Privacy notice

What data do we use and where does it come from?

FAQ questions are submitted without a name or email address. A browser identifier lasting one day and its hash are stored to limit submissions. Original submissions are retained for 90 days and then removed during scheduled cleanup. Administrators may publish an edited question and their answer on the FAQ page. Do not include personal information in your question.

For your account, we process your name, email address, phone number, account type, verification information and settings. For moving services, we process the addresses you are moving from and to, the move date, property and additional service details, quote requests, quotes, bookings, questions, messages and attachments.

We also process yes/no reviews of completed moves and optional written feedback. Aggregated percentages appear with quotes. Written feedback is visible to the reviewed company and administrators. A representative’s role and vehicle registration number are visible only to that representative and administrators.

The administrative deletion and blocking log stores the email, company name and business ID, event time and administrator reason to investigate events and prevent misuse. The log is separate from sign-in accounts and does not prevent new accounts using the same email address.

For company profiles, we process company identification and contact details, representative details and role, a company vehicle registration number, insurance and approval information, and any additional information requested. For support tickets, we process contact details, the content of the ticket and records of how it was handled. Using the service also generates sign-in, session and technical log data.

Most information comes from you. A customer or company representative may provide details for another contact person. Quotes, messages and replies come from the people who send them. If you choose an available Google or Apple sign-in option, we receive the account and profile details needed to sign you in.

Why do we use your data?

We use account, quote request, quote, booking and message data to provide the service and carry out the steps you request (GDPR Article 6(1)(b)). You need to provide the required information to create an account, publish a request or submit a quote. Additional information, photos and videos are optional.

Our legitimate interests are to verify company representatives, handle support and misuse, and protect the service, its users and our rights (Article 6(1)(f)). We also process data to meet legal obligations when required (Article 6(1)(c)).

You can manage optional notifications in your profile. We approve company access manually. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Who can see your data?

Approved moving companies can see details of open quote requests, such as towns, postcodes, move dates, photos and videos, and questions and answers shared with companies, including their attachments. Keep personal details and exact addresses out of shared text and attachments.

Authorised administrators may review quotes and public and private conversations to the extent necessary to enforce the rules, investigate misuse and keep the service secure. Access is restricted to authorised staff. This does not mean every message is reviewed in advance.

The selected moving company receives the street addresses once the booking is confirmed. Private conversations and their attachments are accessible to the parties and authorised staff. Support tickets are visible to the person who submitted them and the support team. The moving company is responsible for its own use of the data it receives to carry out the move.

We use Supabase for the database, sign-in and file storage. Technical operations, hosting and email delivery may also involve processing by service providers. When sending email notifications, Resend processes the recipient’s email address and the message. We may disclose information to authorities where required by law.

To estimate driving distance, Geoapify (KEPTAGO LTD) processes street names, postcodes, towns and street reference coordinates through its EU API. Names, house numbers, contact details, user or quote-request identifiers and the browser’s IP address are not sent. The estimate is stored with the quote request. Geoapify normally retains technical request logs for up to 24 hours, or up to two months in exceptional cases.

Is data processed outside the EEA?

Our providers may process data outside the European Economic Area (EEA). Supabase states that it also processes data in Singapore and the United States and uses EU Standard Contractual Clauses for these transfers. Where data is transferred outside the EEA, an applicable European Commission adequacy decision or appropriate safeguards such as the Commission’s Standard Contractual Clauses are used. Contact us for details of transfers and safeguards.

How long do we keep your data?

We keep account and company profile data while the relationship and access remain active. We keep requests, bookings, messages, attachments and support tickets for as long as they are needed to handle the matter, establish what happened or resolve a dispute. We may keep data for longer where required by law or for a legal claim.

In your profile, you can choose to delete closed quote requests older than one year and their related data. Deletion takes place during scheduled maintenance when it is enabled.

Cookies and browser storage

We use cookies to keep you signed in, support password resets, let guests access their support tickets and remember your language. Browser storage carries addresses from the home page to the form and keeps an unfinished request and its attachments while you sign in. A saved request can be resumed for 24 hours. You can clear site data in your browser settings. This may sign you out and remove your saved draft or access to a guest support ticket.

Your rights

You can request access to your data, correction, erasure or restriction of processing, and data portability where the conditions apply. You can object to processing based on legitimate interests on grounds relating to your circumstances. Email us at the address above. We may ask for information needed to verify your identity.

You can complain to a competent data protection authority, for example in the country where you live or work. In Finland, this is the Office of the Data Protection Ombudsman. In Sweden, it is the Swedish Authority for Privacy Protection (IMY).