M&G Investments Privacy Policy
Last updated: September 2026
This policy describes how M&G Investments and other entities within the M&G Investment Group (also referred to as "M&G Investments", "we" or "us") will process your personal data when you use our websites and interact with us.
It also describes your data protection rights, including the right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Your Rights and how to exercise them” section.
Please refer to any applicable supplemental data protection information below, which may provide further details relevant to you. California residents can access our Notice at Collection here.
Please note - for details on our processing of your personal data:
- In connection with your use of the myM&G or M&G ‘My Account’ online services, please see the relevant Privacy Policy for those services
- In connection with a particular M&G Investments (including M&G Securities Limited) product, service or investment, or our processing of personal data relating to individuals on whose behalf you act in connection with that product, service or investment, please refer to the Data Protection Notice contained within the applicable application form or terms of business for that product, service or investment
- In connection with the administration of your registration to attend our events, and in the course of your attendance at and any follow-up in relation to such events, please refer to the relevant Privacy Policy relating to that event
- In the course of you visiting any other website, including other M&G Investments websites, please refer to the applicable privacy and cookie policies for those websites - other sites linking to or from this website will have their own privacy policies and we are not responsible for the privacy practices of other organisations.
What personal data we collect from you
We collect the following personal data about you through your use of our websites and interactions with us:
Category | Details |
|---|---|
Contact Data | Your name and your business contact details (professional email address, postal address, telephone number)
|
Professional Data | Your job title, department, areas of responsibility and professional interests, and (if relevant) the charitable body, private investor, corporate entity, or other person or institution you represent for investment purposes, and/or to whom you provide financial advisory services. |
Marketing Preferences | Your direct marketing preferences (see below for further details) including any consents you have given us |
Marketing Data | Interactions with our marketing activities, events, products and services |
Submitted Data | Any personal data about you which you choose to submit to us, including in relation to enquiries, complaints, requests or comments submitted to us by phone, post, email, text message or via our websites (e.g. in free text boxes) and engagement with our social media channels and content
|
Financial Data
| Financial information (such as information relating to your investment preferences, portfolio size, or budget) which you may provide through interactions with our marketing activities, such as online or event surveys, or other engagement activities |
Device Data | Information related to the browser or device you use to access our website and communications, including general location data inferred from your IP address.
This information is collected via, cookies and other tracking technologies, including pixels, which we use on our websites and in our communications. Please read our Cookie Policy for further detail.
|
Social Media Data | Data relating to your use of social media channels (for example, information provided to us by LinkedIn about your interactions with our LinkedIn channels and content). |
Sometimes, we receive personal data about you from third parties, including our business partners and marketing partners (for example, LinkedIn) and from publicly available sources (such as your business website and social media channels). The categories of personal data we may receive from these sources include Contact Data, Professional Data, Marketing Data and Social Media Data. The provision of all personal data is optional; however, if you choose not to provide it, we may not be able to respond to your enquiries, provide you with certain services, or tailor our communications and services to your needs.
How and why we use your personal data
We use your personal data for the purposes and legal bases set out below:
| Purpose | Category of Data | Legal Basis |
|---|---|---|
To respond to your enquiries, complaints or comments submitted to us by phone, post, email, text message, social media or via our websites (e.g. in free text boxes). | Contact Data Professional Data Submitted Data | We have a legitimate interest in responding to and managing enquiries, complaints and comments received to provide effective customer service and maintain our business relationships. |
To inform you about investment products and related services of M&G Investments by post, SMS, push notification, email and telephone calls. | Contact Data Professional Data Marketing Preferences Marketing Data | We have a legitimate interest in promoting our services to our clients. Your consent where required by law. You can update your direct marketing preferences at any time by following the instructions in the marketing communication itself, by accessing your online account or by contacting the Data Protection Office (see below). |
Provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on the website and other sites or apps or social media platforms (including measuring the effectiveness of our advertising campaigns).
More information is provided below in the “supplementary data protection information: targeted advertising” section.
| Contact Data Marketing Preferences Marketing Data Device Data Social Media Data | Your consent. Otherwise, we have a legitimate interest in promoting our services to our clients. |
To record your calls with us for security, quality service control and training purposes, and to comply with our legal and regulatory obligations in relation to call recording (e.g. under MiFID II and related UK laws and regulations), and where permitted to use artificial intelligence to review call transcripts for insights, direct marketing purposes and to improve efficiency.
| Contact Data Submitted Data | When the call relates to investment activity and we have a legal obligation under EU/UK laws: We process your data to comply with applicable law and regulations. When we do not have a legal obligation under EU/UK laws: We have a legitimate interest in recording calls for security, quality service control and training purposes. Otherwise, we rely on your consent where required by law. |
To securely and efficiently manage and administer our business, and for client management and business development purposes, including to keep your information accurate and up to date | Contact Data Professional Data Submitted Data Device Data | We have a legitimate interest in managing and administering our business, including for client management and business development purposes. |
To gain insight into how our products/services are used and how they might be improved such as through use of storage and access technologies like cookies. | Device Data Marketing Data | We have a legitimate interest in understanding how our products and services are used and in improving them. Your consent where required by law (e.g. for the use of non-essential cookies and similar technologies). |
To protect M&G Investments’ business interests and legal rights and the interests and legal rights of our customers. | All relevant data | We have a legitimate interest in protecting M&G Investments’ business interests and legal rights, and the interests and legal rights of our users. UK only: where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on our recognised legitimate interests. |
To prevent, detect and investigate fraud, theft and other financial crimes, to establish, exercise and/or defend legal claims, and to protect our business against other criminal activity, including by sharing data, where necessary, with the court service, our regulators, tax authorities and law enforcement agencies. | All relevant data | When we have a legal obligation under EU/UK laws: We process your data to comply with applicable law and regulations. When we have a legal obligation under laws outside the EU/UK: We have a legitimate interest in protecting our business interests and legal rights, and the interests and legal rights of our users. UK only: where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on our recognised legitimate interests. |
Email tracking
When we send emails, we may use tracking pixels or similar technologies for purposes such as measuring and better understanding user engagement with our communications, including to help us analyse, improve and tailor future communications. These can enable us to collect information about interactions with an email, such as whether and when it was opened, how many times it was opened, the device used to open it and whether any hyperlinks within the email were clicked. Depending on the type of email and purpose of the technologies, we may collect this information with your consent or where otherwise permitted by law - you may have the right to withdraw such consent and / or object to use of your personal data for direct marketing purposes. You may also be able to block or disable the loading of such tracking technologies through your email or device settings. See Supplementary Information below in relation to users who are based in particular countries.
Targeted advertising
Please see Supplementary Information below in relation to our targeted advertising activities.
Legitimate Interests
There are instances where we have a legitimate interest to use your personal data. Our legitimate interest will vary depending on what we are using your personal data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Before relying on legitimate interests, we carefully consider and balance any potential impact on you and your data protection rights. In the UK, we do not need to conduct a balancing test if we process personal data for a “recognised legitimate interest”. You can obtain more information about this balancing test by using the contact details at the end of this policy.
Use of artificial intelligence
We may use a variety of technology solutions to process your personal data, including Artificial Intelligence technology. These may be used to support provision of our Services (such as reviewing correspondence, appointments and call transcripts for insights, direct marketing purposes and to improve efficiency) and may include training Artificial Intelligence models with your personal data. Your data will be de-identified or anonymised wherever possible prior to any model training. Any use of Artificial Intelligence includes appropriate human oversight and is compliant with applicable laws and regulations.
For more information on AI usage at M&G Investments and your rights:
- Please visit: AI usage – M&G plc
- See “Object to processing (Right to Object)” below regarding your rights to object for this type of use of your personal data.
Sharing your personal data
We may share your personal data with the following categories of recipients:
Category of Recipient | Why? |
|---|---|
Companies within the M&G plc Group | To manage our relationship with you and to provide our products and services.
|
Service providers | To perform functions on our behalf, including website hosting and maintenance, customer service operations, sending postal mail and e-mail, IT and technology support, fraud prevention and detection, and supporting the administration of our products and services. |
Tax, government and/or regulatory authorities and legal, tax and other professional advisors, and auditors | To comply with our legal and regulatory obligations, to protect our legitimate interests or the interests of others, and to obtain professional advice in connection with the management and administration of our business, in each case in compliance with applicable laws.
|
Credit reference agencies, law enforcement and fraud prevention agencies, prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims | To prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law. In the UK, this is a recognised legitimate interest when we do this to prevent, detect, or investigate a crime. |
Prospective Buyer/Seller | To facilitate any restructuring, sale or integration of our business or assets, including disclosure of your details to our advisers and any prospective purchaser’s adviser, and transfer of your details to the new owners of the business.
|
Marketing Partners | To carry out targeted advertising activities. See Supplementary Information below in relation to targeted advertising. |
Transfers of your personal data outside of your jurisdiction
Your personal data may be transferred outside of the jurisdiction you are in from time to time to members or businesses within the M&G plc group (including in India), trusted service providers and other third parties for any of the purposes set out in this Privacy Policy. If appropriate, we may also need to pass on your personal data to financial crime prevention agencies and any legal, tax, regulatory or government bodies.
In some instances, we may need to send your personal data to countries that have different data protection laws than in your jurisdiction. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries. In more limited circumstances, we may also need to rely on a derogation under applicable privacy laws (including your consent where applicable).
If you want to know more about these safeguards – like our use of the European Commission’s or UK’s Standard Contractual Clauses which govern the transfer of information outside of the European Economic Area and UK respectively – further information is available on request from privacy.team@mandg.com.
Retaining your personal data
We generally store the personal data that we collect in electronic databases, some of which may be hosted or managed on our behalf by third party service providers. Sometimes we also keep hard copy records of this personal data in physical storage facilities. We use a range of physical and technical security processes and procedures to protect the confidentiality and security of the data that we hold, and we update these from time to time to address new and emerging security threats.
We will retain your personal data for as long as is necessary for the purposes described above.
We keep personal data for as long as it is required by us for the relevant purpose (such as to perform our contractual obligations, or for as long as you have signed up to receive, or not opted out of receiving, direct marketing communications from us), or where longer to meet our legal or regulatory obligations, or for evidentiary purposes.
We may use personal data about you to produce statistical information about our services, which we then use for tracking and service improvement purposes. This statistical information will be anonymised/de-identified, meaning that you will not be identifiable, and may be retained after your personal data is deleted.
Your rights and how to exercise them
You also have certain rights relating to the personal data we hold about you which are outlined below, they may be subject to various exceptions and limitations. For example if fulfilling your request would reveal personal data about another person, or if you ask us to delete personal data which we are required by law or have compelling legitimate interests to keep. You can exercise these rights at any time by contacting us (see details below). We may need to validate your identity to fulfil your request.
Your available rights may vary depending on your jurisdiction and may include the following. Please refer to the jurisdiction-specific supplemental data protection information below, which may set out additional or different rights applicable to you.
Request access to the personal data we hold about you (Data Subject Access Request / DSAR) | You may request access to a copy of the personal data we hold about you. We can refuse to provide personal data where permitted or required to do so by law, for example where access may reveal another person’s personal data or would otherwise negatively impact another person's rights. |
Object to processing (Right to Object) | You may object to us processing your personal data for a specific purpose where the processing is based on our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes of direct marketing - your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us. |
Request a copy of your personal data (Data Portability) | In certain circumstances you may request that we transmit your personal data to another organisation if you want us to or to give you a copy of it so that you can transmit it to a third party, where technically feasible. |
Request that your personal data is deleted (Right to be Forgotten) | You can ask us to delete the personal data we hold about you if it is no longer required for the purposes set out in this Privacy Policy or if there is no other legal basis for the processing (for example, when it is no longer required or a legitimate business need, legal or regulatory obligations, where you have withdrawn your consent or is no longer required for the purposes it was collected). |
Amend or correct your personal data (Right to Rectification) | If you believe that the personal data we hold about you is inaccurate, incorrect or incomplete, you have the right to request that we update it. |
Restrict the processing of your personal data (Right to Restrict) | You may ask us to restrict our processing of your personal data in certain circumstances:
|
Rights in relation to consent (Right to Withdraw) | At any time, you may withdraw the consent you granted for your personal data to be used for the relevant purpose that you consented to. When you withdraw your consent, it will not affect the lawfulness of any past activities we have undertaken based on the previous consent. |
If you live in France, the right to instruct us regarding the use of your personal data after your death | This enables you to instruct us on the processing (retention, deletion, and disclosure) of your personal data after your death. You can change or revoke such instructions at any time. |
If you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us using the contact details below. Complaints must be lodged in writing. We will deal with each complaint within a reasonable time and will keep you informed of the progress of our investigation and of any proposed outcome or resolution.
You are also entitled to raise a complaint with your Data Protection Authority, as follows:
- Users based in the EU - for EU Data Protection Authority contacts please see further information on the following link National Data Protection Authorities
- Users based in the UK - the Information Commissioner’s Office (ICO) - https://ico.org.uk/
- Users based in other jurisdictions – please contact your local Data Protection Authority (details of which may be included in the relevant country annex below). If you are not sure who to contact, please contact our Data Protection Office using the details below and we will direct you accordingly.
Contact us
Where you visit the website of a company in the (i) M&G Investment Group or (ii) Holding & Service Companies listed here, that company will be the data controller of your personal data.
Please contact our Data Protection Officer (DPO) at the M&G Data Protection Office if you have any questions regarding this policy:
Data Protection Officer
M&G Data Protection Office
10 Fenchurch Avenue,
London,
EC3M 5AG
Global email (excluding Singapore): Privacy.team@mandg.com
Singapore email: Dpo.support@mandg.com
EU Representative
Where the controller is M&G Securities Limited, our European Union Representative with respect to data protection matters is M&G Luxembourg S.A. and can be contacted at:
F.A.O. The Data Protection Officer, M&G Luxembourg S.A., Boulevard Royal 16 2449 Luxembourg
Or by email to:
Updates to this Privacy Policy
We may change this Privacy Policy from time to time to reflect changes to our privacy practices, enhance user experience, or comply with relevant laws. The “last updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last reviewed and/or revised. Any changes are effective when we post the revised Privacy Policy. If we change the Privacy Policy in a material way, we will provide appropriate notice to you. Such notice may be provided via a temporary banner on our website, an email sent to users for whom we have an email address, or by temporarily noting “UPDATED” next to the Privacy Policy link on the footer of our website. Where required by law, we will obtain your opt-in consent if we use personal data that we previously collected about you for a purpose that is materially different from the purposes we described in the version of our Privacy Policy applicable to you at the time we collected that personal data. Your continued use of M&G Investments after our posting of changes to this Privacy Policy means that you understand and agree to such changes.
SUPPLEMENTARY DATA PROTECTION INFORMATION: TARGETED ADVERTISING
We work with our Marketing Partners, including Google, WhatsApp and social media platforms like LinkedIn to help us show you relevant advertisements. We may therefore use and combine your personal data together with information about other individuals, to help us (and our Marketing Partners who we share this data with) to decide what products, services and marketing may be of interest to you and / or to individuals with similar characteristics to you:
- Custom or matched audience – we may share certain information about you (such as your name and email address or other identifiers, including in hashed or pseudonymised form where appropriate) with our social media platform Marketing Partners, including LinkedIn, so that they can determine if you are a user of their platform and, if so, show you advertisements relating to our products and services
- Lookalike audience - we may ask our social media platform Marketing Partners, to identify other users who share similar characteristics to you so that our advertisements can be shown to people who may be interested in our products and services. We do not receive information that directly identifies those individuals unless they choose to interact with us.
- Depending on the type of data we share with our Marketing Partners for these activities, and how that data was collected, we may seek your consent for these activities where required by law. You can also object at any time to the use of your personal data for direct marketing purposes (see above). If you are a member of LinkedIn then you will also be able to log in, review and adjust how your personal data is used in advertising and cookies/pixels contexts.
Google advertising services – our websites use Google Ads and related Google advertising services. We may use these services to promote our products and services on Google and third-party websites within the Google advertising network. This may include displaying advertisements based on search terms, interests, previous interactions with our websites, or other advertising criteria. For example, we may advertise to visitors who have previously visited our websites or who have not completed a task on our site, such as submitting a contact form enquiry.
Ads may appear on Google search results pages or websites within the Google Display Network. Third-party vendors, including Google, may use cookies and similar technologies to display advertisements based on your interactions with our websites and other online activity. Any data collected will be used in accordance with this Privacy Policy, M&G Investments’ Cookie Policy and Google’s Privacy Policy.
With your consent, our websites implement Google Analytics Demographics and Interest Reporting so we can monitor the visits to our site. You can set preferences for how Google advertises to you via our Cookie Policy, or using Google’s Control your ad experience - My Ad Center Help page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
In certain jurisdictions, we and relevant social media platform Marketing Partner entities (such as LinkedIn, Google and Meta) may act as joint controllers of your personal data for certain targeted advertising activities. These entities may also act as independent controllers of your personal data for other advertising, analytics, security and platform improvement purposes. You should therefore also review their privacy information to understand how they collect, use and share personal data that we provide to them and that they collect through cookies, pixels and similar technologies that may be deployed on our websites.
Further information on LinkedIn’s use of personal data for custom and lookalike targeted advertising activities is here:
- LinkedIn European Regional Privacy Notice
- “How businesses and websites can use Off-LinkedIn data to target advertising through LinkedIn”
Further information on Meta’s use of personal data for custom and lookalike targeted advertising activities is here:
- Meta Privacy Policy - in particular, see the “Partners – Advertisers and Audience Network publishers (if we show you ads)” section
- “How Meta receives information from other businesses and organisations”
- List of Meta companies
Further information on Google Ads services is provided above at “Google advertising services”.
- “Marketing Partners” means our service providers, including advertising and media service providers such as LinkedIn (LinkedIn Ireland Unlimited Company), Meta entities (including WhatsApp – see here), Alphabet Inc / Google LLC and its affiliated services (including Google Ads and Google Analytics).
To the extent that any provision of a jurisdictional annex below conflicts with or differs from the main body of this policy, the relevant annex shall take precedence in respect of individuals located in that jurisdiction.
Email tracking pixels
You can update your preferences or disable this feature by contacting us at frabelux.support@mandg.com. Your choice in respect of email pixel tracking will not affect your subscription to our emails or the services we provide to you.
Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), you are entitled to rights of access and correction only.
Email tracking pixels
You can update your preferences or disable this feature by contacting us at info@mandgitalia.it. Your choice in respect of email pixel tracking will not affect your subscription to our emails or the services we provide to you.
Security control measures
We implement organisational, personnel, physical and technical security control measures to protect personal data as required under the Act on the Protection of Personal Information of Japan (APPI). If you wish to request further information, please contact the Data Protection Office.
Joint use
We jointly use the categories of personal data described in “What personal data we collect from you” within the M&G plc Group for the purposes described in “How and why we use your personal data”. A list of the M&G plc Group entities is available here, as updated from time to time.
We, M&G Investments, are responsible for the management of such joint use. Our address is 10 Fenchurch Avenue, London EC3M 5AG, United Kingdom, and the name of the CEO is available here.
Your rights - request regarding your personal data
Subject to the APPI, you may request to be notified of the purposes for which we use your personal data, to access your personal data and records of third-party transfers retained by us, or to request the correction, addition, deletion, suspension of use, or suspension of third-party disclosure of their personal data.
If you wish to make any such request, please contact the Data Protection Office. We may ask you to provide information or documents to verify your identity or to process your request. Please note that we will only be able to fulfil requests to the extent required or permitted under the APPI.
Consent to the processing of your personal data
You consent to M&G Investment Group’s collection, use and disclosure of your personal data for the purposes stated in the main body of this policy.
Your rights
Under the Singapore Personal Data Protection Act 2012 (PDPA), Singapore data subjects are entitled to rights of access, correction and withdrawal of consent only.
The data controller of the personal data of Korean data subjects is M&G Investments (Hong Kong) Limited, located in Hong Kong.
How and why we use your personal data (legal basis)
We collect the following personal data without your consent.
Purpose | Category of Data Collected | Legal Basis |
|---|---|---|
To respond to your enquiries, complaints or comments submitted to us by phone, post, email, text message, social media or via our websites (e.g. in free text boxes) | Contact Data Professional Data Submitted Data | Article 15(1)(iv) of the PIPA (Performance of Contract) Article 15(1)(vi) of the PIPA (Legitimate Interest) |
To record your calls with us for security, quality service control and training purposes, and to comply with our legal and regulatory obligations in relation to call recording (e.g. under MiFID II and related UK laws and regulations) | Contact Data Submitted Data | Article 15(1)(ii) of the PIPA (Legal Compliance) Article 15(1)(iv) of the PIPA (Performance of Contract) Article 15(1)(vi) of the PIPA (Legitimate Interest) |
To securely and efficiently manage and administer our business, and for client management and business development purposes, including to keep your information accurate and up to date | Contact Data Professional Data Submitted Data Device Data | Article 15(1)(iv) of the PIPA (Performance of Contract) Article 15(1)(vi) of the PIPA (Legitimate Interest) |
To protect M&G Investments’ business interests and legal rights and the interests and legal rights of our customers. | All relevant data | Article 15(1)(ii) of the PIPA (Legal Compliance) Article 15(1)(iv) of the PIPA (Performance of Contract) Article 15(1)(vi) of the PIPA (Legitimate Interest) |
To prevent, detect and investigate fraud, theft and other financial crimes, to establish, exercise and/or defend legal claims, and to protect our business against other criminal activity, including by sharing data, where necessary, with the court service, our regulators, tax authorities and law enforcement agencies. | All relevant data | Article 15(1)(ii) of the PIPA (Legal Compliance) Article 15(1)(vi) of the PIPA (Legitimate Interest) |
We collect the following personal data based on your prior consent.
Purpose | Category of Data Collected |
|---|---|
To inform you about investment products and related services of M&G Investments by post, SMS, push notification, email and telephone calls | Contact Data Professional Data Marketing Preferences Marketing Data |
To record your calls with us, where permitted to use artificial intelligence to review call transcripts for insights, direct marketing purposes and to improve efficiency | Contact Data Submitted Data |
To gain insight into how our products/services are used and how they might be improved such as through use of storage and access technologies like cookies | Device Data Marketing Data |
Overseas Transfer of Personal Data
We provide or entrust your personal data to the following overseas entities. You may refuse overseas transfer by contacting the Data Protection Office identified above. However, in the event of refusal, we may be unable to provide some or all of our products, services, communications, and support that rely on the overseas processing of your personal data.
Overseas Entrustment
Recipient (Country) & Contact Information | Recipient’s Purpose of Use | Items of Transferred Data | Transfer Date and Method | Retention Period |
|---|---|---|---|---|
Salesforce, Inc. (USA) Email: privacy@salesforce.com
| Gather organisation and associated contact information of those individuals linked to new or existing business opportunities or existing accounts/schemes CRM also gathers activity engagement and any communication with clients in relation to products and general marketing.
| Organisations (or Companies) – Name, address, region, various classifications, status, website, phone number(s) Then related to these Companies: Contacts – Salutation, First Name, Surname, email address, job title, telephone/mobile, address, email preferences, opt out/in and engagement levels (email/online) Opportunities – Stage, Mandate, Close date, fees, revenue, associated products and Relationship Manager owner Client Account / Sub Account (Institutional / Workplace DC) Activity / meeting notes - calls, product interest/discussed, general queries Enquiries – client enquiries, reporting, orders, client onboarding workflows Documents – associated with clients, invoices, reporting, onboarding Contact and professional information, such as name, business email address, organisation, job title and business telephone number; marketing preferences and consent records, including subscription status and opt-in or opt-out information; campaign and communication information, including campaign membership, emails sent and event invitations; engagement and website activity, including email delivery, opening and interaction data, form submissions and identifiable website usage collected through Eloqua technologies; and relevant Salesforce identifiers and lead, prospect or client information exchanged through the integration. | Data is either manually entered by sales, service or marketing teams, or through connected systems or synchronised with integrated M&G platforms. | Until the expiration of the delegation agreement |
Oracle Corporation (USA) Email: privacy_ww@oracle.com
| Provision and operation of the Eloqua marketing automation platform, including managing leads and marketing preferences; delivering email campaigns and event invitations; hosting forms used to collect and communication preferences; recording campaign and email engagement; tracking identifiable website activity where enabled; and exchanging relevant lead, prospect and client information with Salesforce. | Contact and professional information, such as name, business email address, organisation, job title and business telephone number; marketing preferences and consent records, including subscription status and opt-in or opt-out information; campaign and communication information, including campaign membership, emails sent and event invitations; engagement and website activity, including email delivery, opening and interaction data, form submissions and identifiable website usage collected through Eloqua technologies; and relevant Salesforce identifiers and lead, prospect or client information exchanged through the integration. | On an ongoing basis when information is entered into Eloqua, submitted through an Eloqua-enabled form, generated through interaction with marketing communications or websites, or exchanged between Eloqua and connected M&G systems, including Salesforce. Data is transferred electronically through secure system integrations and remote network transmission. | For the duration of the service agreement and thereafter in accordance with our retention requirements, Oracle’s applicable deletion procedures and legal retention obligations. Marketing activity data is generally retained for 25 months from the activity date. |
Destruction of Data
When we no longer need to use your personal data, we securely destroy it. Data in the form of electronic files is destroyed in a way that prevents reproduction of records, and data in the form of paper documents is shredded or incinerated.
Installation and Operation of an Automatic Collection Tool
This website uses cookies. Cookies are text files containing small amounts of information which are downloaded to your computer or other device when you visit a website. They are used to help you navigate websites efficiently and perform certain functions. They can also help us to better understand how the website is being used so we can make ongoing improvements to it.
You can allow or deny cookies by setting the web browser options. However, denying cookies may limit your access to certain website functions or personalized services.
For further details, please refer to the Cookie Policy.
Email Tracking Pixels
You can update your preferences or disable this feature by contacting us at Privacy.team@mandg.com. Your choice in respect of email pixel tracking will not affect your subscription to our emails or the services we provide to you.
Security Measures
We undertake the administrative, technical and physical security measures in compliance with Article 29 of the PIPA to ensure the security of the personal data we process, including but not limited to the following.
(i) Administrative measures: Establishment and implementation of internal management plans, regular employee training on data protection, etc.
(ii) Technical measures: Management of access to data processing system, installation of access control system, encryption of data, installation of security programs, etc.
(iii) Physical measures: Restriction of access to storage locations such as data processing room, etc.
History of Changes to Privacy Policy
You can request the previous versions of the Privacy Policy by contacting us at Privacy.team@mandg.com.
Your rights
You are also entitled to raise a complaint with the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch.
Your rights
In addition to the rights described in the section “Your Rights and how to exercise them” above, you may request that we stop collecting, processing, or using your personal data at any time by contacting us using the details set out above.
Last Updated: September 2026
This supplementary data protection information (“State Law Privacy Notice” or “Notice”) applies solely to residents of California, Connecticut, Minnesota, Montana, Oregon, and any other U.S. state with an applicable privacy law (“Applicable State Laws”). As used in this Notice, “Personal Data” should be interpreted consistent with Applicable State Laws, and means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you, and includes “personal information” or similar terms.
Pursuant to the Applicable State Laws, this Notice provides additional details regarding our collection, use, and disclosure of residents’ Personal Data that is subject to these laws. This Notice also describes the rights available in relation to certain Personal Data we maintain and how consumers can exercise those rights.
This Notice applies only to residents of California, Connecticut, Minnesota, Montana, and Oregon whose interactions with us are limited to:
- Visiting our website; and
- Signing up for our email alerts.
I. NOTICE AT COLLECTION OF PERSONAL DATA
Categories of Personal Data Collected. We collect the categories of Personal Data identified below. We generally disclose these categories of Personal Data for business purposes to our service providers. Additionally, as indicated below, we “sell” or “share” some of these categories for marketing and “targeted advertising” (as such terms are defined in Applicable State Laws) to business partners and third parties, such as data analytics providers, advertising technology vendors, third-party advertising networks, and social media platforms.
Category of Personal Data Collected | Sold, Shared, or used for Targeted Advertising? |
|---|---|
Identifiers/biographical information, including name, postal and email address, phone number, online identifiers, Internet Protocol (“IP”) address, and other similar identifiers. | Yes
|
Personal Data categories listed in the California Customer Records statute, including address, telephone number, driver’s license or state ID number. | No |
Characteristics of protected classifications under California or Federal law, including age, gender/sex, language preferences, etc. | No
|
Commercial information, including items purchased, obtained, or considered and other purchasing or consuming histories or tendencies. | No |
Geolocation information (imprecise), including approximate location derived from IP address. | Yes |
Internet or other electronic network activity information, including browsing history, search history, information on a consumer's interaction with a website, application or advertisement, device information, IP address, etc. | Yes |
Audio, electronic, visual, thermal, olfactory, or similar information, including call transcripts and recordings. | No |
Inferences, meaning inferences drawn from the above-listed categories of Personal Data to create a consumer profile reflecting consumer preferences or characteristics. | No |
Sensitive Personal Data, including driver’s license, state identification card, or passport number, biometric information, and financial information credentials. We do not use or disclose such information for the purpose of inferring characteristics about you or for any purpose other than the limited permissible purposes set forth in the regulations implementing applicable law. Such purposes include providing our website and services and verifying, maintaining the quality of, and improving our website and services. | No |
Please click the “Do Not Sell or Share My Personal Information” link in the footer of the website or here [ME1] to opt out of the sale or sharing of your Personal Data, including for targeted advertising. You may also opt out of the sale or sharing of your Personal Data by enabling a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). Where available, we will process the signal as a request to opt out.
We do not knowingly sell or share Personal Data about persons under the age of 18.
The Business and Commercial Purposes for Which We Collect and Use Your Personal Data. Depending on your relationship with us, we collect and process your Personal Data for the following purposes:
- To provide you with our website and improve your experiences.
- To review the usage and maintain the operation of our website and services.
- To conduct analysis and develop and/or improve our website.
- To respond to your inquiries, complaints or comments submitted to us by phone, post, email, text message, social media or via our website (e.g. in free text boxes).
- To communicate with you, including to respond to your inquiries/requests and request feedback from you, and to send you important updates and messages about changes to our website, our services, this notice, and/or other applicable terms and conditions.
- To send you information, newsletters, and marketing/promotional material from us.
- Provide you with tailored content (including targeted advertising) based on your interactions on the website and other sites or apps or social media platforms (including measuring the effectiveness of our advertising campaigns).
- For customer service, security, quality service control and training purposes, including, where permitted to use artificial intelligence to review call transcripts for insights, direct marketing purposes and to improve efficiency.
- To securely and efficiently manage and administer our business, and for client management and business development purposes, including to keep your information accurate and up to date.
- To monitor, protect, and maintain the security and integrity of our website and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities.
- To protect our business interests and legal rights and the interests and legal rights of our customers.
- To prevent, detect and investigate fraud, theft and other financial crimes, to establish, exercise and/or defend legal claims, and to protect our business against other criminal activity, including by sharing data, where necessary, with the court service, our regulators, tax authorities and law enforcement agencies.
- To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.
- To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials.
- To fulfil any other purpose for which you provide your Personal Data, at your direction, or as explained to you at the point of information collection.
Please note that we may de-identify or aggregate personal data so that it will no longer be considered personal data under certain laws, and disclose such information to other parties for purposes consistent with those described in this Privacy Policy. We will protect de-identified information in accordance with applicable law and will not attempt to “re-identify” the information.
Retention. We will retain your Personal Data for as long as reasonably necessary to provide you with our website or the services that you request, for marketing purposes unless you opt out, or otherwise where permitted or required in accordance with applicable law. We will retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. What this means in practice will vary between different types of information, and when we consider our approach we take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.
II. SOURCES OF PERSONAL DATA
We collect your Personal Data in a number of ways, including (a) directly from you; (b) automatically when you interact with our website; (c) from third parties; and (d) combining information from different sources.
Personal data you provide – we collect Personal Data you share directly with us:
- When you use our website. We collect Personal Data from you when you submit information to our website.
Personal data we collect automatically – When you visit and interact with our website, we or our third-party partners and service providers may use a variety of technologies, such as cookies, tags, SDKs or scripts, to collect certain information regarding your activity.
Personal Data we collect from third parties - We may receive Personal Data from other sources. Our third-party sources may include:
- Our business partners and service providers that support our website and marketing activities.
- Our marketing/advertising and analytics partners, including online advertising networks and analytics providers.
- Social media platforms (note that the information we receive from such platforms is dependent upon their policies and your settings on the platforms).
- Other companies that provide Personal Data to supplement what we already know about you, including data aggregators.
Combining Personal Data - We may combine Personal Data that we receive from various sources. For example, we may combine Personal Data that we collect from you offline with Personal Data we collect from you through our website. We use, disclose, and protect combined Personal Data as described in this Notice.
III. STATE PRIVACY RIGHTS
Residents of states with Applicable State Laws may have the following rights with respect to their Personal Data, subject to certain exceptions. Applicable State Law exempts certain information from these rights and requests, including information governed by or subject to the federal GLBA. We reserve the right to honor requests only to the extent required by law.
- Right to Know. You may submit a request that we disclose the categories of Personal Data we have collected about you, inferences derived from your Personal Data, the categories of sources from which your Personal Data is collected, the business or commercial purpose for collecting, selling, or sharing your Personal Data, the categories of third parties with whom we disclose your Personal Data, and the specific pieces of Personal Data we have collected about you.
- Right to Request Specific List of Third Parties (CT, MN, and OR residents only). You may have the right to request a list of the specific third parties to which we have disclosed to third parties or sold Personal Data.
- Right to Delete. You may submit a request that we delete the Personal Data that we have collected from or maintain about you. Note that there are some reasons we will not be able to fully address your request, such as if we need to complete a transaction for you, to detect and protect against fraudulent and illegal activity to exercise our rights, for our internal purposes, or to comply with a legal obligation.
- Right to Correct. You may submit a request that we correct inaccurate Personal Data that we may maintain about you, subject to appropriate verification. Where appropriate, we may comply with a right to correct by deleting your Personal Data.
- Right to Opt Out of Sale or Sharing (including Targeted Advertising). We use and disclose to third parties Personal Data to gain insights on how our Services are used. Accordingly, you may submit a request to opt out of the “sale” or “sharing” of your Personal Data, including targeted advertising (as these terms are defined under applicable law).
To opt out of the sale or sharing of your Personal Data, including for targeted advertising, please click here or the “Do Not Sell or Share My Personal Information” link in the footer of the website. In some jurisdictions, you may choose to enable a tool that automatically communicates your opt-out preferences to all businesses that you interact with online. If you enable a browser-based opt-out preference signal, such as the GPC, upon receipt or detection, we will treat the signal as a valid request to opt out of sale, sharing, or targeted advertising linked to that browser and, where we can do so, consumer profiles that we have associated with that browser. Please note that if you use different browsers or browser profiles, you will have to enable the signal on each one that you use. We will never ask you to verify your identity to exercise your right to opt out of the sale or sharing of your Personal Data.
To submit a request to access, delete, or correct your Personal Data, please email us at Privacy.team@mandg.com or call us at +44 (0)207 626 4588. To protect the confidentiality of yours and others' Personal Data, we will only complete your request when your identity has been verified. We may request additional information from you, like your date of birth or a personal identification number, to verify your identity. Please note that, where permitted under applicable law, we may decline a request if we are unable to verify your identity (or an agent’s authority to make the request) and confirm the Personal Data we maintain relates to you.
Depending on your state of residence, you may designate an authorized agent to make a privacy rights request on your behalf using the mechanisms described in this section. Authorized agents will need to demonstrate that you’ve authorized them to act on your behalf or must demonstrate they have power of attorney pursuant to applicable probate law. M&G Investments retains the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm yours and/or the agent’s identity.
You may have the right to appeal a decision we have made in connection with your privacy rights request. To appeal a decision, please contact us at Privacy.team@mandg.com.
You are not required to create an account to exercise your state privacy rights.
We will not discriminate against you for exercising your consumer privacy rights outlined in this section.
Marketing Communication. M&G Luxembourg S.A. regulated by the Commission de Surveillance du Secteur Financier (CSSF). Registered Office: Avenue Louise 54, 1050 Brussels.