Skip to main content
MoveLane

Privacy Policy

Last updated: 26 July 2026

This policy explains how MoveLane ("we", "us", "our") collects and processes personal data when you use our website and services (the "Service"). MoveLane is a UK-based property portal operated as a sole trader. We are the data controller for the personal data we collect from users of the Service, and we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

  • Account data: name, email, phone number, password (hashed), profile details and role (buyer or agent).
  • Listings and agency data: agency name, contact details, property descriptions and uploaded images (agent accounts only).
  • Enquiries: the name, email, phone number and message you submit when contacting an estate agent through the Service.
  • Saved data: favourite properties, saved searches and property alerts.
  • Payment data: billing metadata (Stripe customer ID, subscription status). Full card details are handled directly by Stripe and never stored on our servers.
  • Usage data: approximate location (from IP), device and browser information, pages viewed and referrer. Collected only where you consent to analytics.

2. Why we use your data (lawful bases)

  • Contract (Article 6(1)(b)): to create your account, operate the Service, deliver purchased subscriptions and pass enquiries to the relevant agent.
  • Legitimate interests (Article 6(1)(f)): to keep the Service secure, prevent fraud, improve features and respond to support requests.
  • Consent (Article 6(1)(a)): for analytics and marketing cookies, optional email alerts, and marketing emails you opt into.
  • Legal obligation (Article 6(1)(c)): to comply with tax, accounting and regulatory requirements.

3. Sharing your data

We do not sell your personal data. We share it only with the following categories of recipients:

  • Estate agents you contact. When you submit an enquiry, we forward your name, contact details and message to the agent responsible for that listing so they can respond.
  • Service providers (processors) we rely on:
    • Lovable Cloud / Supabase — hosting, database and file storage (EU).
    • Stripe Payments Europe Ltd — subscription billing.
    • Google Maps / Google Analytics — maps, location and (with consent) analytics.
    • Cloudflare — content delivery and DDoS protection.
    Each processor is contractually required to protect your data and use it only on our instructions.
  • Legal authorities, where we are required to by law, court order or to protect the rights, property or safety of MoveLane, our users or others.

4. International transfers

Data is primarily stored in the European Economic Area. Some processors (e.g. Stripe and Google) may transfer data outside the UK/EEA. Where they do, transfers are covered by the UK International Data Transfer Agreement, EU Standard Contractual Clauses or an equivalent safeguard.

5. Retention

  • Account data: while your account is active, plus up to 3 years after closure.
  • Enquiries: up to 24 months after submission unless the receiving agent retains them longer under their own policy.
  • Payment records: 7 years, to comply with UK accounting requirements.
  • Analytics data: up to 26 months.

6. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data ("right to be forgotten");
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (this does not affect processing carried out before withdrawal);
  • complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights email privacy@movelane.co.uk. We aim to respond within 30 days.

7. Security

We apply appropriate technical and organisational safeguards, including encrypted connections (HTTPS), encrypted storage, hashed passwords, role-based access controls and row-level security on our database. No system is 100% secure; we will notify affected users and the ICO of any breach where required by law.

8. Cookies

The Service uses cookies and similar technologies as described in our Cookie Policy. You can update your consent at any time.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect data from them.

10. Changes

We may update this policy from time to time. Material changes will be notified through the Service or by email.

11. Contact

Privacy enquiries: privacy@movelane.co.uk.