Muniy Ltd (Company number 11191944) (Muniy, we, us or our) provides the products and services offered on the Muniy website and/or mobile application www.muniy.com (Platform). We are registered with the Information Commissioner (No. ZA522292).‍ For the purposes of the Data Protection Act 2018 and General Data Protection Regulation (EU) 2016/679 as amended from time to time (“DPA”), we are the data controller of any data we hold that may be used to identify you ("personal data”).‍ We have adopted this policy to ensure that we have standards in place to protect the data that we collect about you that is necessary and incidental to:providing the products and services that we offer; andthe normal day-to-day operations of our business.Together with the Muniy Terms & Conditions and this Privacy Policy it forms part of our agreement with you and determine our responsibilities under the DPA.‍ Capitalised terms not otherwise defined in this Privacy Policy shall have the meaning given to them where they first appear, or in the Service Terms of which this Privacy Policy forms part, or the DPA.‍If, at any time, you provide data or other information about someone other than yourself, you warrant that you have that person’s consent to provide such information for the purpose specified.‍Muniy is not available to children (persons under the age of 18 years).

The personal data that we hold will be stored in the European Economic Area (EEA), but may be transferred to, and stored at, a destination outside the EEA, with and by third parties.Data may also be processed by third parties and/or staff operating outside the EEA who work for us or for one of our third party partners. Such staff may be engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.Your personal data will be stored for the duration of the Service Terms and for such time thereafter as required by Applicable Law or the limitation period for bringing contractual claims under or in relation to the Service Terms.

We may collect and process the personal data specified in Annex A to this Privacy Policy, for the purpose and on the legal basis specified in that Annex.We only collect personal data relevant to your use of the Platform and the administration and enforcement of the Service Terms.

The table in Annex B to this Privacy Policy explains your rights under the DPA and how to exercise them. This Privacy Policy provides confirmation of the details required in relation to your right of access.

We only disclose personal data to Third Party Service Providers for the purposes explained in Annex A to this Policy. Third Party Service Providers will only use your information to help provide the Platform, they will not market to you.‍In order to access the Platform, you may be required to accept additional privacy policies which are specific to third parties whose services you uses (such as an internet service providers).‍We may share your information with third-party service providers in connection with the provision of the Platform (Third Party Service Providers) and related services to you, and otherwise operating our business, marketing and promoting our products and services. We may link your account with a Third Party Service Provider to the Platform to enable certain functionality, which allows us to obtain information from those accounts.‍You may choose to access the Platform third parties (such as your accountant) (Third Party Systems). In order to engage with such Third Party Systems, you may be required to accept additional privacy policies which are specific to those Third Party Systems. If you sign-up to Muniy through a Third Party System we may share such information and for such purposes as explained in Annex A to this Policy. We may also share anonymous aggregate information about you with Third Party Systems to allow them to provide targeted information to you through the Platform.‍The Platform may contain links to other websites and third party services. When linking your account with third parties, you must read the privacy policies of such providers, so that you can understand the manner in which they will handle your personal data. The information we may obtain from those services often depends on their privacy policies or account settings. Please be aware that we shall not be held responsible for the privacy policies of such other sites and services. Please read the privacy policies or statements of each and every site or service that collects your personal data.‍These service providers may be located or have facilities that are located a different jurisdiction (including outside the EEA), in which case your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As required by applicable law, we will check your identity and other personal details together with a KYC partner. If you give false or inaccurate information and we identify fraud, this will be recorded and shared with the partner, so that we and other organisations, including law enforcement agencies and debt collection agencies, may access, use and search these records to (1) help make decisions about credit and credit related services, for you and members of your household, (2) help make decisions on motor, household, credit, life and other insurance proposals and insurance claims, for you and members of your household, (3) trace debtors, recover debt, prevent fraud, and to manage your accounts or insurance policies, (4) prevent fraud and money laundering, for example, when (4a) Checking details on applications for credit and credit related or other facilities, (4b) Managing credit and credit related accounts or facilities, (4c) Checking details on proposals and claims for all types of insurance, (4d) and checking details of job applicants and employees.

We will take all reasonable precautions to protect your personal data from unauthorised and unlawful access and processing, as well as accidental loss, destruction or damage. This includes appropriately securing our physical facilities and electronic networks.‍The security of online transactions and the security of communications sent by electronic means or by post cannot be guaranteed. When you provide information to us via the internet or by post, you do so at your own risk. We cannot accept responsibility for misuse or loss of, or unauthorised access to, data, where the security of information is not within our control.‍Privacy or security practices of any third party (including third parties that we are permitted to disclose your data to in accordance with this policy or any applicable laws) may be subject to separate privacy and security policies than that of Muniy's.‍If you suspect any misuse or loss of, or unauthorised access to, your data, you should let us know immediately.‍We are not liable for any loss, damage or claim arising out of another person’s use of the data where we were authorised to provide that person with the data.

You have the right to object to (1) processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling), (2) direct marketing, (3) processing for purposes of scientific/historical research and statistic sunless we hold compelling legitimate grounds for processing or the processing is for the establishment, exercise or defence of legal claims.You have the right to lodge a complaint with the Information Commissioner or other competent supervisory authority if you consider that the processing of your data infringes the DPA.‍ If you lodge a dispute regarding your data, we both must first attempt to resolve the issue directly between us.‍If we become aware of any unauthorised access to your data which is likely to result in a high risk for the rights and freedoms of the data subjects, we will inform you without undue delay after becoming aware of it, once we have established what was accessed and how it was accessed.

We reserve the right to modify this policy at any time on the same conditions as we may vary our Service Terms. If we decide to change this policy, we will post the changes on our Platform at www.muniy.com/privacy-policy. It is your responsibility to refer back to this policy to review any amendments. Changes and clarifications will take effect immediately upon their posting on the Platform. If we make material changes to this policy, we will notify you here that it has been updated.

(a) Information that you provide by filling in forms on the platform. This includes information provided at the time of registering to use the platform, posting material or requesting further services. We may also ask you for information when you report a problem with the Platform(b) Your contact details, including residential and business address(es), your email address, home address, mobile and/or landline telephone numbers(c) Records of any correspondence between you and Muniy(d) Details of transactions you carry out through the Platform, information about payments you make and receive such as the date, amount, currency and details of payer/payee(e) Details of your visits to the Platform and the resources that you access(f) Pixel tags and web beacons(g) information you post about us, or communicate to us, on a social media service

(1) To manage and administer the Platform(2) To enable you to use the Platform(3) To communicate with you about the Platform, your relationship with us(4) To investigate complaints, deal with enquiries, complaints and feedback from you(5) To give you any notices under the Service Terms(6) To keep you informed about payments you initiate or information that you allow access to via the Platform(7) To update Muniy's records(8) To identify, prevent, detect or tackle fraud, money laundering and other crime(9) To carry out checks required by applicable regulation or regulatory guidance(10) To carry out our obligations arising from and exercise our rights under, any agreements between you and us, including tracing and recovering payments and debts(11) To enable us to send email messages in a format customers can read and to show if email has been read(12) To check any instructions given to us, for training purposes, for crime prevention and to improve the quality of our customer service(13) To disclose to third parties(14) In the course of using cloud services (Amazon Web Services)(15) Information that may be required to communicate with you (such as Gmail from Google, Inc)(16) In relation to the provision of a cross-border payment solution(17) When entering into such contracts with third parties, we take all reasonable precautions to ensure that their privacy policy abides by the same principles held in this policy. When you click on links to third-party websites, we may link your account with a third party to our services to enable certain functionality, which allows us to obtain information from those accounts. If it is under a duty to disclose or share your personal data in order to comply with any legal obligation(1) To enforce this Privacy Policy or the Service Terms(2) To a credit reference agency to check your identity and to prevent fraud, (it will also keep a record of your request and use it whenever anyone applies to be authenticated in your name)(3) To Third Party Service Providers, agents and subcontractors, acting for us, to use for the purpose of operating the Platform(4) To anti-fraud agencies, for the purpose of preventing and detecting fraud(5) To debt collectors and other third parties to trace you and recover any debt(6) In the event that Muniy sells any business or assets, in which case it may disclose your personal data to the prospective seller or buyer of such business or assets(7) To protect the rights, property, or safety of it, its customers, or others (which includes exchanging information with other companies and organisations for the purposes of fraud protection)(8) To investigate, prevent or detect fraud or carry out checks against money laundering;For audit purposes and to meet obligations to any relevant regulatory authority or taxing authority.

The processing is necessary for (1) the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract(2) compliance with a legal obligation to which we are subject (3) the purposes of the legitimate interests pursued by us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.

Right of Access:To obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the personal data are not collected from you, any available information as to their source; (h) the existence of automated decision-making, including profiling, referred to in Article 22(1) of the GDPR and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.How to Exercise:This Privacy Policy provides confirmation of the details required in relation to your right of access.Under the DPA, you have a right to access certain personal records that Muniy holds about you. Any access request may be subject to a fee to meet Muniy's costs in providing you with details of the information they hold about you if the request is unfounded or excessive.Right to rectification:to obtain from us without undue delay the rectification of inaccurate personal data concerning you.We must communicate to each recipient to whom the rectified personal data have been disclosed, unless this proves impossible or involves disproportionate effort.We shall inform you about those recipients if you request it.

Processing is necessary for(a) compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; or(b) the establishment, exercise or defence of legal claims.