purposes of:

  • managing our business relationship with the organisation that you represent, including communicating with your organisation and negotiating, concluding and performing business transactions with your organisation, such as procuring products and/or services from your organisation, partnering with your organisation or appointing your organisation as our agent or your organisation appointing us its agent. Legal basis: Contract and legitimate interests in running and promoting our business.

  • managing our business arrangements, including to assess and report on the effectiveness of our business relationship with your organisation. Legal basis: Contract and legitimate interests in running and promoting our business.

  • ensuring compliance with applicable laws and regulations to which we are subject, including those which require us to keep records of business transactions with your organisation. Legal basis: Legal obligation.

  • ensuring compliance with contractual obligations to your organisation, including those which require us to notify your organisation of matters. Legal basis: Contract.

  • conducting any audit or investigation into our business dealings with your organisation, responding to any regulatory investigations commenced (or likely to be commenced) into us in relation to such business dealings or managing any legal claims brought (or likely to be brought) by or against us in relation to such business dealings. Legal basis: Legal obligation and legitimate interests in running and protecting our business.

Visitors to our website

When you visit MONY Group plc's website, we may automatically collect the following information:

  • technical information including web usage information (e.g. IP address), browser type and version, time zone setting, operating system and platform; and

  • information about your visit, including the full Uniform Resource Locators (‘URLs’) clickstream to, through and from our website, time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods to browse away from the page.

We process this personal data for the purposes of security, troubleshooting and analytics. Our legal bases for processing are consent and legitimate interests in running, protecting and improving our site and business. 

3. Who is your personal data shared with

Within MONY Group we use a shared IT infrastructure which includes shared technologies, platforms, systems and tools and may share your personal data with other MONY Group entities. This does not affect the purposes we use your personal data for.

We may also share your personal data with:

  • our shareholder Registrar, Argus Vickers Limited;

  • the FCA, the London Stock Exchange or any other relevant regulatory authority or exchange in the UK or overseas;

  • any person entitled to inspect the share register in accordance with legal or regulatory requirements;

  • third parties where we are legally obliged or permitted to do so, for example to government bodies and regulatory authorities and to the courts and parties to legal proceedings pursuant to court rules and orders;

  • professional advisers, such as accountants, lawyers, proxy advisors or other consultants;

  • service providers that act on our behalf such as software providers, cloud hosting providers and payment service providers; and

  • actual or proposed buyers of our business or assets and their professional service providers/other authorised. 

4. International Transfers of Personal data

It might be necessary to transfer your personal data outside of the UK to provide our services. We only do this if the UK government has determined a jurisdiction as adequate for data protection purposes or if we have put in place appropriate safeguards, for example the UK’s international data transfer agreement. You can request details of those safeguards by contacting us. 

5. Retention of Personal data

We keep your personal data for as long as is necessary based on the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of that data, the purposes for which we process it, whether we can achieve those purposes through other means, as well as legal, taxation, accounting and industry requirements and guidelines. We may delete your data sooner if you request erasure, but it may persist on backup or archival media for legal, tax, or regulatory purposes.

When the need to keep your personal data ends, we either delete or anonymise it.

6. Your Rights

Under the UK GDPR, you have the right to:

  • Request access to a copy of the personal data we hold about you (commonly known as a subject access request). 

  • Request correction of inaccurate or incomplete personal data that we hold about you. 

  • Request erasure of your personal data where there is no good reason for us continuing to process it (commonly known as the right to be forgotten). 

  • Object to processing of your personal data for direct marketing purposes, or in some circumstances, where we are relying on legitimate interests.

  • Request restriction of processing of your personal data in some circumstances, for example, while we investigate a complaint that the personal data we hold about you is inaccurate.

  • Request data portability whereby we will transfer your personal data either directly to you or to a third party in a machine readable format. This only applies to personal data provided by you that is processed by automated means on the basis of consent or contract.

  • Withdraw consent where we rely on consent to process your personal data. 

There are exceptions to some of these rights and if applicable, we will explain this in our response to you. 

7. Contacting us

If you wish to exercise any of the rights set out above, please contact [email protected]. You will not have to pay a fee to exercise any of these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee. Alternatively, we may refuse to comply with your request in these circumstances.

When contacting us, please describe the information you require and make sure that you tell us any email addresses you have used with us, as this allows us to trace all relevant information. Depending on the nature of your request, we may ask you for your full name, your date of birth and your full address and documents to allow us to verify your identity. 

We try to respond to all requests within one month but occasionally may extend this by two months if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If you have any other queries or concerns about this privacy notice, or if you would like to contact our Data Protection Officer, you can email [email protected] or write to the Data Protection Officer at Mony Group House, St. David's Park, Ewloe, Deeside, United Kingdom, CH5 3UZ.

You also have the right to complain to the ICO at any time, but we’d appreciate the chance to deal with your concerns first.

If you are a customer or user of our customer facing brands, MoneySuperMarket, MoneySavingExpert, TravelSupermarket, Decision Tech or Quidco, please refer to the privacy notices on their respective websites for the relevant contact details.

8. Changes to this Privacy Notice

This privacy notice was last updated in September 2025 to make it clearer what personal data is used for each purpose and the lawful basis applicable. We may make changes to this privacy notice at any time and any changes will be published on our website so please check back regularly. If we make significant changes to this policy, we may also notify you by other means such as sending an email.