This privacy statement describes how MoneyOak SA, with registered offices at Avenue Louise 523 at 1050 Brussels (Belgium), company number 0763.340.510 (“MoneyOak” or “us”) processes your personal data.

“Personal data” refers to any information related to an identified or identifiable natural person.

As controller, we endeavour to process your personal data in compliance with the European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).

This privacy policy does not apply to processing activities covered by a specific privacy policy (for example, the one applicable to recruitment).

How do we process your personal data?

We process your personal data for the following purposes:

(a) Management of the contact form

We process your personal data in order to manage and answer your questions when you contact us via our contact e-mail address or through the contact form available on our website. In this case, we process the following data that you provide to us:

• Identification data (name, surname)
• Contact data (e-mail address)
• Possibly any other type of personal data you communicate to us (via our contact form).

The legal basis is our legitimate interest (freedom of entrepreneurship).

We will keep this personal data for a maximum period of 2 years after the last meaningful contact between you and us.

(b) Client Management

In the context of the management of our clients, we process the following personal data of our clients (natural persons) and/or the contact persons (employees or representatives) of our customers (legal entities):

• Identification data (name, surname)
• Contact data (postal address, e-mail address, telephone number)
• Professional and employment data (company, position, BCE number)
• Financial data (e.g. payment data)
• Personal characteristics (language)

The legal basis of the processing of your personal data is contractual necessity. This personal data must be provided to enable the performance of the contract.

The personal data you provide may be supplemented through public sources (e.g. social networks such as LinkedIn) or by your employer.

Unless there is another applicable legal retention period, the personal data will be retained for a period of 10 years after the end of the contractual relationship with our client.

(c) Supplier management

In the context of the management of our suppliers, we process the following personal data of our suppliers (natural persons) and/or the contact persons (employees or representatives) of our suppliers (legal entities):

• Identification data (name, surname)
• Contact data (postal address, e-mail address, telephone number)
• Professional and employment data (company, position, BCE number)
• Financial data (e.g. payment data)
• Personal characteristics (language)

The legal basis of the processing of your personal data is contractual necessity. This personal data must be provided to enable the performance of the contract.

The personal data you provide may be supplemented through public sources (e.g. social networks such as LinkedIn) or by your employer.

Unless there is another applicable legal retention period, the personal data will be retained for a period of 10 years after the end of the contractual relationship with the supplier.

(d) Direct marketing

We may process the following personal data in order to send you direct marketing communications :

• Identification data (name, surname)
• Contact details (postal address, email address, phone number)
• Personal characteristics (language)
• Consumption habits

If you are a customer of MoneyOak, the legal basis is our legitimate interest (freedom of entrepreneurship and direct marketing). If you are not a customer of MoneyOak, the legal basis is your consent.

The personal data you provide can be supplemented through public sources (e.g. social networks such as LinkedIn).

We shall retain your personal data for a period of three years after the last meaningful contact with you.

We may also process personal data which is publicly available on LinkedIn (in particular professional and education data) of employees of potential clients (prospects) with the aim of providing these prospects with personalized offers regarding our services. The legal basis of the processing of this personal data is our legitimate interest (freedom of entrepreneurship). This (publicly available) personal data shall be retained for a period of up to six months after its collection.

(e) Use of testimonials and images for promotional purposes

We may ask our suppliers and/or clients (or, if applicable, our contact person within the supplier and/or client) to share a testimonial about their professional relationship with MoneyOak (possibly accompanied by a photo). If you agree, we will process the data necessary to collect and use your testimonial for MoneyOak’s promotional purposes, namely:

• Your name and surname
• Professional data (company, position)
• Testimonial
• Photo (if applicable)

The legal basis for the processing of this personal data is your consent.

Your personal data will be kept for a maximum period of three years after collection.

(f) Compliance with our legal obligations (including tax and accounting obligations)

We process the following personal data in order to comply with our legal obligations (including tax and accounting obligations):

• Identification data (name, surname)
• Contact data (postal address, e-mail address, telephone number)
• Professional and employment data (company, position, BCE number)
• Financial data (e.g. payment data)
• Personal characteristics (language)

The legal ground is our legal obligation.

The personal data shall be retained in accordance with the legal retention periods.

Who are the recipients of your personal data ?

We may share your personal data with a limited number of recipients:

• Our service providers
• Our professional advisors and lawyers
• Banks and payment service providers
• Competent national and European authorities
• Other MoneyOak entities

MoneyOak does not transfer personal data outside the European Union.

Which rights do you have regarding the processing of your personal data?

According to the GDPR, you have the following rights regarding the processing of your personal data:

• to access your personal data and receive a copy of your data;
• to rectify your data if it is inaccurate;
• to object to the processing of your personal data for direct marketing purposes and for reasons related to your particular situation;
• to erase your personal data (“right to be forgotten”) or restrict the processing of your data;
• when the processing is based on consent, to retract your consent at any time;
• to data portability when the processing is based on consent or contractual obligation.

To exercise these rights, you must respect the conditions provided by the GDPR. In case of doubt about your identity, we reserve the right to ask for a proof of your identity.

You may contact us at the address below if you have any question or complaint regarding your data protection rights.

You have in any case the right to lodge a complaint with the competent supervisory authority (for Belgium, this is the Belgian Data Protection Authority).

Which security measures are implemented?

We have implemented adequate security measures of your personal data. These measures include technical and organisational measures necessary to protect your personal data against the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of personal data. Nevertheless, no security system can guaranty 100% of security. You also have an important role to play in the security of your personal data by keeping your account details confidential and choosing a strong password.

How to contact us

To exercise your data protection rights or if you have any question relating to the processing of your personal data, you may contact us or our data protection officer (DPO) by sending an email to privacy@moneyoak.com or contact by post:

MoneyOak SA (To the attention of the data protection officer)
Avenue Louise 523
1050 Brussels

Updates

Please note that we reserve the right to update this document from time to time. In that case, the updated document shall be posted on our website. We therefore invite you to check our website regularly for any updates of this privacy policy.

This document was last updated in April 2025.