Data Protection Notice

‘We’, ‘us’ and ‘our’ means Prudential UK (Pru), which is part of M&G (defined below).

The security of your personal information is our highest priority. We have set out below how we process your personal information:

• from your use of this website or our social media channels
• when you contact us by phone, text message, post, email or via our social media channels
• when you apply for any of our products or services and you have not been provided with any Data Protection Notice as part of that process
• when you register for, access and use our online services.
   

Please note - for details on our processing of your personal information:

• in connection with the administration and provision of a particular Pru product or service to you, please refer to the applicable Data Protection Notice within any application form or on Pru’s My Data page for that product or service, which includes notices detailing how and why we use your personal information (including any sensitive personal information) in providing your products and services, who we may share it with and your rights around the processing of your personal information
• in the course of you visiting any other M&G website, please refer to the applicable Data Protection Notice and Cookie Policy for the relevant website
• by M&G Advice Partners Limited (M&G Advice), please see M&G Advice’s Client Data Protection Notice.
   

We regularly update our Data Protection Notices. Please check back here and Pru’s My Data page frequently for any updates. Any questions can be directed to privacy.team@mandg.com. For details on how your financial adviser (as opposed to Pru) handles your personal information, please speak to your financial adviser or consult their privacy policy.

We take the privacy and protection of your personal information seriously. 

You may give us your personal information when you use our website or engage with our social media channels/content, when you apply for any of our products or services, when you contact us by phone, post or email or when you register to use our online services.

We collect the following information about you:

• your log-in details for accessing our online services
• any personal information you choose to disclose to us in the course of interacting with us via this website, Pru’s online services or our social media channels (for example, in submitting a query or data subject rights request to us)
• any personal information you choose to disclose to us when you contact us by phone, post, email or on our social media channels – this includes your sensitive personal information (see below)
• your marketing preferences and data relating to your use of our website and accessing our online services - you can find out more from our Cookie Policy

You may also give us personal information when you contract (or intend to contract) with us for any of our products or services – in that context you should also refer to the applicable terms and conditions for that product or service, including the relevant Data Protection Notice within any application form or on Pru’s My Data page for that product or service.

If you don’t provide all of the information we require this may:

• delay or prevent us from meeting our obligations
• delay or prevent us from providing our products and services, or the most appropriate tailored products or services to you.

Other sources of personal information

For any of the purposes set out in this notice, we may also collect personal information about you from third parties and public sources, including:

• your financial adviser
• our Business Partners and Marketing Partners
• data brokers and data suppliers, and similar data-related service providers, such as Experian or Transunion
• publicly available sources (such as the Electoral roll), or other information openly available on the internet (such as social media platforms).

We keep your personal information for a set amount of time

We will hold your personal information for as long as is necessary for the relevant purpose set out in this Data Protection Notice, or as long as is necessary to fulfil our legal and statutory obligations, or for as long as you have signed up to receive (or haven’t opted out of receiving) direct marketing communications from us. It’ll always be in line with our data retention policy. We or our Business Partners may retain personal information about you for statistical purposes (for example, to help us better provide our services). Where information is retained for statistical purposes it will always be anonymised, meaning that you will not be identifiable.

We (Pru), M&G and our Business Partners and Marketing Partners will use the personal information you provide to us, together with other information, for the following purposes:

• ensuring the efficient and secure administration and provision of our products and services (including providing and administering our online services and this website), including to enable us to perform our obligations to you and to provide any relevant services as discussed with you prior to any purchase of a product or service; the personal information you subsequently provide within our online services is managed on a separate platform from this website
• complying with any regulatory or other legal requirements, including responding to complaints and data subject rights requests; “know your customer” (KYC) and Anti-Money Laundering (AML) verification requirements; sanctions compliance; preventing and detecting fraud and financial crime; and co-operating (including by sharing data, where necessary) with the court service, relevant legal, regulatory or government bodies
• complying with our legal obligations and pursuing legitimate interests in relation to pensions dashboards - we will process your personal information to respond to or in connection with requests made via pensions dashboards. This includes securely matching your details with pension records, providing relevant pension information, and working with authorised third parties (such as integrated service providers, third party pension schemes and the UK government’s Money and Pensions Service) to support data accuracy obligations and the secure and efficient operation of the dashboards ecosystem
• improving the products and services we provide, including from gaining insight into how our products or services are used and how they might be improved, such as through use of cookies and similar storage and access technologies (see also our Cookie Policy) or contacting you for comments, views, market research or consumer experience purposes
• carrying out checks using publicly available information or certain third party service providers (for example, credit reference agencies, tracing companies, financial crime prevention agencies or other Business Partners) to help us to check your identity or conduct existence checks (to know if you, any second life for a joint-life annuity or any beneficiary or recipient of a death benefit payable under your annuity are still living as stated, are deceased or have relocated), as well as to prevent fraud, economic crime and money laundering. This may include use of tracing tools and services for checks on your current or previous addresses. Results of these may be recorded for future reference. These checks may also be carried out for a joint policy holder or person(s) that you provide personal information on. Should we ever lose contact with you, we may use these agencies to verify your address to help us get back in touch
• providing assistance and other customer services - like to reply to a question, or tell you that something’s changing
• protecting Prudential UK / M&G's interests and fulfilling the legitimate interests of Prudential UK, M&G or a third party (where this is not outweighed by your data privacy rights)
• performing automated decision-making, profiling (including for targeted advertising – see below) or data analysis, including to build, train and audit Artificial Intelligence models – see below
• sending you any direct marketing communications you opt in to (see below) 
• sending you communications about products or services or other relevant information that may be of interest to you (see below) and making sure any direct marketing communications, including by post and by email, that we send you are appropriate and relevant to you
• working with our Marketing Partners, including social media platforms, to serve you with targeted advertising in relation to our products and services (see below)

• keeping your personal information accurate and up to date on record and carrying out other internal business administration.
   

Direct marketing

Where permitted, we will send you direct marketing communications by email, post, SMS, telephone call and / or push notification.

If you have opted in or told us, whether directly or through your financial adviser, that you would like to receive direct marketing communications, we (Pru), M&G and our Marketing Partners will continue to send you such communications by the methods you have chosen unless you change your mind. 

In addition, we (Pru), M&G and our Marketing Partners may use the personal information you provide to us, together with other information, to send you direct marketing by post, including introductions to products and services from carefully selected third parties.

If you decide to withdraw consent or opt out from any direct marketing communications, it’s easy to let us know as you can either unsubscribe from any emails/text messages we send you or, in relation to non-electronic direct marketing, write to the address shown in the Contact Us section or call us on 0800 000 000. 

Please note that opting out of one method of marketing, such as emails, won’t mean you will be opted out of all marketing. You have the right to object to us using your personal information for direct marketing – see “You’re in control” below.

Email tracking

When we send emails, we may use tracking pixels or similar technologies for purposes such as measuring and better understanding user engagement with our communications, including to help us analyse, improve and tailor future communications. These can enable us to collect information about interactions with an email, such as whether and when it was opened, how many times it was opened, the device used to open it and whether any hyperlinks within the email were clicked. Depending on the type of email and purpose of the technologies, we may collect this information with your consent or where otherwise permitted by law - you have the right to withdraw such consent and / or object to use of your personal information for direct marketing purposes. You may also be able to block or disable the loading of such tracking technologies through your email or device settings.

Call recordings

If you call us or we call you, we will normally record your call with us for training, for security, or to help us check for quality or for monitoring compliance with the Financial Conduct Authority (FCA)’s Consumer Duty requirements. In some instances, we may also record calls where we have a requirement to comply with other legal and regulatory obligations. All calls recorded will be retained in accordance with our retention policies. You may have a right to access your call recordings with us. See the section below ("You're in control") for further information.

Disclosures and transfers

We may share your personal information within M&G and with our Business Partners or Marketing Partners or other third parties for any of the purposes set out in this Data Protection Notice.

As we (Pru), M&G, and some of our Business Partners and Marketing Partners are global companies, we might need to send your personal information to countries that have different data protection laws to the UK or the European Economic Area. These transfers will only be to countries in respect of which the European Commission and, where applicable, the UK Government has issued a data protection ‘adequacy’ decision, or to other countries, such as India or the United States of America, but only where appropriate safeguards have been put in place first. In more limited circumstances, we may also need to rely on a derogation under applicable privacy laws.

If you want to know more about these safeguards – like our use of the European Commission’s or UK’s Standard Contractual Clauses which govern the transfer of information outside of the European Economic Area and UK respectively – further information is available on request from privacy.team@mandg.com.

Notwithstanding the terms of this Data Protection Notice, we may disclose your personal information to third parties:

• in the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets
• if we or substantially all of our assets are acquired by a third party, in which case personal information held by us about Pru policyholders and customers will be one of the transferred assets
• if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or in order to enforce or to protect the rights, property, or safety of Prudential UK / M&G, our service, our users and any third party we interact with to provide the services.
   

Contract / legal obligation

Some of the purposes above are necessary to allow us to perform our contractual obligations to you and to enable us to comply with applicable laws and regulation.

Consent

To the extent that we need your consent to use your personal information for the purposes described above, you explicitly provide your consent by confirming to us or your financial adviser / approving and submitting (or signing and returning to us or your financial adviser) the relevant form or confirmation, as appropriate. You have the right to withdraw your consent in such cases, but doing so may affect our ability to fulfil our contractual obligations or provide our products and services – see below. Consents in relation to storage and access technologies such as cookies are managed via our Cookie Policy.

Legitimate Interests

We may also rely on legitimate interests or other legal bases in using and sharing your personal information for the purposes described above, for example to customise or improve our products and services. We are permitted to use your personal information for activities which we consider necessary for the purposes of our legitimate interests or those of a third party, unless those interests are outweighed by your own interests and rights relating to protection of your personal information. Before relying on legitimate interests, we carefully consider and balance any potential impact on you and your data protection rights. You have the right to object (see below) to processing of your personal information which is based on legitimate interests.

Recognised Legitimate Interests

In some cases, we process your personal data based on recognised legitimate interests, as permitted under UK data protection law. Recognised legitimate interests apply where the law identifies specific purposes that are considered sufficiently important to justify processing personal data without the need to carry out a balancing test involving your data protection rights. We may rely on recognised legitimate interests for the following purposes and only where the processing (such as sharing information within M&G or with relevant authorities or organisations) is necessary and proportionate for those purposes:

• Detection, investigation and prevention of crime, including fraud
• Apprehension or prosecution of offenders
• Safeguarding a vulnerable individual (or group), including protecting them from neglect or physical, mental or emotional harm, or protecting their physical, mental or emotional well-being
• Responding to an emergency
• Sharing personal information to help other organisations perform their public tasks or official functions
• Safeguarding national security, protecting public security or defence reasons
   

Where we rely on recognised legitimate interests, your rights under data protection law still apply (see below), although in some cases they may be limited due to the nature of the processing (for example, where this is necessary for crime prevention or safeguarding).

Use of your sensitive personal information

Depending on the product and/or service you have asked for, we may need to process your sensitive personal information, such as information relating to your health and medical history. We will only collect and use these types of data if the law requires or allows us to do so, such as where we need to process such data to protect someone’s vital interests or for the purposes of a recognised legitimate interest (see above) or substantial public interest (for example, substantial public interests relating to insurance administration or underwriting, or determining eligibility for occupational pension scheme benefits, or safeguarding in respect of a vulnerable person).

If we rely on your explicit consent to process this type of information, we will either obtain such consent directly from you or from your financial adviser.

We may also rely on archiving, research and statistics legal grounds if permitted to do so for research and statistical analysis purposes.

We may process biometric identifiers (for example, a copy of your passport) or personal information relating to criminal convictions, offences, proceedings and investigations. We will do so with your consent, or where the law permits or requires it, such as where it’s necessary to meet our legal or regulatory obligations, recognised legitimate interests (see above) or for a substantial public interest (for example, prevention or detection of fraud or financial crime).

To the extent that we rely on your consent, if you don’t provide such consent, or later withdraw such consent, this may mean we are unable to offer you our full range of products or services, or to provide the products and services which are most appropriate for and tailored to your needs, or that we are unable to provide any products or services to you at all.

Profiling, Automated Decision Making and Artificial Intelligence

We (Pru) and M&G may use may use your personal information to make automated decisions (including profiling) affecting you and to assist with Pru’s legal / regulatory responsibilities and commercial decision making in relation to its products and services. For example: 

• to prevent and detect fraud, money laundering, bribery, corruption, sanctions violations or other financial crime – we automatically process personal information which may result in us deciding not to take forward any business with you or to cease providing services to you or your beneficiaries 
• to calculate quotes / pricing for Pru to provide its products and services, and to support ongoing administration and management of its products and services – we automatically process personal information about Scheme members for profiling, assumptions (for example, mortality risks), assessing longevity risk (for example, how long pension benefits are likely to require to be paid out) and demographic risks (for example, social and economic risks relating to particular age groups, gender groups, postcode areas and marital statuses).
   

To the extent that we conduct such automated decision making activity, we’ll provide you with further information at the appropriate time unless already provided in this notice. 

We may use a variety of technology solutions to process your data, including Artificial Intelligence technologies. These may be used to support provision of our services (such as improvement of pricing / analysis / assessment work or assisting with complaints handling and meeting booking) and may include training Artificial Intelligence models with your data. Your data will be anonymised wherever possible prior to any model training. We will always strive to ensure that any use of Artificial Intelligence includes appropriate human oversight and is compliant with applicable laws and regulations - for more information on AI usage at M&G, please visit: AI usage – M&G plc.

There will usually be human review or oversight, but where we make a decision about you using solely automated processing of your personal information, and that decision has a legal or similarly significant effect on you, you have the right to: 

• receive information about the logic involved in and how the decision may affect you 

• express your views about and challenge any such decision 

• ask for human involvement in relation to any such decision.
   

You can exercise these rights by contacting us using the details set out below. In some circumstances, the law places additional restrictions on our ability to make such decisions, and we will only make such decisions where permitted by law. 

Targeted advertising

We work with our Marketing Partners, including social media platforms like Instagram and Facebook, to help us show relevant advertisements to existing and prospective policyholders and customers. We may therefore use and combine your personal information together with information about other individuals, to help us (and our Marketing Partners who we share this data with) to decide what products, services and marketing may be of interest to you and / or to individuals with similar characteristics to you:

• Custom or matched audience – we may share certain information about you (such as your name and email address or other identifiers, including in hashed or pseudonymised form where appropriate) with our social media platform Marketing Partners so that they can determine if you are a user of their platform and, if so, show you advertisements relating to our products and services
• Lookalike audience - we may ask our social media platform Marketing Partners to identify other users who share similar characteristics to you so that our advertisements can be shown to people who may be interested in our products and services. We do not receive information that directly identifies those individuals unless they choose to interact with us.
   

Depending on the type of data we share with our Marketing Partners for these activities, and how that data was collected, we may seek your consent for these activities where required by law. You can also object at any time to the use of your personal information for direct marketing purposes (see below). If you are a member of Instagram or Facebook then you will also be able to log in, review and adjust how your personal information is used in advertising and cookies/pixels contexts.

Google remarketing services - this website uses the Google Ads remarketing service. We advertise to previous visitors to our website using third party websites including Google. We may advertise to visitors who haven’t completed a task on our site – for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to show ads based on someone’s past visits to the Pru website. Any data collected will be used in accordance with this Data Protection Notice, our Cookie Policy and Google’s privacy policy. With your consent, this website implements Google Analytics Demographics and Interest Reporting so we can monitor the visits to our site. You can set preferences for how Google advertises to you via our Cookie Policy, or using Google’s Control your ad experience - My Ad Center Help page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin. Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, is the data controller for users of Google services based in the United Kingdom.

We and relevant social media platform Marketing Partner entities (such as Google and Meta) may act as joint controllers of your personal information for certain targeted advertising activities. These entities may also act as independent controllers of your personal information for other advertising, analytics, security and platform improvement purposes. You should therefore also review their privacy information to understand how they collect, use and share personal information that we provide to them and that they collect through cookies, pixels and similar technologies that may be deployed on our websites.

Further information on Meta’s use of personal information for custom and lookalike targeted advertising activities is here:

• Meta Privacy Policy - in particular, see the “Partners – Advertisers and Audience Network publishers (if we show you ads)” section
• “How Meta receives information from other businesses and organisations”
• List of Meta companies.
   

Further information on Google Ads services is provided above at “Google remarketing services”.

When it comes to how we use your personal information, you’ve got the right to:

• request a copy of your personal information – see link to our Data Subject Access Request form below
• in certain circumstances request that we move your personal information to another organisation
• request that we correct anything that’s wrong, or complete any incomplete personal information
• ask us to delete your personal information if it is no longer needed for the purposes set out in this Data Protection Notice or if there is no other legal basis for the processing
• limit how we use your personal information or withdraw your consents (including for certain automated decision making) for the processing of your personal information - this does not affect the lawfulness of processing based on consent before its withdrawal
• opt out of direct marketing, and / or object to us using your personal information for direct marketing (including related profiling) or other processing based on legitimate interests or recognised legitimate interests
• complain to us (see below) or to a data protection authority or another independent regulator about how we’re using your personal information.
   

You also have rights in relation to certain automated decision making, which we have explained above.

If you want to do any of these things, or would like an explanation as regards these rights, we’ve explained how you can get in touch in the Contact Us section below. 

Please note that if you wish to exercise your right to obtain a copy of your personal information (also known as a Data Subject Access Request or SAR), please complete this form. You can email the completed form, together with any required supporting documents as noted in the form to privacy.team@mandg.com or by using our secure email by registering for PruMail. Alternatively, you can print the form and send it, together with any required supporting documents, by post to: Privacy Team, Prudential, Lancing, BN15 8GB.

If you are unable to complete or access the form, please email us at privacy.team@mandg.com with details of your request and we will assist you with submitting your Data Subject Access Request.

We may monitor or record calls (as explained above) or any other communications we have with you. This might be for training, for security, or to help us check for quality or for monitoring compliance with the Financial Conduct Authority (FCA)’s Consumer Duty requirements.

Contact us

Write to us at: The Data Protection Officer, Customer Service Centre, Lancing BN15 8GB

Call us on: 0800 000 000, Monday to Friday, 08:00 – 18:00.

We take the privacy and protection of your personal information seriously. To ensure compliance with data protection laws, we

• have an appointed Data Protection Officer (DPO), and
• keep records of complaints for 3 years, in line with regulatory requirement.
   

Contacting the DPO

Write: Customer Service Centre, Prudential, Lancing, BN15 8GB.

Phone: 0800 000 000, Monday to Friday, 08:00 – 18:00.

We will acknowledge the complaint within 30 days and we will handle your complaint in line with applicable laws and regulations.
 

Not satisfied with our response?

If you’ve raised your concerns with our DPO but remain dissatisfied, you can refer your complaint to the Information Commissioner’s Office (ICO) – an independent authority that protects individuals’ information rights. Using this service won’t affect your legal rights. For those falling within EU GDPR’s scope, you are able to make a complaint directly to your relevant supervisory authority without lodging a complaint with us.

ICO - Phone: 0303 123 1113 (or +44 16255 45700 if calling from abroad).

ICO - Online: ico.org.uk

Prudential International Assurance ltd, part of M&G plc, is required by Irish Revenue to report the following information for Common Reporting Standards purposes if, and when, we’re required to under Irish law. Irish Revenue may transfer this information to the government of another jurisdiction under an inter-governmental agreement;

• Reportable Individual Account Holders - name, address, jurisdiction(s) of residence, Tax Identification Number(s), date of birth, account number, account balance/surrender values
• Reportable Entity Account Holders - name, address, jurisdiction(s) of residence, Tax Identification Number(s), account number, account balance/surrender values
• Reportable Controlling Persons of Passive Non-Financial Entities (PNFE's) - name, address, jurisdiction(s) of residence, Tax Identification Number(s) of the PNFE and the name, address, jurisdiction(s) of residence, Tax Identification Number(s), date of birth of each controlling person, the account number, account balance/surrender values.
   

Any transfer of personal information will always be done securely.

For further information in relation to this reporting please visit: www.oecd.org or www.revenue.ie.

In this Data Protection Notice:

Business Partners means your financial adviser, our Appointed Representatives, service providers, accountants, auditors, IT service and platform providers, intermediaries, reinsurers, retrocessionaires, investment managers, agents, pension trustees (and other stakeholders), scheme advisers, introducers, selected third party financial and insurance product providers, and our legal advisers.

M&G means any affiliates of Prudential UK, including but not limited to Prudential International Assurance plc, PGDS (UK ONE) Limited, M&G Global Services Private Limited, M&G Investment Group (a list of entities that form this group is available or on request by contacting us on the details above), and Prudential Corporate Pensions Trustee Limited).

Marketing Partners means our service providers, including advertising and media service providers such as LinkedIn (LinkedIn Ireland Unlimited Company), Meta entities (including WhatsApp, Facebook and Instagram), Alphabet Inc / Google LLC and its affiliated services (including YouTube, Google Ads and Google Analytics), intermediaries, pension trustees (and other stakeholders), scheme advisors, introducers and selected third party financial and insurance product providers.

Prudential UK means The Prudential Assurance Company Limited, Prudential Distribution Limited, Prudential Life Time Mortgages Limited, Prudential Pensions Limited, and M&G Advice Partners Limited as appropriate.

Version: August 2026