Monzenta Privacy Notice

1. Who we are

Monzenta is an online service that helps people explore, compare and plan opportunities to make extra money.

Monzenta is operated by Patrick Farrell, trading as Monzenta, who is the data controller responsible for personal information collected through the service.

Contact email: hello@monzenta.com

If you have questions about this Privacy Notice, how your personal information is used or wish to exercise your data protection rights, you can contact us using this email address.

2. Information we collect

The information we collect depends on how you use Monzenta.

Account information

If you create a Monzenta account, we may collect:

• Your email address.
• Your account identifier.
• Authentication information necessary to manage your account.
• Your account preferences and settings.
• Your display name, where applicable.

When you register using email and password, Monzenta does not ask you to provide a separate name. A display name may be generated from the part of your email address before the @ symbol.

If you register or sign in using Google, Google may provide your email address, Google account identifier, name and relevant profile information, such as an avatar.

Passwords are handled through our authentication provider. Monzenta does not store passwords in readable form.

We may also retain a record of your acceptance of our Terms of Use, including the document version and date of acceptance.

Planner information

When you use the Monzenta Planner, we may collect information you enter, including:

• Your postcode district, town or city.
• Your financial target and target deadline.
• The amount of money you can safely make available.
• The time you have available and your preferred working hours.
• Your work preferences and relevant experience.
• Your preferred opportunity categories and route selections.
• Your risk preferences and relevant eligibility answers.
• Your confirmation that you are aged 18 or over.
• Your answers about whether essential living expenses are covered.
• Relevant information about your existing banking relationships, vehicle ownership, driving licence and other capabilities or circumstances.

We use this information to assess which opportunities may be relevant to you and to calculate potential routes towards your stated target.

Plans and activity

For registered users, we may store information relating to their Monzenta plans and use of the service, including:

• Saved plans, goals and previous plan versions.
• Opportunities included in a plan and their order.
• Estimated rewards, projected cash, time requirements and upfront capital.
• Eligibility and suitability results, including reasons why opportunities may have been excluded.
• Progress updates and completed activities recorded through the Planner.
• Amounts and time taken that you tell us you have received or used.
• Relevant safety acknowledgements and gambling-related activity.

Financial amounts entered as actual receipts are user-reported figures. Monzenta does not independently verify every payment made by an external provider.

Guest users

You can use the Monzenta Planner without creating an account.

When you use the Planner as a guest, your questionnaire answers, generated plan and associated progress are temporarily stored in your browser's session storage so that you can continue using your plan during that browser session.

The information required to calculate your plan is transmitted to Monzenta and processed to provide the results you request. Guest plans are not created as permanent anonymous plan records in our application database.

Guest information held in session storage is normally removed when you close the relevant browser tab or session. If you leave before saving your plan to an account, your unsaved answers, plan and progress may be lost.

You can choose to create an account or sign in and save your guest plan. Where you do this, we will attempt to transfer your plan and eligible progress into your registered account.

The transfer uses your guest planning information to create a saved account plan. The plan may be recalculated using the opportunity information available at the time of transfer. If an earlier opportunity or progress update cannot be matched reliably, some progress may not transfer.

Guest-recorded money receipts are not automatically treated as verified payments. Any actual cash received must be separately confirmed through the authenticated Monzenta process.

We do not create permanent anonymous guest plan records in our application database.

Technical information

When you use Monzenta, our infrastructure and service providers may process limited technical information, including:

• IP address.
• Browser and device information.
• Website request and connection information.
• Security and diagnostic information.
• Authentication and session information.

This information helps provide, secure and maintain the service.

3. How we use your information

We use personal information for the following purposes:

Profiling and automated recommendations

Monzenta uses predefined rules, opportunity information and mathematical calculations to assess and filter opportunities.

When generating your plan, the Planner may consider information such as:

• Your available capital.
• Your financial target and deadline.
• Your available time.
• Your location.
• Your eligibility answers and capabilities.
• Your selected opportunity categories and preferences.
• Relevant risk and safety restrictions.

This process is a form of profiling because information about your circumstances and preferences is used to assess which opportunities may be suitable for you.

The Planner uses a rule-based calculation and optimisation system. It does not currently use artificial intelligence, machine learning or automated chatbot technology to generate recommendations.

Monzenta does not make decisions about you that produce legal effects or similarly significant effects based solely on automated processing.

The results are intended to help you explore available opportunities. They are not binding decisions, guaranteed earnings or financial advice. You decide which opportunities to pursue, and external providers make their own acceptance and eligibility decisions.

4. Our lawful bases for processing

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the activity, we rely on the following lawful bases.

Contract and steps taken at your request before entering into a contract

We use this basis where processing is necessary to provide the Planner functionality you request, manage your account, save your plans and provide registered account features in accordance with our Terms of Use.

This may also cover relevant steps taken at your request before entering into an account agreement.

Legitimate interests

We may rely on legitimate interests where necessary to:

• Protect Monzenta against fraud, misuse and security threats.
• Maintain and secure our website and infrastructure.
• Investigate suspicious account or service activity.
• Administer appropriate affiliate relationships and referral attribution where personal information is involved.
• Maintain the reliability and integrity of the service.

When relying on legitimate interests, we consider whether the processing is necessary and whether your rights and interests outweigh ours.

Consent

Where required, we rely on your consent for optional cookies and similar technologies and for future marketing communications.

You can withdraw consent at any time where processing is based on consent.

Legal obligation

We may process or retain personal information where necessary to comply with applicable legal requirements, respond to lawful requests or maintain records required by law.

The lawful basis depends on the particular processing activity. We do not assume that one lawful basis automatically applies to every use of your information.

5. Promotional offers and affiliate links

Monzenta displays opportunities supplied by third-party providers. These may include bank-switching offers, promotional betting opportunities, casino promotions, referral offers, cashback, flexible work and other ways to earn extra money.

Some opportunities include affiliate links.

When you follow an affiliate link, the relevant provider or affiliate network may receive a referral identifier or other tracking information included in the link. This may allow the provider or network to attribute a visit or subsequent sign-up to Monzenta.

Monzenta may receive commission when you use certain affiliate links. Commission arrangements vary between providers.

We aim to assess and display opportunities according to their suitability and relevant merits, rather than simply according to the commission they may generate.

We do not deliberately include your full Planner profile, financial target, available bankroll or private risk-related answers in an outbound affiliate link as part of normal referral attribution.

Monzenta does not currently operate a separate database-based outbound click-tracking system, third-party advertising pixel or automatic affiliate conversion API that receives your Planner answers.

Once you leave Monzenta, the external provider or affiliate network may collect information about your visit, browsing activity or subsequent registration under its own privacy notice and terms.

Information about referrals or completed opportunities that becomes available to Monzenta depends on the reporting arrangements provided by the relevant affiliate partner.

6. Gambling-related information

Some Monzenta opportunities involve promotional betting or casino-related promotions.

Where relevant, we may process:

• Your age confirmation.
• Your answers about essential living expenses.
• Your relevant risk and eligibility answers.
• Gambling-related safety acknowledgements.
• Gambling opportunities included in your plans.
• Progress that you record in relation to those opportunities.
• Amounts or rewards you tell us you have received.

We use this information to operate relevant eligibility filters and safety features, display your activity and progress, and help determine whether certain opportunities are appropriate to show.

We treat gambling-related safety information with particular care.

We do not intend to use your answers about essential expenses or gambling-related safety preferences for unrelated marketing. These answers are not deliberately transmitted to betting or casino operators through ordinary referral links.

You should be aware that when you visit an external gambling provider, that provider will apply its own privacy notice, terms, eligibility checks and responsible gambling procedures.

7. Who we share information with

We may share personal information with service providers and other organisations where necessary to operate Monzenta or provide a service you request.

These may include:

Database and authentication infrastructure

Monzenta uses Lovable Cloud and its underlying Supabase infrastructure for database services, authentication, server functions and access controls.

The underlying production database, authentication service and backups are hosted on AWS infrastructure in the Stockholm, Sweden region.

These providers and their infrastructure partners process registered user information and related account data to support Monzenta.

Hosting and website infrastructure

Our hosting and edge infrastructure includes Cloudflare services, which may process IP addresses, request information, browser information and connection metadata to deliver and protect the website.

Application hosting and deployment infrastructure is also provided through Lovable.

Google authentication

If you choose to register or sign in using Google, Google processes relevant information through its identity service and provides account information required to authenticate you.

Google also processes information about your Google account under its own privacy policies.

Authentication emails

Our authentication infrastructure supports account verification and password-reset communications.

The email delivery functionality currently uses the default email service provided through our authentication infrastructure. This may process recipient addresses and authentication-related links or codes.

Affiliate networks and opportunity providers

External banks, bookmakers, casino operators, employers, research providers and other opportunity providers may receive referral identifiers or information included in links you choose to follow.

They operate under their own privacy notices and terms once you visit their websites.

Professional advisers and authorities

We may share relevant information with professional advisers, accountants, legal representatives or public authorities where necessary for legitimate legal, accounting, security or regulatory purposes.

We do not sell your personal information.

We do not provide marketing partners with routine access to your private Planner information or gambling-related safety answers simply because they advertise an opportunity on Monzenta.

Google Analytics, Microsoft Clarity, Meta Pixel and TikTok Pixel are not currently active on the website.

8. Cookies and similar technologies

Monzenta uses cookies and similar technologies, including browser storage, to support website functionality, account authentication, security, user preferences and safety features.

These technologies may include:

• Authentication storage used to maintain your signed-in session.
• Browser storage used to remember cookie consent preferences.
• Browser storage used to remember certain safety acknowledgements.
• Browser storage used for certain local Casino page interactions.
• Temporary session storage used to hold guest Planner answers, generated plans and progress.
• Temporary session storage used for the short-lived Casino guest access token.

Guest Planner information is stored in session storage and is normally cleared when the relevant browser tab or session ends.

We also provide Cookie Settings so that you can manage your optional analytics and advertising preferences.

The current consent controls allow you to:

• Accept all optional categories.
• Reject optional categories.
• Customise analytics and advertising preferences separately.

Google Analytics, Microsoft Clarity, Meta Pixel and TikTok Pixel are not currently active or collecting information through Monzenta.

We assess the use of cookies and similar storage technologies according to their specific purposes and applicable privacy and electronic communications requirements. Where consent is required, we will seek the necessary permission before using the relevant technology.

You can change or withdraw optional consent through Cookie Settings where available.

9. Marketing emails

Monzenta does not currently operate an active marketing newsletter or marketing email programme.

We may introduce optional marketing communications in the future, which could include:

• New ways to earn extra money.
• New or improved opportunities.
• Useful money-related information.
• Monzenta product updates.
• Selected partner offers.

If marketing communications are introduced, we will obtain any consent or other permission required by applicable law. Marketing preferences will be optional and will not be a condition of using the Planner or creating an account.

You will be able to unsubscribe from marketing communications at any time where such communications are introduced.

We may still send essential service messages, including account verification, password resets and important account or security notices.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, subject to applicable legal requirements.

Our current approach is as follows.

Guest plans

Guest questionnaire answers, plans and progress are held in browser session storage. They are normally removed when the relevant browser tab or session ends.

We do not retain guest plans as permanent anonymous plan records in our application database.

Certain local browser preferences and safety acknowledgements may remain on your device until they are cleared or changed.

Registered accounts and saved plans

Registered account information, saved plans, plan versions, eligibility information and progress records are retained while the account remains active and the information is needed to provide the service.

Saved plan and financial outcome records are currently retained in the database while the associated account exists, unless they are deleted or anonymised following an appropriate request or other lawful review.

There is not currently an automated job that deletes accounts or saved plans after 24 months of inactivity.

Our intended administrative approach is to review accounts after approximately 24 months of inactivity and may involve contacting the account holder. This is an administrative policy rather than an automatic deletion process.

Financial outcome records

Information you enter about money received and completed opportunities may remain associated with your saved plan and account history for as long as it is needed to provide the service, maintain accurate records or address legitimate legal and operational requirements.

Technical and security information

Technical, diagnostic and security information is retained for the period reasonably required to operate, protect and troubleshoot the service. Retention may also depend on the settings and policies of our infrastructure providers.

Consent and preference records

We retain relevant consent and preference information for as long as reasonably necessary to remember your choices and demonstrate how those choices were applied.

Temporary security tokens

Some temporary security tokens, such as the Casino guest access token, have short expiry periods. The relevant Casino access token is designed to expire after approximately 15 minutes.

Backups

Our infrastructure providers maintain backups to support service recovery. When information is deleted from live systems, copies may remain in rolling backups for a limited period before those backups expire or are replaced. The current backup retention arrangement is understood to be approximately seven days, subject to the infrastructure provider's configuration.

If information is restored from a backup, relevant deletion or correction requests may need to be reapplied.

We will delete or anonymise personal information when it is no longer required, subject to applicable legal obligations and legitimate reasons for retention.

11. Keeping your information secure

We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures include:

• Authentication and account security controls.
• Database access restrictions.
• Row-Level Security controls designed to restrict access to users' own account information.
• Restricted permissions for administrative and service functions.
• Security measures provided by our infrastructure providers.
• Controls designed to protect sensitive account and plan operations.

Access to personal information should be limited to people who need it to perform their role.

We do not intend for team members to have routine access to users' private financial or gambling-related activity.

No internet-based service can guarantee absolute security. If a personal data breach occurs, we will assess it and take the steps required by applicable data protection law.

12. Your data protection rights

Depending on the circumstances and applicable legal conditions, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your personal information.
• Ask us to restrict how we process your information.
• Object to certain types of processing, including processing based on legitimate interests.
• Request a copy of information you have provided in a portable format, where the legal conditions for portability apply.
• Withdraw consent where processing is based on consent.
• Complain to the Information Commissioner's Office (ICO).

To exercise your rights, contact:

hello@monzenta.com

Requests are currently handled manually. We may ask for appropriate information to verify your identity before providing personal information or making changes.

We aim to respond without undue delay and within the time limits required by data protection law. In most cases, this means within one calendar month. Complex requests or multiple requests may allow an extension where the law permits, and we will explain any extension within the required timeframe.

You can complain to the ICO at:

https://ico.org.uk/make-a-complaint/

Some rights are subject to legal conditions and exceptions. We may need to retain limited information where the law permits or requires us to do so.

13. Account deletion

You can request deletion of your Monzenta account by contacting:

hello@monzenta.com

There is currently no automated self-service account deletion function. Deletion requests are reviewed and processed manually.

When we receive a request, we will assess the account information, saved plans and associated personal activity and take appropriate steps to delete or anonymise information where we no longer have a lawful reason to retain it.

Some information may need to be retained for legal, accounting, security, fraud-prevention or dispute-resolution purposes.

Where information must be retained, we will limit its use to the relevant purpose and retain it only for as long as necessary.

We will explain where a request cannot be fully completed or where particular information must be retained.

Monzenta does not currently operate paid subscriptions or a payment gateway.

14. Third-party websites

Monzenta may link to external websites operated by banks, betting operators, casino operators, employers, research providers, affiliate partners and other third parties.

When you leave Monzenta, the privacy practices and terms of the external provider apply.

We do not control how those websites collect, store or use your personal information.

You should review their privacy notices and terms before providing them with personal information, registering or participating in an opportunity.

15. International transfers

The primary Monzenta production database, authentication service and associated backups are hosted on AWS infrastructure in Stockholm, Sweden.

Some of our service providers are based outside the United Kingdom or may process information through infrastructure in other countries, including the United States and locations within their global networks.

Where personal information is transferred internationally, we are required to ensure that the transfer is permitted under applicable UK data protection law.

Depending on the destination and circumstances, permitted arrangements may include an applicable UK adequacy regulation, an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer condition.

The legal mechanism applicable to a particular provider depends on the relevant service, contractual arrangements and processing involved.

You can contact us using hello@monzenta.com to request further information about relevant international transfers and safeguards.

16. Children's privacy

Monzenta is intended for adults aged 18 and over.

We do not knowingly provide the service to people under 18.

The Planner includes an age confirmation requirement. This is a declaration made by the user and is not, by itself, independent verification of identity or date of birth.

Certain opportunities may have additional age or eligibility restrictions.

If we become aware that personal information has been collected from someone under 18 in circumstances where it should not have been, we will take appropriate steps to address it.

17. Changes to this Notice

We may update this Privacy Notice as Monzenta develops, new features or integrations are introduced, or legal requirements change.

The latest version will be published on the Monzenta website with its updated date.

If a change materially affects how we use personal information, we will take appropriate steps to bring it to users' attention.

Contact

Patrick Farrell, trading as Monzenta

Email: hello@monzenta.com