How we look after your data.

Manx Credit Union Limited is a member-owned credit union registered under the Credit Unions Act 1993 (Registration No. 000001U) and licensed by the Isle of Man Financial Services Authority. Our registered office is Ragnall House, 18 Peel Road, Douglas, Isle of Man IM1 4LZ.

We are the data controller responsible for your personal data and process it in line with the Isle of Man Data Protection Act 2018 and the Applied GDPR.

• Identity and contact details — your name, date of birth, address, nationality, email address and phone number.
• Verification data — copies of identity documents and proof of address we are required to hold under anti-money-laundering law.
• Financial information — your share balance, loan history, repayments, income details you give us when applying to borrow, and any payroll or benefit deduction arrangements.
• Membership data — your Member Number, eligibility, communications with us, and your contact preferences.
• Technical data — limited information about how you use this website and the member portal, covered in our cookie notice.

• To open and run your share account and any loans you hold.
• To verify your identity and meet our legal obligations under anti-money-laundering and financial services law.
• To assess loan applications and manage repayments.
• To administer your membership, send statements, and respond to your enquiries.
• To operate the member portal and keep your account secure.
• With your consent, to send you news and reminders by email — you can withdraw that consent at any time.

• Contract — to provide the savings and loan services you ask us for.
• Legal obligation — to comply with financial services, anti-money-laundering and tax legislation.
• Legitimate interests — to run the credit union soundly, prevent fraud, and keep members informed.
• Consent — for optional marketing, which you can withdraw at any time.

We never sell your data. We share it only where necessary:

• Credit reference and fraud prevention agencies, when you apply to borrow, to assess applications and prevent fraud.
• Our regulated service providers (the member platform, identity verification, payments) who handle data on our written instructions and only for the purpose we’ve engaged them.
• Regulators, auditors and law enforcement where we are legally required to do so.

Account records are retained for the duration of your membership and for a maximum of five years after you stop being a member, unless a longer period is required by law for financial or anti-money-laundering records. After that they are securely deleted or anonymised.

• Ask for a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to erase data where there is no legal reason to keep it.
• Object to or restrict certain processing.
• Withdraw consent for marketing at any time.

To exercise any of these rights, contact us using the details below. We will respond within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Isle of Man Information Commissioner at inforights.im.