Privacy Policy

1. Who we are

MG Capital Ltd ("MG Capital", "we", "us" or "our") is a savings and investments company registered in England and Wales. We are the data controller responsible for your personal data collected through this website and our services.

You can contact our Data Protection Officer at:

• Email: info@mginvestmentcapital.com
• Address: 10 Avenue
  London
  EC3M 5AG
• Telephone: +44 20 8040 0314

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide directly

• Identity data: full name, date of birth, gender, title
• Contact data: postal address, email address, telephone numbers
• Financial data: bank account details, National Insurance number, tax status, assets and income information
• Account credentials: username and encrypted password
• Communications: enquiries, complaints, feedback and correspondence you send us

Information we collect automatically

• Technical data: IP address, browser type and version, device identifiers, operating system
• Usage data: pages visited, time on site, referral source, clicks and navigation paths
• Cookie data: see our Cookie Policy for full details

Information from third parties

• Credit reference agencies (where legally required for identity verification)
• Fraud prevention databases
• Publicly available sources such as Companies House and the Electoral Register

3. How we use your personal data

We use your personal data for the following purposes:

• To provide and manage your account and services — including processing transactions, managing your investments and pension arrangements, and providing customer support.
• To comply with legal and regulatory obligations — including anti-money laundering checks, Know Your Customer (KYC) verification, and reporting to the Financial Conduct Authority (FCA) and HMRC.
• To improve our website and services — through analytics and testing, so we can understand how our services are used and make them better.
• To communicate with you — including sending service notifications, responding to your enquiries, and sending marketing communications where you have consented or where we have a legitimate interest.
• To detect and prevent fraud — including monitoring for unusual activity and verifying your identity.

4. Legal basis for processing

We rely on one or more of the following legal bases to process your personal data:

• Contract: processing is necessary to perform the contract we have with you or to take steps at your request before entering into a contract.
• Legal obligation: processing is necessary to comply with our legal and regulatory obligations.
• Legitimate interests: processing is necessary for our legitimate interests or those of a third party, where those interests are not overridden by your rights.
• Consent: where you have given us your clear consent to process your data for a specific purpose (e.g. marketing emails). You may withdraw consent at any time.

5. Marketing communications

We may send you marketing communications about our products and services by email, post or telephone where we have your consent or a legitimate interest to do so. You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Contacting us at info@mginvestmentcapital.com
• Calling us on +44 20 8040 0314

Opting out of marketing will not affect the service communications we need to send you in connection with your account.

6. Sharing your personal data

We do not sell your personal data. We may share your data with the following categories of recipient:

• Service providers who process data on our behalf, such as IT and hosting providers, payment processors, and marketing platforms — all bound by strict data processing agreements.
• Regulatory bodies and authorities such as the FCA, HMRC, and law enforcement agencies where required by law.
• Credit reference and fraud prevention agencies to verify your identity and prevent financial crime.
• Professional advisers such as auditors, lawyers and insurers.
• Business buyers or sellers in the event of a merger, acquisition or sale of all or part of our business, subject to appropriate confidentiality obligations.

7. International transfers

Where we transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses (SCCs), or binding corporate rules. Contact us if you would like details of the specific mechanism used for any transfer.

8. How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, tax or reporting requirements. In general:

• Customer account data is held for the duration of the relationship plus up to 7 years after account closure (in line with FCA and HMRC record-keeping obligations).
• Marketing opt-out records are held indefinitely to ensure we respect your preferences.
• Website analytics data is typically held for 26 months.

9. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request we correct inaccurate or incomplete data.
• Right to erasure — to request we delete your data in certain circumstances ("right to be forgotten").
• Right to restrict processing — to request we limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object — to object to processing based on our legitimate interests or for direct marketing at any time.
• Rights related to automated decision-making — to not be subject to solely automated decisions that significantly affect you, unless certain exceptions apply.

To exercise any of these rights, contact us at info@mginvestmentcapital.com. We will respond within one month. There is no charge for most requests.

10. Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use, their purpose and how to control them, please read our Cookie Policy.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include encryption of data in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

13. Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the chance to address your concerns before you contact the ICO, so please do reach out to us first.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website. The date at the top of this policy reflects when it was last updated. We encourage you to review this policy periodically.