Skip to main content

Privacy Policy

1. Introduction

At Menna Limited, we value your privacy. We want to be accountable and fair to you and transparent about how we collect and use your personal data.

This policy explains how we collect, use, store and protect your personal information. It applies only to the personal data that we collect in relation to our services only.

Any changes we make to this policy will be posted on this page and we will notify you by email if there are any significant changes.

2. Who We Are

We are Menna Limited. Menna owns and operates the small business finance assistant website, www.menna.ai. We provide a range of services to help you better understand and improve your financial situation and also provide a range of credit products.

Menna Limited is incorporated in England and Wales with registered number 15078639 whose registered office is at Menna Ltd, Spark, Maindy Road, Cardiff, Wales, CF24 4HQ.

For any questions or concerns regarding this policy, you can contact our Data Protection Officer (DPO) at:

  • Email: [email protected]
  • Address: Menna Ltd, Spark, Maindy Road, Cardiff, Wales, CF24 4HQ

3. The Information We Collect

We collect and process personal data when you interact with us. 

  • Personal Identifiable Information: any information you provide when you sign up to or use our services such as name, address, email, phone number and date of birth.
  • Financial Information: Information you provide about your income, bank account details, payment history and financial status.
  • Identification Information: Copies of identity documents (e.g., passport, driving licence) that you submit.
  • Transaction Information: Account activity, transaction history and credit applications.
  • Credit Information: Credit history,  obtained from credit reference agencies including Equifax.
  • Open Banking Data: Bank transaction data obtained via our open banking provider, Friendly Score UK Ltd.
  • Technical and Behavioural Data: details of your visits to the website including the actual pages you visit, your device, IP address (from which we may derive your location) and interactions with messages and features. 

It’s vital that you keep your information accurate and up to date, because inaccurate personal data will produce inaccurate results. You can update your information on the Menna.ai website.

4. How We Collect Your Information

We collect your information in the following ways:

  • Directly from you: When you apply for our services, open an account or interact with our website or support teams.
  • Credit Reference Agencies: We ask Equifax for your updated credit report data and credit score data at least every month for as long as you have a live Menna account. We reserve the right to suspend these monthly searches if your account is deemed as inactive.
  • Open Banking: If you connect your bank account via our platform, we collect financial transaction data via Friendly Score UK Ltd with your explicit consent.
  • Third Parties: From lenders and financial institutions in relation to your applications and transactions.

5. How We Use Your Information

Your personal data is used for the following purposes:

    • Providing our services: Managing your account, processing transactions and fulfilling contractual obligations.
    • Credit assessments: Sharing your information with Equifax to assess your creditworthiness.
  • Affordability assessments: Sharing your information with our open banking provider, Friendly Score UK Ltd, to analyse your bank transaction data to assess affordability and forecast cash flow. 
  • Connecting with lenders: Passing information to a panel of lenders to identify suitable offers.
  • Compliance and legal obligations: Meeting FCA and UK regulatory requirements, such as anti-money laundering.
  • Service improvements: Analysing customer behaviour to enhance our services.

6. How We Share Your Information

We only share your information when necessary and with the following parties:

  • Open Banking Provider: Bank transaction data shared with Friendly Score UK Ltd upon consent.
  • Credit Reference Agency: Data shared with Equifax for credit assessments.
  • Lenders: Personal data passed to a panel of lenders for loan or credit offers.
  • Regulatory bodies: Information shared with the FCA or other regulatory bodies to comply with UK law.
  • Third-party service providers: Data may be shared with IT hosting, cloud storage and fraud prevention providers, who act as data processors under strict contracts.

7. How We Protect Your Information

We take appropriate technical and organisational measures to protect your data:

  • Encryption: Sensitive data is encrypted both in transit and at rest.
  • Access Controls: All your data is stored on secure servers. Firewalls block unauthorised traffic to the servers. Access to your data is restricted to authorised personnel for legitimate purposes.
  • Audits: We conduct regular security audits to ensure compliance and data protection.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Typically, data is retained for no longer than six years after account closure or service termination.

9. Your Rights

Under the UK GDPR, you have the following rights:

  • Right to access: Request a copy of your personal data.
  • Right to rectification: Ask us to correct any inaccurate data.
  • Right to erasure: Request deletion of your data in certain circumstances.
  • Right to restrict processing: Request that we limit the processing of your data.
  • Right to data portability: Request that your data be transferred to another service provider.
  • Right to object: Object to specific types of data processing, such as direct marketing.
  • Right to withdraw consent: Withdraw consent at any time if you have previously given it.

To exercise any of these rights, contact us at [email protected].

10. Third-Party Links

Our website or services may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites and we recommend reviewing their privacy policies.

11. Cookies

Cookies are small text files stored on your device when you visit a website. They help the site recognise your device and remember certain information about your visit. 

We use the following types of cookies:

  • Strictly Necessary Cookies: Essential for website functionality, enabling services like account access and navigation.
  • Performance & Analytics Cookies: Help us understand how users interact with our website to improve performance. These cookies collect anonymised data and require your consent.
  • Functionality Cookies: Remember your preferences (e.g., language, region) to provide a better user experience.
  • Targeting/Advertising Cookies: Track your activity across websites to provide relevant advertisements and limit their frequency.

We use cookies to:

  • Ensure the website functions properly.
  • Personalise your experience.
  • Analyse website performance.
  • Offer relevant marketing, where consent is provided.

Some of the cookies we use are ‘third party cookies’ meaning that third parties will have access to the information in those cookies. We recommend reviewing their cookie policies.

You can control and manage your cookie preferences through our cookie consent banner or your browser settings. However, disabling some cookies may affect website functionality. We will seek your consent for non-essential cookies in accordance with UK GDPR and ICO guidance. You may change your preferences at any time through our website.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect legal and regulatory changes. The latest version will always be available on our website and we will notify you of significant changes by email or other means.

Contact Us

If you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer:

Address: DPO, Menna Ltd, Spark, Maindy Road, Cardiff, Wales, CF24 4HQ