Privacy & Cookie Policy

Privacy policy

In this privacy policy "We", "our" or "us" means M&G Investment group (M&G). A list of entities that form this group is available HERE or on request by contacting us on the details below.

This privacy policy explains how M&G use the personal data that we collect through this website. It was last updated August 2026 - we will make changes to this policy from time to time by updating this page.

Please contact the Data Protection Office if you have any questions regarding this policy:

M&G Data Protection Office
10 Fenchurch Avenue,
London,
EC3M 5AG

Email: privacy.team@mandg.com

Please note – for details on our processing of your personal information:

• In connection with a particular M&G Investment group (including M&G Securities Limited) product, service or investment, or our processing of personal information relating to individuals on whose behalf you act in connection with that product, service or investment, please refer to the Data Protection Notice contained within the applicable application form or terms of business for that product, service or investment
• In connection with your use of the myM&G or M&G ‘My Account’ online services, please see the relevant privacy policy for those services
• In connection with the administration of your registration to attend our events, and in the course of your attendance at and any follow-up in relation to such events, please refer to the relevant privacy policy relating to that event
• In the course of you visiting any other website, including other M&G websites, please refer to the applicable privacy and cookie policies for those websites – other sites linking to or from this website will have their own privacy policies and we are not responsible for the privacy practices of other organisations

What personal data we collect from you

We collect the following personal data about you through your use of M&G Investment group websites (which includes our preference centre and Bond Vigilantes website) and interactions with us:

• Your name, job title and your business contact details (professional email address, postal address, telephone number)
• The charitable body, private investor, corporate entity, or other person or institution you represent for investment purposes, and/or to whom you provide financial advisory services
• Your direct marketing preferences (see below for further details)
• Any personal data about you which you choose to submit to us, including in relation to log-ins, enquiries, complaints, requests or comments submitted to us by phone, post, email, text message or via M&G Investment group websites (eg in free text boxes) and engagement with our social media channels and content
• Data relating to your use of M&G Investment group websites and social media channels – see also our cookie policy

Sensitive personal information

We will only collect and use sensitive personal information (such as information relating to your health, biometric identifiers or information relating to criminal convictions/investigations) if necessary for a specific purpose and if the law requires or allows us to do so, such as where we need to process such data to protect someone’s vital interests or for a substantial public interest (for example, prevention or detection of fraud or financial crime). Any such information which you choose to provide to us will be processed, if necessary, on the basis of your explicit consent.

See also the Supplementary Data Protection Information below in relation to users who are based in the United Kingdom.

How and why we use your personal data

We use your personal data for the following purposes:

• To respond to your enquiries, complaints or comments
• To facilitate your online purchases and for all other administration that may be necessary
• To inform you about investment products and services and other relevant information which may be of interest and / or to send you any direct marketing communications where we are permitted to do so (see below)
• To securely and efficiently manage and administer our business, and for customer management and business development purposes
• To comply with our legal and regulatory obligations, including responding to data subject rights requests or obligations in relation to call recording (see below)
• To manage our risk, and ensure compliance with our internal policies and procedures
• To prevent, detect and investigate fraud and other financial crimes, including by sharing data, where necessary, with the court service, our regulators, tax authorities and law enforcement agencies
• To establish, exercise and/or defend legal claims, to protect our business against fraud, theft, other financial or business crimes and/or other criminal activity
• To monitor and manage communications to and from us using our communications systems
• To protect and maintain the integrity and security of our systems, as well as to detect and investigate activities that may be illegal or prohibited
• Where necessary as part of any restructuring relating to:
  • M&G and its business or assets
  • As part of a sale of M&G or, as relevant, another company in the M&G Investment group, or its/their assets
• If we are under a duty to disclose or share your personal information in order to comply with any legal obligation or in order to enforce or to protect the rights, property, or safety of M&G, our service, our users and any third party we interact with to provide the services.
• To gain insight into how our products/services are used and how they might be improved such as through use of storage and access technologies like cookies (see also our cookie policy)
• To perform automated decision-making, profiling or data analysis to build, train and audit Artificial Intelligence models (see below)
• To keep your information accurate and up to date on record and carry out other internal business administration

Email tracking – when we send emails, we may use tracking pixels or similar technologies for purposes such as measuring and better understanding user engagement with our communications, including to help us analyse, improve and tailor future communications. These can enable us to collect information about interactions with an email, such as whether and when it was opened, how many times it was opened, the device used to open it and whether any hyperlinks within the email were clicked. Depending on the type of email and purpose of the technologies, we may collect this information with your consent or where otherwise permitted by law – you have the right to withdraw such consent and / or object to use of your personal information for direct marketing purposes. You may also be able to block or disable the loading of such tracking technologies through your email or device settings.

Consent

To the extent that we need your consent to use your personal information for the purposes described in this privacy policy, you explicitly provide your consent by confirming to us / approving and submitting (or signing and returning to us) the relevant form or confirmation, as appropriate. You have the right to withdraw your consent in such cases, but doing so may affect our ability to fulfil our contractual obligations, obtain the investments requested or provide our products and services – see below. Consents in relation to storage and access technologies such as cookies are managed separately – see our cookie policy.

Legitimate Interests

We may also rely on legitimate interests or other legal bases in using and sharing your personal information for the purposes described above, for example, to provide, customise or improve our products/services and for business efficiency purposes. We are permitted to use your personal information for activities which we consider necessary for the purposes of our legitimate interests or those of a third party, unless those interests are outweighed by your own interests and rights relating to protection of your personal information.

Before relying on legitimate interests, we carefully consider and balance any potential impact on you and your data protection rights. You have the right to object (see below) to processing of your personal information which is based on legitimate interests. We, M&G, may also rely on legitimate interests or other legal bases in using and sharing your personal information for the purposes described above, for example, to provide, customise or improve our products/services and for business efficiency purposes.

See also the Supplementary Data Protection Information below in relation to users who are based in the United Kingdom.

Direct marketing and managing your preferences

With your consent, or where we are otherwise permitted to do so, we use your personal data for direct marketing purposes, including sending you marketing communications about investment products, related services of the M&G Investment group and other relevant information. Direct marketing includes communications by post, SMS, push notification, email and telephone calls. You can update your direct marketing preferences at any time by following the instructions in the marketing communication itself, by accessing your online account or by contacting the Data Protection Office (see above).

Call Recordings 

If you call us or we call you, we will normally record your call with us for security, quality service control and training purposes. In some instances, we may also record calls where we have a requirement to comply with legal and regulatory obligations, particularly if the call relates to investment activity – these legal and regulatory obligations may vary depending on the jurisdiction where the call recording takes place. For example, we may need to record your call to comply with our legal and regulatory obligations, such as those under the Markets in Financial Instruments Directive (MiFID II) and related UK laws and regulations. All calls recorded will be retained in accordance with our retention policies and, as explained below, where permitted we may use Artificial Intelligence to review call transcripts for insights, direct marketing purposes and to improve efficiency. You may have a right to access your call recordings with us and to object to any processing based on legitimate interests. See the section below "Your Data Subject Rights and how to exercise them” for further information.

Sharing your personal data

We may share your personal data with the following business partners for any of the purposes set out in this privacy policy:

• Other companies within the M&G plc Group for the purposes of managing our relationship with you - a list of entities forming the Group can be requested via the contact details below or reached by visiting: plc-entities.pdf
• Our service providers who support us with providing these services
• Our legal, tax and other professional advisors, and auditors
• Tax, government and/or regulatory authorities
• Prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims
• Fraud prevention and/or law enforcement agencies 
• Third parties where we are required or permitted to do so by law

The recipients set out above may be based in the UK, European Economic Area (EEA) or in countries outside the EEA.

Transfers of your personal data outside the UK and EEA

Your personal data may be transferred outside of the UK and EEA from time to time to members or businesses within the M&G plc Group, trusted service providers and other third parties for any of the purposes set out in this privacy policy. If appropriate, we may also need to pass on your personal information to financial crime prevention agencies and any legal, tax, regulatory or government bodies.

As we, M&G, and some of our service providers are global companies, we might need to send your personal information to countries that have different data protection laws to the UK or the EEA. These transfers will only be to countries in respect of which the European Commission and, where applicable, the UK Government has issued a data protection ‘adequacy’ decision, or to other countries, such as India or the United States of America, but only where appropriate safeguards have been put in place first. In more limited circumstances, we may also need to rely on a derogation under applicable privacy laws.

If you want to know more about these safeguards – like our use of the European Commission’s or UK’s Standard Contractual Clauses which govern the transfer of information outside of the European Economic Area and UK respectively – further information is available on request from privacy.team@mandg.com

EU Representative

Our European Union Representative with respect to data protection matters is M&G Luxembourg S.A. and can be contacted at: 

F.A.O. The Data Protection Officer, M&G Luxembourg S.A., Boulevard Royal 16 2449 Luxembourg

Or by email to: privacy.team@mandg.com

Retaining your personal data

We will retain your personal data for as long as is necessary for the purposes described above.

Our general retention period is seven years from the date that our relationship with you, or the client with which you are connected, ends. We keep personal data for as long as it is required by us for the relevant purpose (such as to perform our contractual obligations, or for as long as you have signed up to receive, or not opted out of receiving, direct marketing communications from us), or where longer to meet our legal or regulatory obligations.

We may retain personal information about you for statistical purposes (for example, to help us better provide our services). Where information is retained for statistical purposes it will always be anonymised, meaning that you will not be identifiable.

Profiling, Automated Decision Making and Artificial Intelligence

To help us make fair, efficient and accurate decisions, M&G plc Group (see above for list of entities) may use automated processes. We also use profiling to enable us to personalise our service offerings and related communications. Automated processes or profiling may be used to:

• Open accounts – checks to ensure you meet the conditions needed. This may include checking residency, nationality and/or financial details
• Tailor our services – We may place you in groups with similar customers. These are called customer segments. We may do this to study and learn about our customers to make decisions and tailor our services based on what we learn
•  Help us detect and prevent fraud and other financial crimes – help to detect possible fraudulent or money-laundering activity or register an account is being used in an unusual way

To the extent that we conduct such automated decision making activity, we’ll provide you with further information at the appropriate time, unless already provided in this privacy policy. We may use a variety of technology solutions to process your data, including Artificial Intelligence technology. These may be used to support provision of our services (such as reviewing correspondence, appointments and call transcripts for insights, direct marketing purposes and to improve efficiency) and may include training Artificial Intelligence models with your data. Your data will be anonymised wherever possible prior to any model training. We will always strive to ensure that any use of Artificial Intelligence includes appropriate human oversight and is compliant with applicable laws and regulations.

For more information on AI usage at M&G and rights in relation to automated decision making:

• please visit: AI usage – M&G plc
• see “Object to processing (Right to Object)” below regarding your rights to object for this type of use of your personal data, and
• see also the Supplementary Data Protection Information below on automated decision making in relation to users who are based in the United Kingdom.

Your Data Subject Rights and how to exercise them

You also have certain rights relating to the personal data we hold about you which are outlined below, they may be subject to various exceptions and limitations. You can exercise these rights at any time by contacting us (see details above). We may need to validate your identity to fulfil your request.

You have  the following rights in relation to your personal data:

Request access to the personal data we hold about you (Data Access Request)	You may request access to a copy of the personal data we hold about you. We can refuse to provide personal data where permitted or required to do so by law, for example where access may reveal another person’s personal data or would otherwise negatively impact another person's rights.
Object to processing (Right to Object)	You may object to us processing your personal data for a specific purpose where the processing is based on legitimate interests. If we consider that our need to process your personal data outweighs your objection then we will explain why. You also have rights to object in relation to certain types of automated processing which we carry out using your personal data – this includes undertaking automated processes, or fully automated decision making, using your personal data, except where authorised by law. For users based in the UK, see Supplementary Data Protection Information below. You may also object to us using your personal data for direct marketing purposes. This includes any profiling we perform as part of our direct marketing activities. Once we receive and have processed such an objection, we will stop using your personal data for these purposes.
Request a copy of your personal data (Data Portability)	In certain circumstances you may request that we move your personal data to another organisation if you want us to.
Request that your personal data is deleted (Right to be Forgotten)	You can ask us to delete the personal data we hold about you if it is no longer required for the purposes set out in this privacy policy or if there is no other legal basis for the processing (for example, when it is no longer required or a legitimate business need, legal or regulatory obligations, where you have withdrawn your consent or is no longer required for the purposes it was collected).
Amend or correct your personal data (Right to Rectification)	If you believe that the personal data we hold about you is inaccurate, incorrect or incomplete, you have the right to request that we update it.
Restrict the processing of your personal data (Right to Restrict)	You may ask us to restrict our processing of your personal data in certain circumstances: whilst we resolve any complaints you have about the way your personal data is used you require it for a legal claim you believe the personal data is not accurate we no longer need the personal data you have objected to the processing of your personal data or you think our processing is unlawful but you do not want us to delete your personal data.
Rights in relation to consent (Right to Withdraw)	At any time, you may withdraw the consent you granted for your personal data to be used for the relevant purpose that you consented to (eg direct marketing). When you withdraw your consent, it will not affect the lawfulness of any past activities we have undertaken based on the previous consent.

Making a Data Protection Complaint

If you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us using the contact details above.

You are also entitled to raise a complaint with your Data Protection Authority, as follows:

• Users based in the EU - for EU Data Protection Authority contacts please see further information on the following link National Data Protection Authorities
• Users based in the UK - you must first raise the complaint with us. See “UK - Making a complaint about how we use your personal information” at the Supplementary Data Protection Information below.
   

SUPPLEMENTARY DATA PROTECTION INFORMATION: UNITED KINGDOM

UK – How and why we use your personal data

In addition, in some cases we process your personal data based on recognised legitimate interests, as permitted under UK data protection law. Recognised legitimate interests apply where UK law identifies specific purposes that are considered sufficiently important to justify processing personal data without the need to carry out a balancing test involving your data protection rights. We may rely on recognised legitimate interests for the following purposes and only where the processing (such as sharing information within M&G plc Group or with relevant authorities or organisations) is necessary and proportionate for those purposes:

• Detection, investigation and prevention of crime, including fraud
• Apprehension or prosecution of offenders
• Safeguarding a vulnerable individual (or group), including protecting them from neglect or physical, mental or emotional harm, or protecting their physical, mental or emotional well-being
• Responding to an emergency
• Sharing personal information to help other organisations perform their public tasks or official functions
• Safeguarding national security, protecting public security or defence reasons

Where we rely on recognised legitimate interests, your rights under UK data protection law still apply, although in some cases they may be limited due to the nature of the processing (for example, where this is necessary for crime prevention or safeguarding).

UK – Rights in relation to automated decision making

We may use automated processing (including profiling) to help us make decisions about you. There will usually be human review or oversight in that process, but where we make a decision about you using solely automated processing of your personal information, and that decision has a legal or similarly significant effect on you, you have the right to:

• Receive information about the logic involved in and how the decision may affect you
• Express your views about and challenge any such decision
• Ask for human involvement in relation to any such decision

You can exercise these rights by contacting us using the details set out in the privacy policy. In some circumstances, the law places additional restrictions on our ability to make such decisions, and we will only make such decisions where permitted by law.

UK - Making a complaint about how we use your personal information

We take the privacy and protection of your personal information seriously. To ensure compliance with data protection laws, we

• Have an appointed Data Protection Officer (DPO)
• Keep records of complaints for three years, in line with regulatory requirement

Contacting the DPO

Write: Customer Service Centre, Lancing, BN15 8GB.

Phone: 0800 000 000, Monday to Friday, 08:00 – 18:00.

We will acknowledge the complaint within 30 days and we will handle your complaint in line with applicable laws and regulations. 

Not satisfied with our response?

If you’ve raised your concerns with our DPO but remain dissatisfied, you can refer your complaint to the Information Commissioner’s Office (ICO) – an independent authority that protects individuals’ information rights. Using this service won’t affect your legal rights.

ICO - phone: 0303 123 1113 (or +44 (0)16255 45700 if calling from abroad).

ICO - online: ico.org.uk