Privacy Policy - Thrifty Family

Managing Director: Scott Nelson

Thrifty Family is a trading name of MoneyNerd Limited (we/us/our), the controller responsible for the personal data we process as described in this notice. References to Thrifty Family mean MoneyNerd Limited acting under that trading name.

MoneyNerd Limited is a company registered in England and Wales under company number 12915403, whose registered and trading address is The Grange, Grange Road, Malvern, WR14 3HA.

MoneyNerd Limited is registered with the Information Commissioner’s Office (ICO) as a data protection fee payer. Our registration number is ZB338550.

Thrifty Family is a registered trademark. Trademark number: UK00003855809

Privacy contact: [email protected]

VAT number: 380866172

MoneyNerd Limited’s FCA Firm Reference Number is: 978681

Thrifty Family understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website, https://thriftyfamily.co.uk/ (“Our Site”) and will only collect and use personal data in ways that are described here, and in a manner that is consistent with Our obligations and your rights under the law.

This Privacy Policy explains how we collect, use, retain and share your personal data and how you can exercise your rights. Using our website or submitting an enquiry does not, by itself, give consent to marketing or to every use of personal data described here. Where consent is required, we ask for it separately and you can withdraw it at any time.

Our processing is subject to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

This notice covers the Thrifty Family website, enquiries, introductions and related communications, including any credit, equity-release or insurance introduction or affiliate link you choose to use. For debt enquiries, MoneyNerd Limited, trading as Thrifty Family, is an Introducer Appointed Representative of Pacific Financial Solutions Limited, trading as The Debt Advice Service (TDAS). Thrifty Family does not provide debt advice or assess the suitability, affordability or eligibility of debt solutions. TDAS is responsible for any debt advice and assessment it provides. Our main partners and links to their privacy notices are listed under ‘Do We Share Your Data?’ below.

The personal data we collect about you

The data we collect depends on the page, form or service you choose. We collect only information needed for the stated purpose. The form or notice shown when you provide information explains the relevant enquiry route and recipient. If you choose an available account or financial wellbeing quiz offered through this site, it is provided by MoneyNerd Limited under the MoneyNerd brand; making an enquiry does not create an account or subscribe you to marketing. Our Cookie Policy explains cookies and similar technologies.

Personal data collected, used, stored and transferred by us may include:

Identity Data including your name, age or age band and, where relevant to the enquiry or account, date of birth, address-related identity details and username or similar identifier.
Contact Data including home address, email address and telephone numbers
Financial and Enquiry Data including debt amounts or bands, number of debts, housing situation, employment status and country of residence within the UK. Where relevant to a borrowing enquiry, this may also include property value, mortgage balance and the loan amount, term and purpose requested. Collecting factual information for an introduction does not mean that Thrifty Family assesses or recommends a debt solution.
Referral and Compliance Data including the source and time of your enquiry, campaign or affiliate identifiers, the form and privacy wording shown, your request and contact permissions, transfer records, follow-up communications, referral outcomes, complaints and monitoring records.
Technical Data including internet protocol (IP) address, browser and device information, operating system, approximate location and online identifiers associated with use of our website and advertising tools.
Profile and Usage Data including feedback, preferences and information about how you use our website, content and features. Where you choose an available MoneyNerd account or financial wellbeing quiz, this may include relevant account activity, quiz responses and results.
Marketing and Communications Data including your communication preferences, consent and opt-out records, email interactions and the permissions relevant to communications from us or a named provider.

How do we collect your personal data?

Personal data is collected by us using the following methods:

Directly from you when you complete an enquiry form, request an introduction, subscribe, give feedback or contact us, or choose to create or use an available MoneyNerd account or quiz feature offered through this site. Website and advertising technologies may separately collect Technical and Usage Data, subject to applicable cookie and consent requirements.
From approved introducers, affiliates and the provider receiving your enquiry, where relevant to the introduction, its outcome, complaint handling or compliance monitoring. Unless a legal exemption applies, we provide information about the source, categories and use of data obtained indirectly within a reasonable period and no later than one month, or earlier at our first communication with you or first disclosure to another recipient.
Through MoneyNerd Limited’s other websites and trading names, including MoneyNerd, where the site identifies MoneyNerd Limited as the controller and the use is within the purpose and permissions explained at collection. The relevant form explains whether information is used for an enquiry or an optional account; making an enquiry is not itself a request to open an account or subscribe to marketing.

How do we use your personal data?

All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the Data Protection Regulations (UK GDPR) at all times. For more details on security see the section below.

Each use of personal data must have a lawful basis. Depending on the purpose, this may be consent, steps you request before entering a contract or performance of a contract with you, compliance with a legal obligation, or our legitimate interests after considering your rights. An agreement with a business partner is not, by itself, a contract with you or a legal obligation under data protection law.

The table below explains the main purposes and lawful bases. We also keep enquiry, permission, transfer and communication records, investigate complaints and monitor lead sources and outcomes to demonstrate that introductions are handled properly. We use relevant Identity, Contact, Enquiry, Referral and Compliance Data for our legitimate interests in oversight, accountability and handling or defending claims; where a binding legal requirement applies to us, we rely on legal obligation for that processing. We share necessary oversight information with our principal and use aggregated or anonymised reporting where it meets the purpose.

If you tell us about support needs, we limit use to what is necessary to handle your enquiry or complaint. For debt introductions, vulnerability indicators collected through an approved digital form or self-disclosure field are passed to TDAS without Thrifty Family assessing, screening or following up on those circumstances. Health information and other special category data require both a lawful basis and a separate condition under data protection law. We explain the relevant processing and any proposed sharing when collecting such information, and obtain explicit consent where we rely on it. Please do not include detailed medical information in a general enquiry form.

Purpose/Activity	Data Category	Lawful Basis
To handle your enquiry, arrange an introduction where it proceeds and contact you through the channels explained on the form. Thrifty Family’s debt-enquiry follow-up is limited to approved emails.	Identity, Contact, Financial and Enquiry, Referral and Compliance, and relevant Communications Data.	Legitimate interests in responding to the request and arranging the introduction, subject to a balancing assessment. Marketing requires the separate permissions described below.
To send optional promotional emails about relevant services, where the required permissions are in place.	Identity, Contact, Marketing and Communications Data.	Consent where PECR requires it. Legitimate interests only where a valid legal exception applies and the balancing assessment supports it. Marketing is not a legal obligation.
To operate, secure and improve the website and understand usage and advertising performance, using anonymised information where possible.	Technical, Profile and Usage Data; relevant event and preference records.	Legitimate interests for necessary operation and security. Consent for advertising cookies, similar device tracking and related personal-data processing. Analytics uses consent unless a specific exception applies; for any exempt analytics, legitimate interests in improving our service, subject to the required safeguards and right to object.
Where offered through this site and chosen by you, to provide MoneyNerd financial wellbeing quiz results and create or manage an optional MoneyNerd account with the features you request.	Identity, Contact, Profile and Usage Data.	Contract where necessary to provide requested quiz results or account features; legitimate interests for security and administration where appropriate.

Automated tools and profiling

We use automated tools to operate our website and measure advertising. Where you choose an available MoneyNerd financial wellbeing quiz, automated tools produce its results. Our debt enquiry journey also uses factual information, including debt amount, to route enquiries.

Debt amount can affect whether an enquiry is passed to TDAS, so some enquiries may not result in an introduction. Records of enquiries that do not proceed are handled under the retention rules below. You can contact [email protected] to ask how your enquiry was handled or to raise a concern.
An introduction decision or MoneyNerd financial wellbeing quiz result is not a credit score, credit decision or recommendation of a debt solution. Thrifty Family does not provide debt advice or assess which debt solution is suitable for you; TDAS is responsible for its own advice and assessment.

If we make a decision based solely on automated processing that has legal or similarly significant effects on you, we will explain the decision, the information and main factors used, and its significance and likely consequences. You can make representations, request human intervention and contest the decision by contacting [email protected]. Providers receiving an introduction must explain their own automated decisions and rights processes in their privacy notices.

Do We Share Your Data?

Where a debt introduction proceeds following your request, we share the details needed for that enquiry with Pacific Financial Solutions Limited, trading as The Debt Advice Service (TDAS). TDAS can contact you about the enquiry by phone, email, SMS or WhatsApp, as explained at the point of collection and subject to applicable contact permissions. MoneyNerd Limited, trading as Thrifty Family, may send approved emails about your enquiry and how to access debt advice; this does not authorise unrelated marketing. For these introductions, MoneyNerd Limited and TDAS act as independent controllers for their respective processing, each responsible for its own lawful basis, retention, security and response to your rights. Please read TDAS’s privacy policy as well as this notice.

Use of information across MoneyNerd Limited’s brands, including Thrifty Family and MoneyNerd, remains subject to the purpose and permissions explained when it was collected. Common ownership does not automatically permit unrelated reuse, marketing or account creation. For non-debt enquiries, the relevant form or service page identifies the intended recipient and purpose. We and the named provider may contact you by email, phone or SMS to handle that request, as explained on the form; this does not authorise unrelated marketing.

We use suppliers for functions such as website hosting, IT support, customer relationship management, email delivery and compliance support. Where they process personal data on our behalf, they act under our instructions and appropriate contractual safeguards. Providers that determine their own purposes, including an independent financial-services provider, are controllers in their own right.

Depending on the introduction or service you request, and the processing explained at collection, relevant providers and other recipient categories include the following. A listing does not mean that every recipient receives every enquiry or that your debt enquiry is shared with our other commercial partners:

Debt advice provider: Pacific Financial Solutions Limited, trading as The Debt Advice Service (TDAS).
Insolvency practitioners
Credit brokers: Loans Warehouse Ltd handles lending enquiries as a credit broker, not a lender. MoneyNerd Limited is its Introducer Appointed Representative. Read Loans Warehouse’s privacy policy.
Equity release and mortgage advice: Age Partnership Limited. MoneyNerd Limited is a lead generator for Age Partnership. Read Age Partnership’s privacy policy.
Insurance comparison: Seopa Ltd, trading as Quotezone.co.uk. MoneyNerd Limited is its Introducer Appointed Representative for insurance introductions. Read Quotezone’s privacy policy.
Consumer lenders
Financial technology businesses
CRM systems
Email platform for sending email communications
Compliance consultants

The route you choose determines how information reaches a provider. Where an introduction proceeds, we pass on the details needed from your Thrifty Family form to the named provider. If you enter information directly into a provider’s own website, comparison tool or clearly identified provider form, that provider collects it under its privacy notice. Listing or linking to a provider does not mean Thrifty Family receives every detail you supply to it. The named providers are controllers for their own services and explain any further sharing with lenders, insurers or other providers in their privacy notices.

Affiliate links: we use Impact Radius Limited (impact.com) to feature offers from Wise and JustAnswer. Affiliate referral tracking is used to attribute visits or transactions and calculate fees or commission. This may involve link, online and referral identifiers, subject to the cookie and consent choices described in this notice and our Cookie Policy. The affiliate relationship does not mean your debt-enquiry details are passed to Impact, Wise or JustAnswer. When you choose to use an advertiser’s service, its own privacy notice applies to information it collects. See the impact.com privacy notice, Wise privacy notice and JustAnswer privacy notice.

Further information about our commercial relationships is on our How Thrifty Family works page. The recipient identified on the relevant enquiry form or service page is the one applicable to your request.

We may compile and share anonymised statistics about website use and referral activity with partners, affiliates, prospective investors and advertisers. Anonymised information must not identify you by reasonably available means. Information linked to online identifiers, or coded or hashed identifiers that can still be linked to a person, remains personal data and is subject to the purposes, permissions and safeguards in this notice.

In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal requirements, a court order, or a governmental authority.

Any sharing with the following organisations is limited to the stated purpose and necessary data, with the relevant lawful basis and any required permissions. Legitimate interests does not override consent requirements for marketing:

Our technology service provider
Advertising and marketing service providers, subject to the safeguards and choices described below.
A third party acting on your behalf, such as a financial or legal adviser

We may share your data with regulators and disputes resolution bodies such as:

The Financial Conduct Authority;
The Information Commissioner’s Office;
The Financial Ombudsman Service, where the complaint falls within its jurisdiction;
Advertising Standards Authority; and
Local Trading Standards.

Our advertising and measurement may use Meta tools, including the Conversions API. Depending on the tool used and your choices, this may involve online identifiers, website interactions and events relating to an enquiry or referral outcome to measure campaign performance. See the cookie and collection information presented on the website, or contact [email protected] for details about your data. Submitting a debt enquiry does not by itself authorise advertising tracking or the reuse of enquiry information to create advertising audiences.

Meta’s role depends on the advertising product and processing involved. Where we and Meta jointly determine the purposes and means of processing, we act as joint controllers for that processing. Other processing may be carried out by Meta as an independent controller or under processor terms. Meta’s privacy policy explains its own processing and how to contact it.

Where joint-controller arrangements apply, the relevant arrangement sets out each party’s responsibilities, including the information to be provided and how rights requests are handled. You can ask us for information about the arrangement relevant to your data.

You may contact us about our use of data with Meta. Where we are joint controllers, you can exercise your data protection rights against either controller; the arrangement does not remove our responsibilities to you.

For debt introductions, we do not sell, resell, recycle or reuse your lead for unrelated purposes. Any approved follow-up marketing or onward disclosure must stay within the explained purpose, our permitted activities and the required permissions.

Who we disclose personal data to

Your personal data may be shared with third parties for the following purposes:

Recipient type	Reason
Requested introduction providers and our principals	To receive the enquiry you request and provide their own services. The main partners and their privacy notices are listed above. Relevant principals may also receive necessary oversight information. For debt enquiries, the provider and principal is Pacific Financial Solutions Limited (TDAS), acting as an independent controller.
IT, CRM, email and professional support suppliers	To provide support functions using only the data necessary for the task. Processors operate under our instructions; advisers may have separate professional obligations.
Original introducing parties	Where necessary and lawful, limited referral-status information may be returned for reconciliation, quality monitoring and accountability. This does not permit unrelated reuse or marketing.
Regulators	To respond to a lawful regulatory or law-enforcement request and meet applicable obligations. Necessary oversight information may also be supplied to our principal. We limit the information to the purpose.
Financial Ombudsman Service	To assist with a complaint within the Financial Ombudsman Service’s jurisdiction, where relevant. Data protection complaints may be raised with the ICO.
Credit-reference and fraud-prevention checks by providers	A broker, lender or other provider you choose may carry out its own checks under its privacy notice and explain any credit-file footprint. Making a debt introduction through Thrifty Family is not itself a credit application or an instruction for Thrifty Family to search your credit file.
Others	Third parties whom we may choose to sell, transfer, or merge parts of our business with in the future will be subject to using your personal data in the same way as set out in this notice

All recipients must protect personal data appropriately. Our processors may use it only on our instructions. Independent controllers, including TDAS for its own services, determine their own processing and must provide their own privacy information and comply with data protection law.

Legitimate Interest

Before relying on legitimate interests, we assess whether the purpose is legitimate, whether the processing is necessary and whether your interests, rights or freedoms override our interests. You can ask us for more information about the assessment.

You can object to processing based on legitimate interests by emailing [email protected] or writing to us. We will stop unless we can demonstrate compelling overriding grounds or need the data for legal claims. An objection to direct marketing is absolute: we must stop using your data for that purpose, including related profiling. Our legitimate interests include:

the maintenance of our IT/Data Security systems and processes;
putting in place fraud prevention mechanisms;
keeping our records up to date;
communicating relevant information where permitted by law and your preferences; consent is used where required for electronic marketing;
developing products and services;
monitoring introductions, lead quality, customer outcomes and complaints;
maintaining a marketing suppression list; and
maintaining evidence of compliance and handling legal claims; processing required by a binding legal obligation uses that separate lawful basis.

Change of purpose

Before using your personal data for a new purpose, we check that the reuse is permitted by data protection law and identify the appropriate lawful basis. We explain the new purpose before starting that use, unless a legal exemption applies.

Where we originally relied on consent, we obtain fresh consent for the new purpose unless a specific statutory exception permits the reuse. A change to this notice does not itself give us your consent.

Changes to our Privacy Notice

We keep this Privacy Policy under review and publish updates on this page. We will explain material changes to our processing as required by law and obtain fresh consent where necessary. Historic versions can be requested from us.

Marketing

Requesting an introduction and receiving communications needed to deal with that enquiry are separate from choosing marketing. Thrifty Family’s debt-related emails must stay within the communications approved by its principal. Promotional emails or other electronic marketing require valid consent unless all conditions of an applicable legal exception are met; the fact that you made an enquiry does not automatically establish that exception. We record the relevant permission and give you a simple way to unsubscribe. You can stop Thrifty Family marketing at any time using the unsubscribe link or by emailing [email protected].

We do not treat a request to introduce you to a named provider as permission for that provider or other organisations to send unrelated marketing. Any separate third-party marketing must be explained and have the required specific permissions. Withdrawing marketing consent does not stop us retaining limited records needed to honour your opt-out, deal with a complaint or meet other lawful recordkeeping purposes.

Data Security

We use appropriate organisational and technical measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure. Access is limited to staff, advisers and suppliers who need it for their role and are subject to confidentiality requirements. Processors act on our instructions; independent controllers are responsible for the security of their own processing.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

The Thrifty Family website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

International transfers

Some suppliers or service providers may process personal data outside the United Kingdom. Where a transfer is restricted under UK data protection law, we ensure it is covered by UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with the required assessment and additional measures where necessary, or another lawful transfer mechanism. You can contact [email protected] for information about the countries, safeguards and how to obtain a copy of safeguards relevant to your data.

How long is your personal data retained?

We apply the following retention rules to our own records. For debt enquiries, closure means we have finished handling your request or completed the introduction; it does not mean the end of a debt solution provided by another firm. Unrelated marketing messages do not restart the retention period.

Processing stage	Retention timescale
Marketing subscriptions and opt-out records	We keep active marketing details until you unsubscribe, the permission expires or the subscription is no longer needed, subject to review. After an opt-out, we retain only the contact identifier and preference record needed to prevent unwanted marketing. Permission evidence needed for compliance is retained separately under the relevant recordkeeping rule.
Debt-introduction and compliance records	We retain necessary debt-enquiry, introduction and compliance records for six years from the later of the record’s creation or the completion or closure of the related enquiry or introduction, including where no referral proceeds. This meets the six-year minimum in our principal agreement. Relevant records may be retained longer for an outstanding complaint, investigation, legal claim or remediation, or an applicable legal, regulatory or principal retention requirement. We review any extension and delete or anonymise records when no longer needed. Retention does not authorise further marketing.
Other enquiries, accounts and technical records	Ordinary non-debt enquiries: normally 12 months after closure, unless a complaint, legal claim or another applicable retention requirement justifies longer.Optional MoneyNerd accounts: while active, then delete or anonymise data no longer needed after closure. Necessary compliance records follow the relevant rule above.Technical and security records: only as long as needed for operation, fault investigation, fraud prevention or security. Cookie expiry and server-side analytics retention are separate; see the Cookie Policy and contact us for details of the relevant tool.

When information is no longer needed for its documented purpose and retention requirements, we securely delete it or irreversibly anonymise it. An unsubscribe request stops marketing; it does not automatically erase necessary compliance or suppression records. We review retention to avoid keeping unnecessary information.

Your rights

You have the right to:

Request access to your personal data – You can ask verbally or in writing for a copy of your personal data and information about how it is used. You do not have to use a particular form or refer to this policy. We normally respond without undue delay and within one calendar month. We may ask for proportionate identity information and use any clarification pause or extension only where the law allows. For complex or multiple requests, an extension of up to two further months may apply; we will explain an extension within the initial month.
Request correction of the personal data – This enables you to have any incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data – This enables you to ask us to delete personal data where there is no good reason for us continuing to process it. You can also ask us to delete your personal data where you have successfully objected to the processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. However, we may not always be able to delete the data for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data – You may object, on grounds relating to your circumstances, where we rely on legitimate interests. We must stop unless we demonstrate compelling overriding grounds or need the data for legal claims. You have an absolute right to object to direct marketing, including associated profiling; we cannot override that objection.
Request restriction of processing of your personal data – This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request portability of your personal data – Where we process personal data you have provided to us by automated means, based on consent or a contract with you, you can ask for that data in a structured, commonly used, machine-readable format. You can also ask us to transmit it directly to another controller where technically feasible.
Withdraw consent at any time where we rely on it – This does not affect processing lawfully carried out before withdrawal. We stop the processing that depended on your consent. Withdrawing optional marketing consent does not prevent you requesting an introduction. Any separate processing needed for complaints, compliance or suppression records must have its own lawful basis, as explained in this notice.

You can complain to us about our handling of personal data using the contact details below. You also have the right to complain to the Information Commissioner’s Office (ICO). That right is not conditional on our agreement or on giving up any other remedy.

For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

How Can You Control Your Data?

In addition to your rights under the Data Protection Regulations, set out above, when you submit personal data via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you control on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details).

You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

Your Right to Withhold Information

You can browse our website without completing an enquiry form or creating an account, although Technical and Usage Data may still be processed as explained above. If you choose not to provide information marked as necessary for a particular request, we may be unable to make that introduction or provide the requested feature.

You can manage optional cookies and similar technologies through the choices provided on our website. See our Cookie Policy for details.

Our Use of Cookies

We use cookies and similar technologies for website functionality, analytics and advertising, including Google Analytics, Google advertising tags and Meta tools where enabled. Advertising cookies and similar technologies that store or access information on your device, including for measurement and conversion tracking, require your consent. We obtain consent for other non-exempt technologies, with an easy way to withdraw it. Any permitted service-analytics exception is separate from advertising and must meet its conditions, including a simple, free means to object. See our Cookie Policy for the technologies, providers, purposes, durations and settings.

How Can You Access Your Data?

You can exercise your rights by contacting [email protected] or writing to MoneyNerd Limited, The Grange, Grange Road, Malvern, WR14 3HA. We normally handle requests free of charge. A reasonable fee or refusal is possible only where the law permits, for example for manifestly unfounded or excessive requests; we will explain our reasons and your right to complain. The access-request timescales and any permitted extensions are explained in “Your rights” above.

What Happens If Our Business Changes Hands?

We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of control of all or part of Our business. Any personal data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by Us.

In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes

Who do I contact?

For privacy questions, rights requests or complaints, email [email protected] or write to MoneyNerd Limited, The Grange, Grange Road, Malvern, WR14 3HA. Please explain your concern and the response you are seeking. For data protection complaints, we will acknowledge receipt within 30 days, investigate appropriately, keep you informed and provide the outcome without undue delay. Rights requests are handled within the separate statutory timescales explained above.

What if I am still not satisfied?

You have the right to complain to the Information Commissioner’s Office (ICO) about our processing of personal data. We encourage you to raise concerns with us so that we can try to resolve them, but this does not remove your right to contact the ICO.

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

For current contact details and how to complain, see the ICO complaints page.

For questions about Thrifty Family’s use of personal data, please contact [email protected].