Privacy and Data Protection Policy 

Last updated: 25 August 2026 

1. Who we are 

My Simple Money is a trading style of My Simple Money Ltd, a company registered in England  and Wales under company number 16162293. 

Our registered office is: 

The Mount 

Etruria Road 

Newcastle-under-Lyme 

Staffordshire 

ST5 0SU 

My Simple Money Ltd is the data controller responsible for the personal information covered by  this policy. 

We are registered with the Information Commissioner’s Office as a data controller: 

ICO registration reference: ZC203215 

Registration date: 20 July 2026 

Registration renewal date: 19 July 2027 

You can contact us about privacy or the use of your personal information at: 

Email: privacy@mysimplemoney.co.uk 

Post: Data Protection, My Simple Money Ltd, The Mount, Etruria Road, Newcastle-under-Lyme,  Staffordshire, ST5 0SU 

2. What My Simple Money does 

My Simple Money provides financial information, educational content and access to selected  third-party service providers. 

Where you ask us to help you find or access a service, we may introduce or refer you to an  appropriate provider partner. These partners may provide services relating to areas such as: 

• Mortgages and protection; 

• Conveyancing and other legal services; 

• Business finance; 

• Insurance; 

• Pensions and investments; 

• Loans and other financial products; and 

• Other money-related services. 

My Simple Money Ltd does not itself provide mortgage, insurance, legal, investment, pension or  other regulated financial advice unless we expressly tell you otherwise.

The provider to whom you are introduced is responsible for explaining its own services,  regulatory status, terms and privacy arrangements. 

3. The personal information we collect 

Depending on how you use our website or contact us, we may collect: Information you provide directly 

• Your name; 

• Email address; 

• Telephone number; 

• Postal address; 

• The service or subject you are interested in; 

• Information contained in an enquiry, form or message; 

• Your communication and marketing preferences; 

• Information needed to identify a suitable provider partner; 

• Details about your requirements or circumstances that you choose to provide; and • Records of your communications with us. 

Information collected automatically 

When you use our website, we may collect: 

• Your IP address; 

• Browser and device information; 

• Approximate location derived from your IP address; 

• Pages viewed and links selected; 

• The date and time of your visit; 

• Referral source; 

• Cookie preferences; and 

• Website usage and performance information. 

Further information is provided in our Cookie Policy. 

Information received from other organisations 

We may receive information from: 

• One of our provider partners; 

• A person who refers you to us; 

• Marketing, website, form or communications providers;

• Publicly available sources; or 

• Another organisation where you have asked or authorised it to provide information to us. 

If someone gives us information about another person, they must have that person’s permission  to do so. 

4. Special category and sensitive information 

We do not normally need you to provide special category personal information through our  general website forms. 

Special category information can include health information, racial or ethnic origin, religious  beliefs, sexual orientation, biometric information and certain other particularly sensitive  information. 

Please do not include this information in a general enquiry unless it is genuinely necessary. If  sensitive information is relevant to a service, the provider partner will normally collect it directly  from you under its own privacy policy. 

If we receive sensitive information, we will only use it where there is a valid legal basis and an  additional condition permitting its use. 

5. How and why we use your information 

We may use your personal information to: 

• Receive and respond to enquiries; 

• Understand which service you are interested in; 

• Identify an appropriate provider partner; 

• Make a referral or introduction that you have requested; 

• Send information to a provider partner with your knowledge or permission; • Contact you about your enquiry or referral; 

• Check whether a provider has been able to assist you; 

• Operate, secure and improve our website; 

• Maintain records of enquiries, referrals and communications; 

• Manage our relationships with customers and provider partners; 

• Handle complaints, disputes or data protection requests; 

• Prevent fraud, misuse and security incidents; 

• Meet legal, regulatory, accounting and reporting obligations; 

• Measure the performance of our services and marketing; and 

• Send marketing where we have permission or are otherwise legally permitted to do so. 

We will not use information gathered for an enquiry to make unrelated referrals without an  appropriate lawful basis.

6. Our lawful bases 

Under UK data protection law, we must have a lawful basis for using personal information.  Depending on the circumstances, we may rely on: 

Consent 

We may rely on your consent where: 

• You ask us to provide your information to a named provider partner; 

• You subscribe to our mailing list; 

• You choose to receive promotional emails, texts or other marketing; or • You accept optional cookies or similar technologies. 

You can withdraw consent at any time. Withdrawing consent will not affect processing that took  place before it was withdrawn. 

Steps taken at your request 

We may use information where this is necessary to respond to a request you have made before  entering into an agreement or obtaining a service. 

Legitimate interests 

We may rely on our legitimate interests to: 

• Respond to enquiries; 

• Administer and record referrals; 

• Operate and improve our services; 

• Maintain appropriate business records; 

• Protect our website, systems and business; 

• Prevent misuse or fraud; 

• Understand the effectiveness of our services; and 

• Manage relationships with provider partners. 

When relying on legitimate interests, we consider the effect on your rights and do not use  information where our interests are overridden by your rights or interests. 

Legal obligation 

We may process information where necessary to comply with a legal, regulatory, tax,  accounting, court or law-enforcement requirement. 

Legal claims 

We may retain or use information where necessary to establish, exercise or defend legal claims. 7. Referrals to provider partners

Where you ask to be introduced to a provider partner, we will explain which provider is involved  before sharing your personal information wherever reasonably possible. 

We will only share information reasonably required to facilitate the referral. This will normally  include your contact details, the service you are interested in and relevant details from your  enquiry. 

Once your information has been passed to a provider partner, that provider will normally act as  a separate data controller. It will be responsible for: 

• Providing its own privacy information; 

• Confirming its regulatory status; 

• Deciding whether and how it can assist you; 

• Collecting any additional information it requires; 

• Giving any regulated or professional advice; and 

• Protecting the information it holds about you. 

You should read the provider’s privacy policy before proceeding with its service. 

We may receive a fee, commission or other commercial benefit when you are introduced to, or  use the services of, a provider partner. This does not increase the price you pay unless you are  expressly told otherwise. 

8. Other organisations with whom we may share information 

In addition to provider partners, we may share information with: 

• Website hosting, maintenance and security providers; 

• Online form and mailing-list providers; 

• Email, communications and customer-management providers; 

• Analytics and website-performance providers; 

• Professional advisers, including lawyers and accountants; 

• Insurers; 

• Regulators, courts, law-enforcement agencies or public authorities; 

• Organisations involved in a proposed sale, restructuring or transfer of our business; and • Other suppliers processing information on our instructions. 

These organisations may only use your information for their own purposes where the law  permits or where they are separately responsible for explaining that use to you. 

We do not sell personal information to unrelated third parties. 

9. Mailing lists and marketing 

If you subscribe to receive news, money information, guides, updates or offers, we may use your  name, email address and preferences to send those communications.

Where consent is required, we will not add you to a marketing list without your agreement. You can unsubscribe at any time by: 

• Selecting the unsubscribe link in an email; 

• Contacting privacy@mysimplemoney.co.uk; or 

• Using any preference controls we make available. 

We may retain a minimal suppression record after you unsubscribe so that we can respect your  choice and avoid contacting you again accidentally. 

Unsubscribing from marketing will not prevent us from sending necessary service messages  relating to an enquiry or referral you have made. 

10. How long we retain information 

We retain personal information only for as long as reasonably necessary for the purpose for  which it was collected. 

The relevant period will depend on: 

• The nature of your enquiry or referral; 

• Whether a referral resulted in a service; 

• The requirements of a provider agreement; 

• Applicable legal, regulatory, tax or accounting requirements; 

• The need to handle complaints or establish legal claims; and 

• Your marketing preferences. 

As a general approach: 

• Unsuccessful or incomplete general enquiries will normally be retained for no longer  than 24 months; 

• Referral and associated business records may be retained for up to six years after the  relationship or referral ends; 

• Marketing information will be retained until you unsubscribe, withdraw consent or the  information is no longer needed; and 

• Cookie consent records will be retained for an appropriate compliance period. 

We may retain anonymised statistical information indefinitely because it no longer identifies an  individual. 

11. International transfers 

Some of our technology providers may store or process information outside the United  Kingdom. 

Where personal information is transferred internationally, we will ensure an appropriate  safeguard is used. This may include:

• Transfer to a country recognised by the UK as providing adequate protection; • The UK International Data Transfer Agreement; 

• The UK Addendum to approved standard contractual clauses; or 

• Another safeguard permitted by UK data protection law. 

You can contact us for further information about the safeguards relevant to your information. 12. Security 

We use reasonable technical and organisational measures designed to protect personal  information against: 

• Unauthorised access; 

• Accidental loss; 

• Inappropriate use or disclosure; 

• Alteration; and 

• Destruction. 

Access to personal information is limited to people and organisations that reasonably require it  for the purposes described in this policy. 

No internet transmission or storage system can be guaranteed to be completely secure. Please  avoid sending unnecessary sensitive information through general website forms or unencrypted  email. 

13. Automated decision-making 

My Simple Money does not currently make decisions about you based solely on automated  processing where those decisions produce legal or similarly significant effects. 

A provider partner may use automated tools when assessing an application or providing its  service. The provider is responsible for explaining any such processing in its own privacy  information. 

14. Your data protection rights 

Depending on the circumstances, you may have the right to: 

• Ask for access to the personal information we hold about you; 

• Ask us to correct inaccurate or incomplete information; 

• Ask us to delete your information; 

• Ask us to restrict how information is used; 

• Object to particular uses of your information; 

• Receive certain information in a portable format; 

• Withdraw consent at any time; and

• Ask for information about safeguards used for an international transfer. These rights are not absolute and may be subject to legal exceptions. 

Your right to object 

You have the right to object at any time to the use of your personal information for direct  marketing. 

You may also object to processing based on legitimate interests. We will stop that processing  unless we have compelling legitimate grounds to continue or the information is needed for legal  claims. 

To exercise a right, contact privacy@mysimplemoney.co.uk. We may need to ask for  information to verify your identity. There is normally no charge, and we will usually respond  within one month. 

15. Complaints 

Please contact us first if you have a concern about how we use your information. We will  investigate and try to resolve the matter. 

You also have the right to complain to the Information Commissioner’s Office: 

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Telephone: 0303 123 1113 

Website: www.ico.org.uk 

16. External websites 

Our website may contain links to websites operated by provider partners, social-media  platforms or other organisations. 

We are not responsible for the privacy practices, security or content of external websites. You  should read the privacy and cookie information provided by the organisation operating the  relevant website. 

17. Children 

Our services are primarily intended for adults aged 18 or over. 

We do not knowingly use our general website to collect personal information directly from  children for referral or marketing purposes. A parent or guardian should contact us if they  believe a child has provided information without appropriate permission. 

18. Changes to this policy 

We may update this policy to reflect changes to our services, provider relationships, website,  technology or legal obligations.

The latest version will be published on this page, together with the date it was last updated.