Privacy

MONY Group | Privacy Notice for Candidates 

1. Introduction

MONY Group includes MoneySuperMarket, MoneySavingExpert, Quidco, Decision Tech, TravelSupermarket, & icelolly.com (all operating in the UK).

MONY Group Financial Limited (registered number 03157344) is the controller in relation to the processing of the personal data that you provide to us when you apply for a role with us. Our registered address is MONY Group House, St David's Park, Ewloe, Chester, CH5 3UZ.

If you have any queries relating to our use of your personal data, if you want to contact our data protection officer or if you have any other related data protection questions, please contact our Talent Acquisition Team at [email protected] or write to our Data Protection Officer at MONY Group House, St. David's Park, Ewloe, Chester, CH5 3UZ. 

2. What personal data do we collect and how?

      As part of our recruitment process, we will collect, store and process personal data about you. This may include your:

      • Contact details such as your name, email address, home address and phone number
      • Job application data such as the role you applied for, your recruitment and employment history (including information about your previous remuneration), immigration status, academic record and qualifications and information in your curriculum vitae
      • Interview data such as interview notes and scores, information provided to our talent acquisition team via phone or email and what stage of the interview you reached
      • Health data if you voluntarily provide this for us to make a reasonable adjustment
      • Equality and diversity data such as race, ethnicity, religion, sexual orientation, gender identity, neurodiversity and disability if you voluntarily provide this
      • Background check data such as right to work documentation, references, unspent criminal convictions and adverse credit history

      We obtain this information either directly from you or sometimes from third parties, particularly where an offer of employment has been made to you. This may include employment agencies, your former employer(s) and referees, and background check agencies.

      If you do not provide personal data that is necessary for a contract with you, we may not be able to continue with your application, for example if you do not provide evidence of your right to work in the UK in the event that we offer you a job. 

      3. How do we use your personal data?

        These are the legal bases we use for processing your personal data:

        • Contract: To enter into, or perform, a contract with you
        • Legitimate Interest: For our (or third parties’) legitimate interests, as long as they aren’t overridden by your interests and rights
        • Legal Obligation: To comply with our legal obligations

        We may use your personal data for any of the below purposes depending on how you interact with us: 

        Purpose for processing

        Personal data used

        Lawful basis, and where applicable, legitimate interests pursued

        Assessing your skills, qualifications and suitability for the role

        Job application data, interview data

        Contract

        Carrying out pre-employment checks. We use a third-party processor to carry out these checks who will contact you to request the data needed on our behalf

        Contact details, background check data

        Legal obligation, contract and legitimate interest in ensuring candidates are suitable for the role

        Communicating with you about the recruitment process

        Contact details, job application data, interview data

        Legitimate interest in keeping you informed about the recruitment process

        Making informed and fair recruitment decisions

        Job application data, interview data

        Contract

        Maintaining appropriate records of our recruitment process

        Contact details, job application data, interview data

        Legitimate interest in record keeping

        To provide a reasonable adjustment for you if required

        Health data

        Legal Obligation

        To analyse and improve our efforts to recruit and employ from the widest possible pool of talent and make hiring fairer. We use aggregated statistics so that no one in the hiring process will see any individual person’s data

        Equality and diversity data

        Legitimate interest in ensuring our recruitment process is effective and fair, and make any necessary improvements

        4. Who might your personal data be shared with?

          Your personal data may be shared with our service providers, for example, those who provide our software and data storage systems.

          Following our decision to offer you a contract of employment, we may share your information with appropriate third parties. These may include:

          • previous employers, or named individuals as part of a reference request process
          • background check providers
          • credit reference agencies or other vetting organisations
          • the Disclosure and Barring Service/Disclosure Scotland/ Access NI (depending on your country of residence)

          Where we share your personal data with businesses that act as our processor, we ensure they can only process data under our instructions and cannot use it for their own purposes.

          5. Where do we transfer your personal data?

            Your personal data may be stored and processed outside of the UK, in countries that may have different data protection rules to our own. However, we only transfer your personal data outside of the UK where the UK government has determined a jurisdiction as adequate for data protection purposes or we have put appropriate safeguards in place. If you would like to know more about this, please see the contact details at the top of this notice.

            6. How long do we keep your personal data?

              We only keep your data for as long as is reasonably necessary following your most recent application. We take into account the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure of that data, the purposes for which we process it, whether we can achieve those purposes through other means, as well as legal, taxation, accounting and industry requirements and guidelines. After this, your data will be securely deleted or anonymised. We may delete your data sooner if you request erasure, but it may persist on backup or archival media for legal, tax, or regulatory purposes. 

              7. How will your personal data be kept safe?

                We have put in place internal controls and security measures to protect your personal data. Access to your personal data is restricted to those who need it as part of the recruitment process. We take steps to ensure that third parties who have access to your personal data only process it on our instructions and are subject to a duty of confidentiality. We have put in place appropriate procedures to deal with any suspected data breach.

                8. Your rights

                  Under the UK GDPR you have the right to:

                  • Request access to a copy of your personal data (commonly known as a subject access request)
                  • Request correction of inaccurate or incomplete personal data that we hold about you
                  • Request erasure of your personal data where there is no good reason for us continuing to process it (commonly known as the right to be forgotten)
                  • Request restriction of processing of your personal data in some circumstances, for example, while we investigate a complaint that the personal data we hold about you is inaccurate
                  • Object to processing of your personal data in some circumstances where we are using it for our legitimate interests
                  • Request data portability whereby we will transfer your personal data either directly to you or a third party in a machine-readable format. This only applies to personal data provided by you that is processed by automated means on the basis of consent or the performance of a contract

                  If you wish to exercise any of the rights set out above, please contact [email protected]. You will not have to pay a fee to exercise any of these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee. Alternatively, we may refuse to comply with your request in these circumstances.

                  We may need to request information from you to help us confirm your identity and the information you are referring to.

                  We try to respond to all requests within one month, but occasionally may extend this by two months if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

                  You also have the right to complain to the ICO at any time, but we’d appreciate the chance to deal with your concerns first.

                  9. Changes to this privacy notice

                    This privacy notice was last updated in April 2025 to make it clearer what personal data is used for each purpose and the lawful basis applicable. We may make changes to this privacy notice at any time and any changes will be published on our website so please check back regularly. If we make significant changes to this policy, we may also notify you by other means, such as sending an email.