Skip to content

Privacy notice

How MMG uses local storage, managed accounts, postcodes and external services.

The practical information on this page is available now. The legal operator and contact details must be verified before the final public release.

Who controls the data

My Move Guide is operated under a sole-trader trading name. The legally responsible individual's name and reachable contact address must be confirmed here before public launch; no fictitious business identity or postal address is supplied.

Guest calculators and checklist

Most calculations run in your browser. A guest's selected journey, move date, completed tasks, custom task text and saved numerical calculator scenarios can be stored in the device's local storage. Browser storage can be deleted locally. Downloaded JSON files stay wherever the visitor saves them; MMG does not receive those backup files.

Private account data

Creating an optional account involves an email address, authentication records and, if a member elects to save, checklist settings, completed and custom tasks, expected moving date and approved calculator scenario settings. The cloud account uses managed authentication and user-scoped database access controls. Existing guest data is imported only with the user's explicit choice.

Purposes and lawful basis

The information needed to register, authenticate, save or delete an account is processed to provide the requested account service, generally under the contract basis. Security, misuse prevention, incident management and essential technical logs can rely on legitimate interests or applicable legal obligations. Marketing consent would be requested separately before any optional promotional messages; no consent is inferred from creating an account.

External postcode lookup and hosting

When a visitor enters two moving postcodes for distance estimation, the browser requests coordinates from api.postcodes.io. Postcodes can sometimes relate to individual households. Website hosting, authentication and security providers can also process IP addresses, session and request information. A definitive list of contracted processors, hosting locations and any international-transfer safeguards needs verification before this notice is signed off.

External web fonts

MMG currently loads the approved Inter typeface using Google Fonts stylesheets. Loading these remote font assets can disclose connection information such as your IP address and browser request details to Google. This request is for typography, not evidence that Google Analytics or advertising trackers have been activated. The final privacy review must confirm the service provider, locations and any applicable transfer safeguards; a self-hosted font version may be preferable later.

Contact requests and abuse prevention

The contact form accepts a reply email, optional name, request type and message, stored in private owner-reviewed storage. A signed expiring ticket, honeypot and keyed network hash help reject automated or excessive submissions; the contact table does not store raw IP addresses. Responding to requests and protecting the service are legitimate purposes. The operator reviews enquiries manually and removes resolved messages when no longer required, unless law requires retention. Hosting logs and backups may have different lifetimes that still need provider verification.

Moving quotes and outside services

MMG does not automatically transmit addresses or inventories typed in its moving estimator to a removals company. If a visitor chooses Get a quote and submits the separate external form, Sandy Movers receives and handles those quote details under its own privacy information. MMG can record a non-identifying outbound click only where configured lawfully; there is no automatic transfer of the local draft.

Retention and deletion

Guest local-storage information remains on the device until the visitor or browser removes it. Private account plans remain while the account exists and are deleted when the user completes self-service account deletion, subject to required operational backups and lawful retention. Technical security logs and backups may have separate documented schedules; actual host retention settings must be verified instead of promising an untested number of days.

Individual rights

Depending on circumstances, UK GDPR rights can include access, correction, erasure, restriction, objection and data portability. Account holders can export their saved data and initiate deletion through the account dashboard. Individuals can complain to the Information Commissioner's Office at ico.org.uk. Privacy requests can be submitted through the protected Contact form, while the operator's legal identity and postal correspondence address still require verification.

Tracking and cookies

Essential authentication and requested on-device planning storage are distinct from optional analytics and advertising technologies. Optional tracking, if ever enabled, must be accurately identified and appropriately consented to under PECR. Do not assume that GA4 or marketing pixels are active without an actual tag audit.