Privacy Policy

This notice outlines: 

  • how we will use your personal information 
  • how and when we share your information 
  • how you can exercise your rights when it comes to your information 
 
Who collects and uses your information?

  • Dot Zinc Limited (Money) – ICO reference Z6245956
  • Inspop.com Limited (Confused) – ICO reference Z5612229
  • Life’s Great Limited (Mojo Mortgages) – ICO reference Z1210382
  • Tempcover Limited – ICO reference ZA178918
  • Uswitch Limited – ICO reference Z5676996
  • ZPG Limited – ICO reference ZA179280

Our companies are registered as data controllers with the Information Commissioner’s Office as set out above. At times we act as joint controllers of your information as our People Team is a central group function.
 
What information do we collect and hold?

The information we may collect (directly from you or from third parties) and store includes: 

  • your name, signature, photo, citizenship, passport/visa, drivers’ licence, national insurance number, and other government identifiers
  • date and place of birth, emergency contact, and gender
  • contact details, including your home address, telephone number, and personal email address
  • job you have applied for, working time information, work location, start date, job history, education history and qualifications, performance, grievance and disciplinary records, and reasons for leaving previous employment
  • your salary, any bonus entitlement, benefits, shares, pension plans, tax codes, bank account details, and details of any beneficiaries for benefits
  • details of your visits to our website including but not limited to location and device data
  • our communications with you as you go through the onboarding process

We also process the following sensitive information:

  • information on disability, for the purposes of making reasonable adjustments at your workplace
  • screening records – we carry out pre-employment screening, including criminal background checks, employment and credit reference checks, right-to-work, and adverse media checks
  • race, ethnicity, religion, including information on your passport or other citizenship and right-to-work documentation
  • information you’ve voluntarily provided us for the purposes of equal opportunities and diversity initiatives
  • sexual orientation, marital status, and information on your marriage or civil partnership certificate, in case we need to update your name.
 
How do we use your information?

We collect and use your information for several purposes, including:  

  • determining your suitability for a role, inviting you for interview and carrying out any pre-employment checks
  • drafting and entering into an employment contract with you
  • providing compensation, including payroll, expenses and other applicable incentives
  • calculating and paying any taxes, student loans and other government contributions, plus managing any attachment of earnings orders, e.g. for child maintenance arrangements
  • providing applicable benefits, shares and other work-related allowances, including reporting of benefit entitlements and take-up of benefits
  • producing and maintaining organisational charts
  • carrying out workforce planning
  • administering mandatory training, providing IT systems and support to enable you and others to perform your work, to enable our business to operate and to enable us to identify and resolve IT issues and to keep our systems secure
  • complying with applicable laws, regulatory (including Financial Conduct Authority (FCA) and employment related requirements, including health and safety, employment and immigration laws and sanction laws
  • communication with you or your designated contacts in case of an emergency
  • to analyse and measure candidate suitability data with AI tools 
 
Why do we use your information? 

We use your information lawfully for the purposes we’ve outlined above, where one of the following applies: 

For non-sensitive information, our legal bases are:

  • entering into, and performance of, the contract of employment with you
  • compliance with legal obligation, especially employment law, social security law, tax law, and corporate compliance laws
  • the legitimate interests of companies or other third parties (such as existing or potential business partners, suppliers, customers, end-customers, or governmental bodies and/or courts)
  • your consent

For sensitive information, our legal bases are:

  • to carry out the obligations and to exercise the specific rights of our companies or you in the field of employment and social security law as permitted
  • to protect the vital interests of you or another individual where you’re physically or legally incapable of giving consent
  • to establish, exercise, or defend a legal claim, or whenever courts are acting in their judicial capacity
  • for the assessment of the working capacity of the employee, as permitted by data protection law
  • your explicit consent
  • the prevention and detection of unlawful acts

We need to process your personal information to consider your application for vacant roles and to potentially enter into a contract of employment with you. There are also statutory and other contractual requirements we’re required to comply with in relation to your prospective employment, as well as business and operational needs we must meet.

If we’re not able to carry out the processing activities we describe in this notice, we may not be able to consider your application for employment, or proceed with an employment contract. Once employed, please refer to our Employee Privacy Notice to understand how we collect, process and store the data of our employees.
 
Who may we share your information with? 

We may transfer personal information to third parties, including outside the UK, for processing purposes such as:

  • communications with third parties – as necessary to fulfil our business operations. We may transfer work contact details to existing or potential business partners, suppliers, customers, government officials, and other third parties.
  • regulators, authorities, and other third parties. We may transfer personal information to regulators, courts, and other authorities (tax and law enforcement authorities), independent external advisors (for example, auditors), insurance providers, pensions and benefits providers, and investigations teams (both internal and external).
  • acquiring entities. If the business may be sold or transferred in whole or in part (or if we contemplate a sale), we may transfer your personal information to the new employer or potential new employer as part of the transfer itself, or as part of an initial review for such transfer (for example, due diligence). This is subject to any rights provided by applicable law, including jurisdictions where the new employer or potential new employer are located.
  • data processors. To only process personal information in line with our written contract. The data processors may be involved in workforce administration, IT system support, payroll and compensation, training, compliance, and other activities.
 
We use Pinpoint, an online software product provided by The Infuse Group Limited (t/a Pinpoint Software), to assist with our recruitment process. We use them to process personal information as a data processor on our behalf. Pinpoint is only entitled to process your personal data in accordance with our instructions.

Pinpoint provides us with the facility to link the data you provide to us with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles. 

Pinpoint’s technology enables us to search various databases, which may include your personal information, to find possible candidates to fill our job openings. Where we find you in this way we will obtain your personal information from these sources.

Where do we keep your information?

We store your information in the UK where possible. In some circumstances, your information may be located elsewhere, which may include a country that does not have the same level of data protection as the UK. We’ll always take measures to ensure we’re protecting your information as required by law.
 
How long do we keep your information for?

We only keep your personal information for as long as necessary. We may, for example, keep your personal information for a reasonable time after you’ve ended your employment to ensure we have the records we need in the event of a dispute or regulatory investigation. Or, to comply with any ongoing contractual obligations.

We also may need to keep personal information to comply with requests from regulators. In the event that we keep your personal information, that period will be determined by applicable law.

Our records retention standard states that for job candidates, we retain personal information for no more than 24 months after we’ve informed the candidate they have been unsuccessful, or have not accepted an offer of employment.

If you interact with the Pinpoint software within that 24 months, we may extend the retention period for another 12 months.



Your rights
 
You have rights when it comes to your personal information, and there are several requests you can make to exercise these rights.

Right to be informed: where you have given us your data, you may ask us, for example, about the type of information we hold; how we process your data, including who we have shared it with and how long we will keep your data for.

Right to withdraw consent: where you have given us consent to use your data, you may withdraw this at any time. For instance, you can use our cookie preference centre to reject non-essential cookies; or where you have provided us health data, enabling us to treat our vulnerable customers fairly, you can withdraw your consent for us to store this data.

Right to erasure: you can ask us to delete the data we have about you. We must comply with this request, unless retaining your data is necessary, for example:
to comply with a legal, regulatory, or contractual obligation which requires the use or retention of your data under UK law; or to exercise or defend legal claims.

Right to rectify: although we make efforts to keep it correct, based on the latest data available to us, you can ask us to amend data that is incorrect or is not complete.
Right to restrict data processing: in some situations, you can ask us to limit the use of your data. For example, if your data is due to be erased from our records as the retention period has expired, you may ask us to retain a copy of that data for a period of time - this may be relevant if you have commenced legal proceedings.

Right to portability: you can ask us to share data you provided to us directly with you or with another company - currently there are no examples of when this might be relevant but we will keep this under review.

Right to object: you can object to our use of your data, when we use it based on our legitimate interests or those of a third-party. If this happens, we will not use your data, unless we can show legitimate reasons and an overriding interest for its use, or for the exercise or defence of legal claims.  You can unsubscribe from emails by clicking ‘Unsubscribe’ in any marketing email you have received; can switch off ‘push’ notifications on your mobile device by going into your settings; and ‘stop’ SMS messages by following the instructions in the message you have received.  To object to profiling or opt-out of renewal reminders, you can contact our Privacy Team using the details below.

Right to object to automated decision-making: In relation to mortgages and some other financial products, we perform automated checks to quickly establish whether we, or selected partners, are best placed to help with your needs. We may look at your property details, product availability and any other information you have provided to make this decision. You have the right to human involvement and to potentially override any automated decisions. Our partners may also make automated decisions and when this happens, you will need to exercise your right to human involvement directly with them.

Right of access: you may ask us to give you a copy of the data that we hold about you. We will give you a copy of your data if you request it, once we have checked your identity (ID checks will vary based on the data we hold about you).

Right to human intervention: You have the right not to be subject to a decision that's based solely on automated processing, if the decision affects your legal rights (for example, if we automatically reject your application for employment).  

Right to withdraw your consent: Where we’re relying on your consent to process any of your information, you have the right to withdraw that consent at any time.  
 
Exercising your rights:  If you want to use one of your personal data rights, please complete the form in our secure portal, or write to us at the address below:

Address: Privacy Team, RVU Services Ltd, The Cooperage, 5 Copper Row, London, SE1 2LH.


Complaints 

You have a right to make a complaint at any time to the Information Commission’s Office (IC), the UK regulator for data protection issues.


We would, however, appreciate the chance for our Privacy Team to deal with a complaint from you in the first instance. You can either respond to this communication to make your complaint or complete the form on our portal.



Updated 04 February 2026