Our Privacy Policy

This is our privacy policy. We will always keep your data safe and secure. This privacy policy explains what information we collect about you and how we use it and should be read in conjunction with our GDPR policy .

This privacy policy is owned and operated by MoneyMesh Ltd (“MoneyMesh” and also “we”, “us” and “our”).

This Privacy Policy was posted on 07 November 2022 and therefore takes effect for all our Supplier and Buyer Clients (also “clients” and “you”) from this date.

This policy complies with the UK General Data Protection Regulations (“UK GDPR”) and the Data Protection Act 2018, in addition to the data protection laws and legislations of Kosovo, North Macedonia, Albania, Montenegro, Bosnia and Herzegovina, Serbia and Croatia (“Western Balkans”) and the European Economic Area (“EEA”). We therefore process your data securely and transparently in accordance with these jurisdictions.

In most cases, MoneyMesh is a Data Controller, by providing our Buyer Clients the ability to upload payables invoice data on to our digital platform at Invoz and for our Supplier Clients to be able to review, approve and request upfront payment against these invoices (funded by MoneyMesh). We only process data provided to us with our Clients’ consents. In these circumstances, for GDPR purposes, we determine the purpose of the data and the means of the same.

Our privacy notice is in accordance with GDPR legislation of the UK, Western Balkans and the EEA. This policy outlines the type of personal data that we collect and hold about you. This data is required for the sole purposes of providing our commercial banking services to you.

Our privacy notice also explains how we use this information, how long the data is kept for and any other relevant information about your data.

1. Data Controller details: 2. Data protection principles:
In relation to personal data, we will:
  • Process it fairly, lawfully and in a clear, transparent way;
  • Collect personal data only for specific and legitimate reasons;
  • Only use it in the way that we have told you about;
  • Ensure it is correct and up to date;
  • Keep your data only for as long as we require it;
  • Process it in a way designed to ensure it will not be lost, destroyed or used for anything that you are not aware of.
3a. Types of data we collect:
The types of data that we collect include:
  • Your personal details including your full name (point of contact name and also, the full business name), address, email address and a phone number.
  • Bank details for our Clients in order to issue and process payments.

  • Financial and operational business data, including invoice data for financing purposes, financial statement and product data for credit risk assessment, and other data for environmental social and governance monitoring purposes.

We collect personal information from you including any electronic devices (such as mobile phones, tablets, desktops and application software on digital devices) you use when you:
  • Provide information to us on our contact us page;
  • Provide us with information on our main website and also our digital platform;
  • Complete paperwork concerning Client information and retainers whether as a Buyer or Supplier;
  • Update information for your account profile with us and/or when you communicate with us.

  • We collect this information either because it is necessary so that we can perform our contract of providing our services to you, it is in our legitimate interests to do so or to meet our legal obligations.

3b. How we collect your data:

As our Client, we collect data about you or your business only, as supplied by you when you register for one of our services whether or not listed on our website and/or our digital platform. This will normally be via our website/platform URL or through other communications such as email and post.

IT systems

Personal data is held securely on our digital website, platform and email systems. We ensure all paperwork and written communications are carefully filed away safely and as securely, as possible. Access to the above information is solely limited to the owner, employees and assigned agents of MoneyMesh who require access to this data to undertake their job duties and in order to provide our website and online platform services to our Clients.

Our website is overseen and managed by our team and hosted by a specialist web host/provider.

Marketing correspondence

If you have subscribed to our newsletter via our website or other electronic platform such as social media, we will send you updates by email to share any news and information on our commercial banking services and to keep you updated of what we are up to. This is the only time we will ever send you marketing emails. In order to subscribe to our newsletter we will only ask you to provide us with your first name, last name and your email address.

You can stop receiving marketing emails from us at any time by contacting us directly or by clicking unsubscribe on our mailing platform.

Ways to opt out
  • By clicking on the ‘unsubscribe’ link included in marketing emails.
  • By emailing us at contact@moneymesh.demo advising us you wish to opt out. Simply saying “opt out” in the subject line or the body of an email that you send to us is sufficient.

We will never disclose your personal information to third parties unless we are legally obliged to do so.

4. Why we collect your data:
  • To fulfil and deliver our financial services ensuring we comply with relevant legal obligations of the UK, Western Balkans and the EEA to provide our services to our Clients.
  • To let you know of any news at the time. This is in our legitimate interests to do so to enhance our services and also to grow our commercial banking business. We, of course, provide the option of opting out of receiving our marketing at any time if you change your mind.
  • To allow you to use our online services fully.
  • To prevent and detect fraud against either you or us.
5. Why we process your data:
MoneyMesh can process your data only for specific purposes due to GDPR and data protection laws of the UK, Western Balkans and the EEA:
  • So that we can perform a legal contract with our Clients;
  • To ensure we can carry out legally required duties and/or
  • To ensure we can promote the legitimate interests of MoneyMesh and our Clients, where necessary.

All of the data control and/or processing carried out by MoneyMesh falls into one of the permitted reasons. We will need to collect your personal data in order to carry out the contract that we have entered into with you.

We also process data to ensure we can carry out activities that are in the legitimate interests of MoneyMesh.

6. If you do not provide your data to us:

Our main reason to process your data is so that we can carry out our contractual duties agreed with you as one of our Clients using our services, digital platform and/or website.

If you do not provide us with data in order to be able to carry out our contractual duties, we cannot perform our contractual obligations in providing our services to you, specifically and may not be able to proceed with a contract of service.

If you are a party to the contract, we must control and/or process your data to comply with our legal obligations within the UK, Western Balkans and the EEA, as the Data Controller.

7a. Sharing your data:

Your data will only be shared with employees, contractors and/or agents appointed by MoneyMesh to provide our services and in order for them to undertake their duties. We also will not share your personal data with bodies or third parties outside of the UK, Western Balkans and the EEA.

7b. Sharing your information:

We will never share or sell any of your data/personal information with any third party subject to the below specific exceptions.

Exceptions

We may share your data with the following companies, as an essential part of being able to provide our services to you for these specific purposes only:

  • Professional service providers, such as our software host/web designer/web provider who help us with managing our website and digital platform.

We may also be required to share some of your data with others for the below reasons:

  • If we are requested by the police or either a regulatory or government authority within the UK, Western Balkans and the EEA who are investigating illegal activities to provide such information concerning your activities while using our services, we shall be legally obliged to do so.

8. Protecting your data:

We acknowledge our obligation to ensure your data is protected against accidental loss or disclosure, destruction and abuse. We have implemented safeguarding processes for this.

MoneyMesh has taken the following steps to protect personal data of all Clients, which we hold or to which we have access:

i. We may appoint or employ individuals with specific responsibilities for:
  • Processing and controlling data;
  • The comprehensive reviewing and auditing of data protection systems and procedures;
  • Overseeing the effectiveness and integrity of all the data that must be protected.

ii. We provide our employees/contractors and/or agents with information and training to make them aware of the importance of protecting personal data, to teach them how to do this, and to understand how to treat information confidentially.

iii. We can account for all personal data we hold, where it comes from, who it is shared with and also who it might be shared with.

iv. We carry out risk assessments to identify any vulnerability in the personal data handling and processing, and to take steps in reducing the risks of mishandling and potential breaches of data security. The process includes an assessment of the impact of both the use and potential misuse of personal data.

v. We recognise the importance of seeking individuals’ consent (where appropriate) for obtaining, recording, using, sharing, storing and retaining their personal data, and regularly review our procedures for doing so, including our audit trails that are needed and are followed for all consent based decisions.

MoneyMesh understands that consent given by potential and current Clients must be freely given, specific, informed and unambiguous.

We will seek consent on a specific and individual basis, where appropriate. Full information will be given regarding the activities about which consent is sought. Relevant individuals/businesses have the absolute and unimpeded right to withdraw their consent, at any time.

We have the appropriate safeguarding processes for detecting, reporting and investigating suspected or actual personal data breaches, including where these are caused by security breaches. MoneyMesh is aware of the duty to report breaches that cause significant harm to the affected individuals to the relevant data protection regulatory agencies listed under Clause 13 and also to the Data Subject, and we are also aware of the possible consequences in failing to do so.

We understand the implications of the transfer of personal data internationally. Where access to your data is required, the following applies:

The principle of legal privilege is always applicable. Therefore those with access to such data will only have the minimum amount of access to a resource that is required for us to undertake our role.

Access to personal data is protected safely. Passwords that are used must meet the specified complexity requirements and must be kept confidential to the user and not shared with anyone else including our colleagues/contractors and/or agents.

We regularly monitor our software system for possible vulnerabilities and attacks.

Where we are obliged to legally share your data with third parties and/or to carry out our duties, we have a written agreement with them to ensure that your data is held securely and in line with GDPR requirements of the UK, and Western Balkans and the EEA.

Third parties must implement appropriate technical and organisational measures to ensure the security of your data.

9. Keeping your data:

MoneyMesh keeps your data only for as long as it is necessary. You are entitled to exercise your right to erasure of this data by making a request to us verbally or in writing (via post or email) though we recommend doing this in writing, where reasonably practical.

Once we no longer need your data, we will take steps to delete it. MoneyMesh conducts annual checks of personal data that we hold to ensure everything has been deleted at the end of its retention period.

10. Automated decision making:

No decision will ever be made about you solely on the basis of ‘automated decision making’ (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on your business, your services and/or employees.

11. Your rights in respect of your data:

The UK, Western Balkans and the EEA data protection laws and GDPR rules provide you with specific rights in relation to data we hold about you as one of our Clients. These rights are summarised below:

  • The right to be informed. This means that we must tell you how we use your data and this is the purpose of this privacy notice.
  • The right of access. You have the right to access the data that we hold on you. To do so, you should make a data subject access request to the Data Protection Officer by email to ssamain@moneymesh.demo . This information will be provided free of charge, unless a request is manifestly unfounded or excessive, particularly, if it is repetitive. In such circumstances, MoneyMesh may charge a reasonable fee to respond and we will advise you of this, otherwise we may be entitled to refuse the request.
  • The right for any inaccuracies to be corrected. If any data that we hold about you is incomplete or inaccurate, you are entitled to ask us to correct it for you.
  • The right to have information deleted. If you would like us to stop processing your data, you have the right to ask us to securely delete or destroy it from our systems or where you believe there is no reason for us to continue processing it.
  • The right to restrict the processing of the data. For example, if you believe the data we hold is incorrect, we will stop processing the data (while still holding it) until we have ensured that the data is correct.
  • The right to data portability. You may transfer the data that we hold on your business for your own purposes
  • The right to object to the inclusion of any information. You have the right to object to the way we use your data where we are using it for our legitimate interests.
  • The right to regulate any automated decision-making and profiling of personal data. You have a right not to be subject to automated decision making in a way that adversely affects your legal rights. Where you have provided consent to us in using your data, you also have the unrestricted right to withdraw that consent at any time.

Withdrawing your consent means that we will stop processing the data that you had previously given us consent for. There will be no consequences for withdrawing your consent. However, in some cases, we may continue to use the data where so permitted by having a legitimate reason for doing so such as our obligations for providing our commercial banking services. If you wish to exercise any of the rights explained above, please contact us as soon as possible.

12. Amendments to our privacy policy:

We reserve the right to amend our privacy policy, while of course, ensuring it complies with relevant GDPR legislation and laws of the UK, Western Balkans and the EEA. We will ensure that our policy shows the most up to date information and may notify you of such changes by including the revised privacy policy on our website and/or platform and/or via marketing communications.

13. If you wish to make a complaint:

We hope that you will be happy with our services. In the event that you are unhappy or wish to make a complaint about your data access rights, please contact us by emailing contact@moneymesh.demo so that we can investigate your complaint as soon as possible. We will try our best to provide you with an amicable resolution, where possible within 7 days. If you prefer to speak over the phone about any concerns then please let us know in your email and we will be happy to communicate accordingly.

If you are unhappy with how we have handled your access requests and/or exercising your GDPR rights, you can file a complaint or raise a query with the relevant Data Protection Regulatory Agency as listed below. More information on how to raise a complaint can be found below depending on the relevant location in which we provide our services:

The UK: ICO https://ico.org.uk/
Croatia: PDPA https://azop.hr/
Kosovo: IPA https://aip.rks-gov.net/
North Macedonia: (no data protection regulatory agency available currently)
Albania: IDPC https://www.idp.al/
Montenegro: Agency for PDP of Montenegro https://www.azlp.me/me/agencija
Bosnia and Herzegovina: PDPA in B&H http://www.azlp.ba/
Serbia: Commissioner for IPI and PDP https://www.poverenik.rs/en/
14. Data Protection Officer:

Our Data Protection Officer is Shahem Samain who can be contacted at ssamain@moneymesh.demo and at 145 City Road, London, EC1V 1AZ, United Kingdom.

Review of policy:

This policy was last reviewed and updated by MoneyMesh on 01 September 2022. This will be reviewed periodically by the company, as is deemed appropriate and at least once every 12 months.


MoneyMesh Ltd.
Our Cookies Policy
What is a cookie?

A cookie is a piece of data sent from a website and stored on your computer’s hard drive. When you use the same website such as ours again in the future, the data stored in the cookie can be retrieved by the website to notify the same site of your previous activity.

In order to be able to either contact us and/or use our digital platform as one of our Buyer or Seller Clients, you must have your cookies enabled.

Our cookies do not store personal information such as your name, contact number, email address and postal address. However, cookies may allow us the ability to access this information once you are logged into your account with us on our platform and/or contacting us via our website, for very specific and legitimate reasons below.

https://www.moneymesh.demo uses cookies for the below reasons:
  • To identify you when you visit our website or digital platform or when you contact us via our website;
  • To remember your preferences and past activity on our website and digital platform;
  • To allow you to share our services and information with your own social media platforms;
  • To improve the use of our website/digital platform, the content and our financial services;
  • To offer you a better Client care experience with MoneyMesh.

How can you manage your cookies on our website?

To check your cookies setting or if you prefer to limit, block or delete your cookies from our website, you need to use your browser to access the “Managing your cookies” section of our website. Here you will be able to update your options.