Privacy Policy

Last updated: 22 February 2026

1. Who We Are

Move and Store is operated by Xiza Ltd (company number pending), registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data described in this policy.

Contact: misha@moveandstore.app

2. What Data We Collect

Operator Data

  • Name, email address, business name, phone number
  • Business address and operating details
  • Stripe Connect account identifiers
  • Subscription and billing records

End Customer Data

  • Name, email address, phone number
  • Collection and delivery addresses
  • Move dates and inventory details
  • Payment references (we do not store card numbers)

Automatically Collected

  • IP address, browser type, device information
  • Pages visited and actions taken (analytics)
  • Error and performance logs

3. How We Use Your Data

We process personal data for the following purposes:

  • Providing the service: Account management, quote generation, job scheduling, payment processing, and email notifications
  • Communication: Transactional emails (quotes, booking confirmations, receipts), service announcements, and support responses
  • Improvement: Analytics and error monitoring to improve the Platform
  • Legal compliance: Tax records, fraud prevention, and responding to lawful requests

4. Lawful Basis for Processing

  • Contract performance: Processing necessary to provide the service you signed up for
  • Legitimate interests: Analytics, security monitoring, and service improvements
  • Legal obligation: Tax and accounting requirements
  • Consent: Marketing communications (you may opt out at any time)

5. Data Sharing

We share personal data with the following categories of third parties:

  • Stripe: Payment processing (see Stripe’s Privacy Policy)
  • Supabase: Database hosting and authentication (EU data centres)
  • Vercel: Application hosting (edge, global CDN)
  • Resend: Transactional email delivery
  • Sentry: Error monitoring (no PII stored intentionally)

We do not sell personal data to third parties.

6. Data Retention

  • Active accounts: Data retained for the duration of the account
  • Deleted accounts: Data deleted within 30 days of account closure, except where retention is required by law (e.g. tax records: 7 years)
  • End customer data: Retained as long as the Operator account is active. Operators may delete individual customer records from their dashboard

7. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to erasure)
  • Object to data processing based on legitimate interests
  • Request data portability
  • Withdraw consent for marketing at any time

To exercise any of these rights, email misha@moveandstore.app. We will respond within 30 days.

8. Cookies

Move and Store uses essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. Analytics data is collected via server-side methods where possible.

9. International Transfers

Some of our service providers (Vercel, Stripe) may process data outside the UK/EEA. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), row-level security in our database, and role-based access controls.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint

12. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via an in-app notification.

Terms of Service
Privacy Policy