Privacy Policy

Introduction

This privacy policy applies between you, the user of this website and our services, and Moovafy Ltd (“Moovafy”, “we”, “us”), a company registered in England and Wales, company no. 14908382, registered office C/O Bwbca Limited, Office 44, A30 Business Centre, Okehampton, Devon, EX20 1BG. We take the privacy of your information seriously. Please read this policy carefully.

For purposes of UK GDPR and the Data Protection Act 2018, Moovafy Ltd is the “data controller”, we determine the purposes for which, and the manner in which, your data is processed. We’re registered with the Information Commissioner’s Office (ICO) under registration reference ZB554263.

Data we collect

Depending on how you use Moovafy, we may collect:

• Name and last name
• Contact information: email address, phone number, home or business address
• Story content: what you write, and any photos or videos you upload
• Household type, budget, region and area (for renter/buyer/pre-seller stories)
• Agency details, for agents making contact: agency name, and the details you give us when reaching out about a story
• Payment and billing information you provide when paying by bank transfer, for invoicing purposes, we do not collect or store any card or bank details
• A testimonial, if you choose to share one about your experience, we don’t ask for your name alongside it unless you tell us to include it
• Anonymised, aggregate usage data: which pages are viewed and which buttons or links are used, including anonymous “this story helped me” reactions, plus general device, browser and country-level information, none of it tied to your name or any other identifier (see “Cookies & analytics” below)

How we collect data

We collect data that you give us directly, for example when you submit a story, get in touch as an agent, or contact us, and anonymised, aggregate usage data collected automatically as you use the website (see “Cookies & analytics” below).

How we use your data

We use your data to:

• publish your story on the platform (with your consent, and only the fields you’ve agreed to make public)
• personally check and respond to agents who get in touch about a story
• deliver messages from agents we’ve personally checked to story writers (see “Messaging & agent contact” below)
• feature a testimonial you’ve shared, if you’ve given us one, on our website or social media
• improve our products and services
• respond to enquiries and provide support
• send you updates about Moovafy where you’ve consented to this

Where we rely on “legitimate interests” as our basis for processing, you have the right to object, see “Your rights” below.

Messaging & agent contact

This section is central to how Moovafy works, so we want to be explicit about it. Right now, this process is handled personally by Moovafy staff, rather than automatically by the platform, that will change as we build out self-serve tools, and we’ll update this policy when it does.

• When an agent gets in touch wanting to reach a story writer, we personally check they’re a genuine, practising agent before doing anything further.
• We then pass the agent’s own contact details to the story writer, along with their message, by email.
• We do not send a story writer’s contact details to an agent, automatically or otherwise, at any point. The only way an agent receives a story writer’s personal contact details is if the story writer chooses to reach out to them directly, using the details we’ve provided, that action happens entirely outside Moovafy, and is the story writer’s own choice.
• Sellers who already have an instructed agent are not contacted through Moovafy at all. Their story instead displays their agent’s name, and interested buyers are directed to that agent’s own listing, where one’s been shared.
• We keep a record of these enquiries (agent, recipient, timestamp, and message content) for safety, dispute resolution, and to identify misuse. This record is only accessible to Moovafy, not to any third party, other than as required by law.

Payment data

We currently invoice agents directly for our monthly fee, sellers directly for the story fee where it applies, and anyone directly for a Boost or our story writing service where used, all paid by bank transfer. We do not collect or store any card or bank details ourselves for this, you pay into our business bank account, and we don’t need your payment details to make that happen. We retain records of invoices and payments received (amount, date) for accounting and legal purposes.

Who we share data with

We may share your data with the following providers, who process it on our behalf and under our instructions:

• Vercel, who host our website and provide our privacy-friendly, cookieless page analytics
• Supabase, who provide our database and secure file storage
• Resend, who send emails on our behalf, for example enquiry and story-submission notifications
• an agent we’ve personally checked, but only the fields you’ve consented to publish on your story, plus (only if you choose to reach out to them yourself) whatever you share with them directly
• Technical contractors and developers who help us build and maintain Moovafy, including the founders themselves, may have limited access to data as part of building, testing, or fixing the platform, only ever for that purpose
• Anthropic, who provide Claude, the AI assistant we use to help build and maintain the site. Claude may process data that appears in our codebase or database while we’re actively working on development, debugging, or maintenance, not as part of normal day-to-day site operation

Some of these providers may process your data outside the UK, including in the United States. Where this happens, we rely on appropriate legal safeguards, such as the UK’s International Data Transfer Addendum or the UK extension to the EU-US Data Privacy Framework, so your data continues to receive an equivalent standard of protection.

We do not sell your data to third parties.

Keeping data secure

We use technical and organisational measures to protect your data, including secure hosting, access controls limiting who at Moovafy can see message content and personal data, and encrypted transmission of data between your browser and our servers. If you suspect any misuse, loss, or unauthorised access to your data, please contact us immediately at info@moovafy.co.uk.

Data retention

We keep data only for as long as it’s needed, and different types of data have different retention periods:

• Story content and personal details:stories are active and messageable for 3 months, then automatically unpublished. We aim to email you a reminder before that happens, but it’s still your responsibility to get in touch if you’d like to keep your story live, just in case a reminder doesn’t reach you. Your personal data is fully erased shortly after your story comes down, unless you reactivate it.
• Agent enquiries and forwarded messages: we keep a record of these (agent details, recipient, and message content) for around 24 months for safety and dispute-resolution purposes, then anonymised or deleted, unless a message is part of an active complaint or investigation, in which case we may keep it longer.
• Payment and invoicing records:UK law requires us to keep financial records (typically for 6 years) for tax and accounting purposes. This applies even if you’ve asked us to delete your other data, we can erase your story and profile, but not records we’re legally required to keep.
• General Contact Us enquiries (not related to an agent introduction): kept for around 12 months, then deleted, unless we need to keep it longer to resolve an ongoing query.
• Anonymised interaction data(page views, click labels, and “this story helped me” reactions, see “Cookies & analytics” below): since this can’t be tied back to you individually, it isn’t personal data, so we don’t apply a deletion schedule to it, we may keep it indefinitely in aggregate form to understand trends over time.
• Testimonials:kept until you ask us to remove yours, or indefinitely if you haven’t included anything that identifies you personally.
• If you ask us to delete your data at any time, we’ll do so faster than the automatic timelines above, subject only to the payment-records exception.

Even after deletion, some data may briefly persist in backups before being purged in the normal course of our backup cycle.

Your rights

Under UK GDPR, you have the right to:

• Access: request a copy of the data we hold about you
• Correct: have inaccurate or incomplete data corrected
• Erase: request deletion of your data
• Restrict: limit how we use your data
• Port: request your data be moved or transferred
• Object: object to processing based on legitimate interests

To exercise any of these rights, contact us at info@moovafy.co.uk. If you’re unhappy with how we’ve handled a request, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies & analytics

Moovafy doesn’t use cookies, and we don’t track you as an individual, there’s no visitor ID, no cross-site tracking, and no advertising or profiling of any kind.

To help us understand how the site is used and keep improving it, we collect two kinds of anonymised, aggregate data:

• Page analytics, via Vercel Web Analytics: aggregate visitor and page-view counts, general device, browser and country-level information. This runs without cookies and without storing your IP address against any identifier.
• Interaction analytics, logged by us: which page a click happened on and a general label for what was clicked, for example a “Boost” button. We don’t record your IP address, browser details, or any identifier that could link two events back to the same visitor, so this only ever adds up to aggregate counts, never a profile of you.

The only thing we store in your browser is a small note that you’ve dismissed the “we don’t use tracking cookies” notice, so we don’t show it to you again. It isn’t a cookie, isn’t used for tracking, and you can clear it any time via your browser settings.

Because none of this identifies you individually, UK PECR rules on cookie consent don’t apply, we show the notice above purely for transparency, not because we’re asking your permission for something.

Changes of business ownership

If Moovafy is sold, merged, or otherwise transfers control of all or part of the business, your data may transfer as part of that change, and would continue to be used under the terms of this policy (or an updated version you’d be notified of).

Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page, and continued use of Moovafy after a change means you accept the updated policy.

Contact us

Questions about this policy, or about your data? Email us at info@moovafy.co.uk, or use our Contact Us page.