Privacy Policy

1. Introduction

This privacy policy (together with our Website Terms of Use and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us as well as setting out how we will look after your personal data and make sure that we meet our legal obligations to you under applicable UK data protection laws including The Data Protection Act 2018, The Privacy and Electronic Communications (EC Directive) Regulations 2003 and the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR").

This privacy policy applies to Active Securities Limited, including its various trading names and its website www.247Moneybox.com (the "Website"). Please read this privacy policy to understand how we use and protect the personal information that you provide to us. All references in this privacy policy: to "Services" refer to lending and related services as well as any other services which we offer; to "we", "us" and "our" refer to Active Securities Limited; and to "you" and "your" are to you, the user.

Who are we?

Any personal data you provide to us is controlled by Active Securities Limited, a company registered in England and Wales (05671281) which has its registered office at 20-22 Wenlock Road, London N1 7GU and is registered as a data controller with the Information Commissioner's Office under reference Z9339538. We are authorised and regulated by the Financial Conduct Authority (673915).

Active Securities Limited can be contacted:

by telephone: 020 7183 9201;
by email: customer.services@247moneybox.com; or
by post: 20-22 Wenlock Road London N1 7GU.

If you have any queries about the way we use your personal data, you can contact our Data Protection Group, using the email, telephone or postal details above.

2. Your data

What personal data do we collect from you?

We collect various personal data from you in a number of different ways:

information from the Website including your Website usage, IP address, operating system, browser type and settings;
when you carry out transactions through the Website, when you fill in any forms on the Website and when you create or log in to your account through the Website, you will be required to provide us with personal and financial information in order for us make lending decisions and otherwise provide our Services to you;
information regarding how you use and manage your account, your repayment history and details of transactions you carry out with us; and
correspondence that is exchanged between us including post, telephone calls (which may be recorded for the purpose of security and training), automated voice message, SMS text message, digital messaging application or email.

Why do we collect your personal data?

We collect your personal data to ensure that we are providing you with the best service we possibly can. We may use your personal data in the following ways:

to provide our Services to you;
to assess your credit history, validate your application, confirm your employment and make lending decisions;
to search credit reference agencies' ("CRAs") and fraud prevention agencies' records;
for the purposes of collecting your loan repayment(s) and for the collection of unpaid loans, including providing your data to third party debt collectors;
to monitor your account for fraud and security purposes and inform you if we suspect anything untoward;
to develop and improve our operations and Services that we provide;
to contact you for your views and feedback on our Services; and
to notify you occasionally about important changes or developments to the Website and/or our Services.

Legal basis for collecting your personal data

We process your personal data where we have a lawful reason to do so. These lawful reasons are:

we have your consent;
we are entering into or are performing a contract with you;
it is in our legitimate interests; and
when we are under a legal duty.

When you have applied for our Services, we process this personal data on the basis that we are taking steps to enter into a contract with you. When we have provided Services to you, we process your personal data on the basis that we need this information to fulfil our obligations under the contract we have entered into with you.

There are also certain times when we will process your data on the basis of legitimate interests. This will be when we are carrying out one or more of the following:

pursuing our commercial activities and objectives;
complying with applicable legal and regulatory obligations and any codes of conduct;
improving or developing our business operations and Services;
protecting our business, shareholders, employees and customers;
providing you Services that you have requested but where there is no contract to enter into with us; and
allowing you to browse the website.

You can withdraw your consent to us processing your personal data for marketing purposes at any time. This can be done in a number of ways:

by following the "unsubscribe" mechanism in any marketing communication we, or any associated third party, send to you;
by contacting customer services or our Data Protection Group using the contact details above;
by updating your privacy dashboard in your online account if you have one.

If you change your mind about agreeing to us processing your personal data, this will not have any effect on the lawfulness of any processing we have carried out before you change your mind.

Do I have to provide you with my personal data? What happens if I don't?

In order to provide you with Services you will need to provide us with certain information so that we can process your data in a lawful way. In addition, we may contact you by post, telephone, automated voice message, SMS text message, digital messaging application or email. For example, we may contact you by the above methods if it appears you are having issues applying or abandon before submitting your application, to provide assistance, to invite you to take part in a survey or ask you to review your online account security/activity to spot suspicious behaviour. Please note that we may not be able to continue providing our Services to you if you request that we do not contact you.

We will ask you whether you would like us:

to share your personal data by re-directing your browser to a selected third party's website. The third parties may contact you by post, telephone, automated voice message, SMS text message and email with details of offers and services which may be of interest to you (for further details and if applicable, consult the privacy policies of the third parties). We use the information you provide to us to create a profile for you, which is used to tailor marketing information you receive to that which may be the most relevant to you. The following sectors are the industry types of such third parties providing, offers or services: finance, claims, debt advice and products, funeral plans, insurance (life, finance, home, automotive, general, private medical, travel), leisure and lifestyle products and utilities. We may also share your data to these sectors via agencies/brokers. A list of third parties that we may share data with in this way is available on request subject to commercial sensitivity. You have no obligation to agree to us sharing your personal data with third parties for these purposes and you do not have to provide personal data to us which is over and above that which we need in order to fulfil our obligations to each other. In all such cases, we may continue to share data with such third parties to monitor the progress of any approval process. These third parties have their own terms and privacy policies. Here are Monevo Limited's privacy policy and terms. Here are Quiddi Hub Limited's privacy policy and terms. Here are Stop Go Networks Limited's privacy policy and terms. You should read these carefully to ensure you provide the appropriate consent.
to use browser push notifications to receive alerts including those based on your personal data and application / account status. You can control your browser push notifications (including opt outs) in your browser settings.

In order to provide you with Services we may disclose your personal information to our sub-contractors, agents, service providers, credit brokers, lenders and members of our group of companies (which includes any company linked to us in some way by common ownership or management). A full list of data processors is available on request subject to commercial sensitivity. We will ensure that such persons manage your information securely and use it only in respect of the provision of Services to us and/or on our behalf.

If you were introduced to us by a third party, we may give them your contact details and sufficient information about you for their accounting and administration purposes.

We may disclose your personal information to third parties:

in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
if we (or substantially all of our assets) are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use, or terms and conditions and other agreements, or to protect our rights, property, or safety as well as those of our customers, or others.

If you give us false or inaccurate information and/or we suspect fraud, we may record this on your credit history and may also pass information to appropriate law enforcement or regulatory authorities and/or to Fraud Prevention Agencies ("FPAs").

Unless otherwise provided for in this privacy policy or otherwise agreed by you (and in particular, without prejudice to the provisions of this privacy policy relating to CRAs), we will not share, sell or distribute any of the personal information that you provide to us without your consent unless we are required to do so by law and/or for fraud prevention purposes.

In order to process your application, we will supply your personal information to CRAs and they will give us information about you, such as about your financial history. We do this to assess creditworthiness and product suitability, validate your application, check your identity, manage your account, trace and recover debts and prevent criminal activity.

On an ongoing basis we will continue to share and receive information with the CRAs. This information exchange will include data concerning the way you have managed your debt obligations including your settled accounts, repayments missed and any debts not fully repaid on time. CRAs will share your information with other organisations. Your data will also be linked to the data of your spouse, or other financial associates.

The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at:

Please note that we grant to TransUnion (Callcredit Information Group Limited) and its group companies, to Equifax Limited and to Experian Limited a licence to copy, store, use and sub-license materials (including emails between you and us and IP addresses linked to you) which we provide to TransUnion (formerly Callcredit), Equifax and Experian in the course of the credit referencing process (both in respect of our own credit checks and those which other parties make which utilise such materials). You acknowledge and agree to this process by accepting this privacy policy.

Data security and retention

We understand that the privacy and security of your personal data is of great importance and therefore we have implemented technology, security polices, rules and controls to protect your information.

We will only retain personal data for as long as is necessary. In accordance with our retention policy and applicable anti money-laundering legislation, we will retain your personal data for a minimum of six years from the end of our business relationship with you unless there is a legitimate reason for us to retain your data beyond our personal data destruction period.

Where will your personal data be held?

The information you provide to us via the Website will be stored and processed on servers based in the UK and Ireland. However, in the course of providing our Services we may transfer your personal data to our service providers who are based outside of the European Economic Area (EEA).

If any personal data is transferred or stored outside of the EEA, we check whether the EU Commission has determined that it will afford the same level of protection as it would within the EEA (this is called an adequacy decision). If it will not, we will ensure any such transfer is subject to appropriate safeguards (for example by putting appropriate contractual provisions in place with relevant third parties to provide us with reassurance about the security of your personal data) or is otherwise permitted in accordance with the provisions of the GDPR. However, you acknowledge that communications sent via the Internet cannot be guaranteed to be completely secure.

3. Your rights

Right to access

You have the right to access the personal data we hold about you. Requests to access your personal data should be made in writing and sent by email or post. You can do this by using the contact details above.

Right to rectify your personal data

If you notice that the information we hold about you is not correct, you may ask us to change it to make sure that it is accurate and up to date.

Right to be forgotten

You may ask us to delete your personal data in certain circumstances. It may not be possible for us to delete any or all of the personal data we hold about you where we have an ongoing relationship, however please contact our Data Protection Group who will be able to assist with your request.

Automated decisions

We use the personal data you provide to us to create your profile. This profile is considered as part of your application and we may take some decisions by automated means. We may use CRAs and FPAs to help us make decisions. We will make checks such as assessing your application for credit and verifying your identity to prevent and detect crime and money-laundering.

The decision to lend or not (including the amount we lend), may be determined by your credit status. If you do not agree with a decision which has been made solely by automated means based on the profile we have created for you, you can request that the decision is considered using a non-automated method. You can also object to profiling, including profiling for marketing purposes, you can do this by contacting us directly, using the information we have provided above in this policy.

Other rights

You may also ask us to stop or restrict our processing of your personal data or to transfer your personal information to a third party in certain circumstances.

You can contact the CRAs in the UK to obtain information held by them about you. They may charge a small fee for dealing with your request. Contact details are:

TransUnion (formerly Callcredit), Consumer Service Team, PO Box 491, Leeds, LS3 1WZ or call 08700601414
Equifax, Credit File Centre, PO Box 3001, Bradford BD1 5US or call 08700100583
Experian, Consumer Help, PO Box 8000, Nottingham, NG80 7WF or call 08444818000

Please contact our Data Protection Group if you wish to exercise any of your rights, using the contact details at the start of this policy.

4. Cookies

Cookies are small files that are written or downloaded to the hard drive of your computer or other device when you access a website. Cookies can be used to allow websites to store and quickly retrieve login information on your computer (or other device) and provide data that can be used to improve service quality. You may set up your computer (or other device) to reject cookies or notify us that you object to the issue of cookies. However, should you do so, you may not be able to use the whole of, or certain features on, our Website. To find out more information regarding cookies, including how to see what cookies have been set and how to manage and delete them, you can visit www.allaboutcookies.org.

Details of the cookies we use are displayed below:
247Moneybox.com customer portal cookie - This cookie is used when you log in to your account through the Website and has the following name: moneybox_login. The purpose of this cookie is to keep your login session live whilst accessing your account. This cookie is deleted when you close your browser.

247Moneybox.com customer cookie - This cookie is used when you apply for a loan through our application form and has the following name: id_key. The purpose of this cookie is to detect fraudulent use of our Services by linking applications made, with the devices on which applications are made from. This cookie will last for 24 months.

247Moneybox.com affiliate tracking cookies - These cookies are used when you visit our Website from a tracking link and have the following names: refURL and aid. The purpose of these cookies is to track which affiliate/website introduced you to our Website. We may give the affiliate your contact details and sufficient information about you for their accounting and administration purposes. These cookies are deleted when you close your browser.

247Moneybox.com cookie banner view cookie - This cookie is used to record if a user has viewed the banner notifying usage of cookies on our Website and has the following name: moneybox_cookies. This cookie will last for 3 months.

Third party cookies - Google Analytics - This is a web analytics service provided by Google acting in the capacity of a Data Processor. Cookies and trackers used to measure web traffic, provided by the website as the Data Controller and its Data Processors acting on behalf of the Data Controller. All data is anonymised before sending to the Data Controller or Data Processor (no data sharing). You can freely opt out of this anonymous analytics category. We use Google Analytics, set with the AnonymiseIP Flag to true, meaning that the last octet of your IP address won't be logged, making it anonymous. No other user identifiable pieces of data are captured. To opt out from Google Analytics see: https://tools.google.com/dlpage/gaoptout To see more information about cookies from Google and cookie time frames: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?csw=1

5. Other information

Third party websites

Other websites which are accessed via links within our Website are not covered by this privacy policy and will have their own privacy policies. We are not responsible for the collection of your personal data by those websites so please check the privacy of those websites before you submit any personal data to them.

Children's privacy

The Website is not intended for use by, nor do we offer products or Services to, individuals under the age of 18. We do not knowingly collect personal information from individuals under the age of 18.

Changes to our privacy policy

Any changes to our privacy policy in the future will be posted to the Website and, where appropriate, sent to you by email notification.

Email disclaimer

Emails that we send, including any attachment(s), may contain sensitive and/or confidential information and is intended for the named recipient only. If you are not the named recipient, please notify us immediately, delete it from your system and do not copy, communicate or take any action based on it or its contents.

Please note that although we take reasonable precautions to safeguard emails, we do not guarantee that emails are virus free and have not been intercepted and/or changed and we accept no liability in respect of the same. Please carry out your own checks prior to opening the email and/or any attachment(s).

What if I have a complaint?

If you are unhappy about how your personal data has been used please contact our Data Protection Group using the contact details above.

You may also complain to the Information Commissioner's Office (www.ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF), which regulates the processing of personal data.