Privacy Policy

PRIVACY POLICY

Last updated on 20th February 2026

Important Notice: Company Structure Update

This Privacy Policy has been updated to reflect changes to our company structure. The Money Panel Ltd (UK) now operates solely as a payment collection agent on behalf of Catherine Morgan Limited (Jersey), trading as The Money Panel. All services previously delivered by The Money Panel Ltd are now delivered by Catherine Morgan Limited.

If you are looking for the privacy policy governing our services, programmes, courses, coaching, and the Money StoryTypes® assessment, please refer to the Catherine Morgan Limited Privacy Policy available at https://catherinemorgan.com/privacy-policy.

This Privacy Policy covers only the limited data processing activities carried out by The Money Panel Ltd in its capacity as a payment collection agent.

1. About The Money Panel Ltd

The Money Panel Ltd is a company registered in England and Wales.

  • Company Name: The Money Panel Ltd
  • Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
  • Company Registration Number: 10267198
  • Jurisdiction: England and Wales

1A. Our Role and Relationship with Catherine Morgan Limited

The Money Panel Ltd acts exclusively as a payment collection agent on behalf of Catherine Morgan Limited (registered in Jersey, Channel Islands, company number 137407), trading as The Money Panel.

What this means: When you purchase any service, programme, course, or product from The Money Panel, your contract is with Catherine Morgan Limited (Jersey). The Money Panel Ltd (UK) collects your payment on behalf of Catherine Morgan Limited under a formal Agency Agreement between the two entities. The Money Panel Ltd does not deliver any services, programmes, or courses.

Data Controller: Catherine Morgan Limited (Jersey) is the data controller for all personal data collected in connection with The Money Panel services. The Money Panel Ltd processes personal data only to the extent necessary to fulfil its payment collection function, and does so under the instructions of Catherine Morgan Limited.

 

2. What Personal Data We Process

As a payment collection agent, The Money Panel Ltd processes only the limited personal data necessary to facilitate payment transactions on behalf of Catherine Morgan Limited. This includes:

  • Identity data: Your name as it appears on your payment method
  • Contact data: Your email address (to associate payment with your account)
  • Financial data: Payment card details, billing address, and transaction records
  • Transaction data: Details of payments made, including amounts, dates, and payment method

We do not process: coaching records, programme participation data, assessment results (including Money StoryTypes®), community posts, video recordings, or any other data related to the delivery of services. All such data is processed exclusively by Catherine Morgan Limited (Jersey) as data controller.

3. How We Use Your Personal Data

We use your personal data solely for the following purposes:

  • Collecting payments for services provided by Catherine Morgan Limited
  • Processing refunds where authorised by Catherine Morgan Limited
  • Managing payment disputes or chargebacks
  • Maintaining financial records as required by law
  • Transferring collected funds to Catherine Morgan Limited

We do not use your personal data for marketing, profiling, automated decision-making, or any purpose other than payment collection and related financial administration.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: Processing your payment is necessary for the performance of the contract between you and Catherine Morgan Limited.
  • Legal obligation: We are required to maintain financial records for tax and regulatory compliance under UK law.
  • Legitimate interests: Processing payment data to manage disputes and chargebacks, where this does not override your rights.

5. Third-Party Payment Processors

To collect and process payments, we use the following third-party payment processors:

  • Stripe – Payment processing (PCI DSS compliant)
  • PayPal – Payment processing
  • Thrivecart – Shopping cart and checkout

These processors handle your payment card details directly. The Money Panel Ltd does not store your full payment card details. We receive only confirmation of successful transactions and limited card information (such as last four digits) for record-keeping.

We ensure that all third-party payment processors have appropriate data processing agreements in place and comply with applicable data protection and payment card industry standards.

6. Data Sharing

We share personal data with the following parties:

  • Catherine Morgan Limited (Jersey): As the entity on whose behalf we collect payments, we share transaction confirmations, payment records, and associated identity and contact data with Catherine Morgan Limited. This sharing is governed by the Agency Agreement between the two entities.
  • Payment processors: As described in Section 5 above.
  • Professional advisors: We may share data with our accountants or legal advisors where necessary for financial reporting or dispute resolution.
  • Law enforcement or regulatory bodies: Where we are required to do so by law or to protect the rights, property, or safety of our users or the public.

We do not sell, rent, or otherwise share your personal data with any third party for marketing purposes.

7. International Data Transfers

Your personal data is transferred from The Money Panel Ltd (UK) to Catherine Morgan Limited (Jersey) as part of the payment collection process. Jersey has been recognised by the European Commission as providing an adequate level of data protection. Accordingly, transfers between the UK and Jersey do not require additional safeguards.

Where payment processors are based outside the UK or EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions, before any transfer of personal data takes place.

Use of Artificial Intelligence Tools

We may use artificial intelligence (AI) tools, including but not limited to OpenAI (ChatGPT), Anthropic (Claude), and Google (Gemini), to assist with business operations such as content creation, communications drafting, programme development, and administrative tasks.

Where AI tools are used in connection with our Services, we take the following steps to protect your data:

We minimise the personal data shared with AI tools and anonymise or pseudonymise client information wherever practicable. We do not use AI tools to make automated decisions about you that produce legal or similarly significant effects. Where your personal data is processed by AI tools, this is done under our instruction and subject to the data processing agreements we hold with those providers. AI-generated content is reviewed by a qualified human before being shared with you or used in your coaching programme.

Data shared with AI tools may be transferred to the United States. Please refer to the International Transfers section of this policy for details of the safeguards in place.

We do not use your personal data to train AI models. Our agreements with AI providers restrict the use of input data for model training purposes.

8. Data Retention

We retain payment-related personal data for the following periods:

  • Completed transactions: 7 years (to comply with UK tax and accounting obligations under HMRC requirements)
  • Failed or abandoned transactions: 60 days
  • Cancelled transactions: 30 days
  • Refund records: 7 years (aligned with completed transaction retention)
  • Payment dispute or chargeback records: 7 years or until resolution, whichever is later

After the applicable retention period, your personal data will be securely deleted or anonymised.

9. Data Security

We take the protection of your personal data seriously and have implemented appropriate technical and organisational measures, including:

  • Use of PCI DSS-compliant payment processors for all card transactions
  • SSL encryption for all data transmission
  • Access to payment data restricted to authorised personnel only
  • Regular review of security practices

10. Your Rights Under Data Protection Law

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the following rights in relation to the personal data we process:

  • Right to be informed about how your personal data is used
  • Right of access to your personal data
  • Right to rectification if your personal data is inaccurate or incomplete
  • Right to erasure (subject to our legal obligations to retain financial records)
  • Right to restrict processing of your personal data
  • Right to data portability
  • Right to object to processing of your personal data

To exercise any of these rights in relation to payment data processed by The Money Panel Ltd, please contact us at hello@themoneypanel.co.uk. For all other data rights requests (including data related to services, programmes, coaching, or assessments), please contact Catherine Morgan Limited at support@catherinemorgan.com.

We will respond to all legitimate requests within one month.

10A. Important Note on Erasure Requests

Please note that The Money Panel Ltd is required by UK law (including HMRC regulations) to retain certain financial records for a minimum period. Where you request erasure of payment data that we are legally required to retain, we will inform you of the legal basis for continued retention and will delete the data once the retention period has expired.

11. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the relevant supervisory authority:

UK Information Commissioner’s Office (ICO)

  • Website: https://ico.org.uk/
  • Telephone: 0303 123 1113

As Catherine Morgan Limited (Jersey) is the data controller for all services, you may also wish to contact the Jersey Office of the Information Commissioner (JOIC):

  • Website: https://jerseyoic.org/
  • Address: 2nd Floor, 5 Castle Street, St Helier, Jersey, JE2 3BT
  • Telephone: +44 (0)1534 716530

12. Cookies and Website Tracking

The Money Panel website (https://themoneypanel.co.uk) may use cookies and similar tracking technologies. For full details about the cookies used on this website and how to manage your preferences, please refer to our Cookie Policy.

Where cookies on this website collect personal data, Catherine Morgan Limited (Jersey) is the data controller for that data. Any data collected through cookies is processed in accordance with the Catherine Morgan Limited Privacy Policy available at https://catherinemorgan.com/privacy-policy.

13. Money StoryTypes® – Data Transition Notice

In May 2025, The Money Panel Ltd acquired Money StoryTypes (Jersey) Ltd, including all intellectual property and associated data. Following the restructuring of our company operations, all Money StoryTypes® data is now controlled by Catherine Morgan Limited (Jersey) as the sole data controller.

If you previously completed a Money StoryTypes® assessment, your data has been transferred to Catherine Morgan Limited in accordance with applicable data protection law. For any queries about your Money StoryTypes® data, please contact Catherine Morgan Limited at support@catherinemorgan.com.

The Money Panel Ltd no longer processes or controls any Money StoryTypes® data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the Last Updated date will be amended. We will endeavour to provide 30 days’ notice of any material changes. Your continued use of the website after changes are posted constitutes acceptance of the updated policy.

15. Contact Information

For payment-related data queries:

  • Email: hello@themoneypanel.co.uk
  • Company: The Money Panel Ltd
  • Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
  • Company Number: 10267198

For all other data and service queries:

  • Email: support@catherinemorgan.com
  • Company: Catherine Morgan Limited
  • Trading Name: The Money Panel
  • Registered Office: 1-3 Colomberie, St Helier, Jersey, JE2 4QB
  • Company Number: 137407 (Jersey)

16. Governing Law

This Privacy Policy and any dispute or claim arising out of or in connection with it (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of Jersey, Channel Islands. The Royal Court of Jersey shall have exclusive jurisdiction to settle any dispute or claim.