Legal

Privacy Policy

Last updated: 12 June 2026

1. Who we are

MoveGrid Ltd (“movegrid”, “we”, “us”) operates the website at movegrid.co.uk. We are registered in England and Wales. For any privacy-related questions, contact us at hello@movegrid.co.uk.

movegrid is the data controller for personal data processed through this website, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under registration reference ZC156470.

2. What data we collect

When you use movegrid, we may collect the following:

  • Account data — if you create a free movegrid account: your name, email address and sign-in method. If you sign in with Google, we receive your name and email address from your Google account. We also store the preferences you set during onboarding (whether you are planning a move, and whether you are buying, selling or renting) and the properties you choose to save.
  • Property search data — the addresses and postcodes you search for, including any associated identifiers (UPRN, UDPRN). These are stored in our database to cache results and improve performance.
  • Usage data — pages visited, search queries, error events, and browser information collected automatically by our hosting and error-monitoring providers.
  • Email address — if you submit a waitlist request or contact us directly.
  • Locally stored preferences — your theme preference (light/dark mode) and recently viewed properties are stored in your browser's localStorage. This data never leaves your device unless you are signed in.

3. How we use your data

  • To provide the property information service you requested
  • To operate your movegrid account — signing you in, personalising your dashboard, and syncing your saved properties across devices
  • To send essential account emails, such as sign-in (magic link) emails — these are not marketing emails
  • To cache property data so repeat searches are faster and do not incur additional API costs
  • To monitor errors and improve the reliability of the service
  • To notify waitlist subscribers when movegrid expands to new regions
  • To comply with legal obligations

4. Lawful basis for processing

We process your data under the following lawful bases:

  • Legitimate interests — caching property data, monitoring errors, and improving the service. We have assessed that our interests do not override your rights.
  • Consent — for waitlist communications. You may withdraw consent at any time by emailing us.
  • Contract — where processing is necessary to deliver the service you have requested, including operating your movegrid account and the features attached to it (saved properties, personalised dashboard).

5. Third-party services

movegrid uses the following third-party services to operate. Each has its own privacy policy:

Supabase

Database, authentication and account data

EU (Ireland)

Google

Optional 'Sign in with Google' authentication

USA/EU

Resend

Account and notification emails (sent from movegrid.co.uk)

EU (Ireland)

Vercel

Website hosting and deployment

USA (with EU options)

Sentry

Error monitoring

EU

Ideal Postcodes

UK address lookup

UK

Ordnance Survey

Address data (OS Places API)

UK

HM Land Registry

Sold price history

UK (public data)

MHCLG

Energy Performance Certificates

UK (public data)

Environment Agency

Flood risk data

UK (public data)

Police.uk

Crime statistics

UK (public data)

Department for Education

School data (GIAS)

UK (public data)

Ofsted

School inspection ratings

UK (public data)

Care Quality Commission

GP and dentist data

UK (public data)

Ofcom

Broadband availability data

UK (public data)

Public data sources (marked above) are provided under open government licences and contain no personal data.

6. Data retention

  • Account data — retained for as long as your account exists. If you ask us to delete your account, your profile, preferences and saved properties are permanently deleted within 30 days.
  • Cached property data — retained for up to 30 days after last access. Data that is never re-requested is automatically eligible for removal.
  • Waitlist email addresses — retained until the service launches in your region or until you request deletion.
  • Error logs — retained for 90 days by Sentry.
  • LocalStorage data — stored on your device indefinitely until you clear your browser data.

7. Cookies and local storage

movegrid uses the following browser storage:

sb-*-auth-token

Cookie

Keeps you signed in to your movegrid account. Strictly necessary — only set when you sign in

Expires: Up to 1 year, or until you sign out

mg-theme

localStorage

Saves your light/dark mode preference

Expires: Until cleared

mg_recent_searches

localStorage

Stores recently viewed properties (on-device only)

Expires: Until cleared

mg-rate-bypass

Cookie (httpOnly)

Exempts authorised users from API rate limiting

Expires: 1 year

We do not use tracking cookies or third-party advertising cookies. All cookies we set are strictly necessary for the service to work, so no cookie consent banner is required for them under UK PECR. LocalStorage preferences are never transmitted to our servers.

8. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Restriction — ask us to limit how we use your data
  • Objection — object to processing based on legitimate interests
  • Portability — receive your data in a machine-readable format

To delete your movegrid account, email us from the address you signed up with and we'll remove your account and all associated data within 30 days.

To exercise any of these rights, email hello@movegrid.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) ↗.

9. International transfers

Some of our third-party providers (notably Vercel) may process data outside the UK. Where this occurs, we rely on adequacy decisions or standard contractual clauses to ensure your data is protected to UK GDPR standards.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of movegrid after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at: hello@movegrid.co.uk