Privacy Policy

Last updated: March 2026

1. Who we are (Data Controller)

Move and Store is operated by Xiza ltd, a company registered in England and Wales (Companies House number available on request). Our registered office is in the United Kingdom. When we say “we”, “our”, or “us”, we mean Xiza ltd.

We are the data controller for personal data you provide when using the Move and Store platform. For data protection queries, contact: misha@moveandstore.app.

2. What personal data we collect

We collect the following categories of personal data:

  • Account data: Your name, email address, business name, and phone number when you register.
  • Customer data: Details of your own customers (names, contact information, job addresses) that you enter into the platform. You are the data controller for this data; we are the processor.
  • Usage data: Pages visited, features used, and session activity collected via Vercel Web Analytics (anonymised, no cross-site tracking, no cookies required).
  • Optional measurement data: If you accept optional analytics or marketing cookies on the website, we may record page views, signup clicks, and selected contact actions to understand channel performance and improve follow-up campaigns. At present, the marketing category powers Google Tag Manager, Meta Pixel, and the Trustpilot widget.
  • Communications: Messages you send us via the contact form or email.

3. Legal bases for processing (UK GDPR)

We process your personal data under the following legal bases as defined in UK GDPR Article 6:

  • Contract (Art. 6(1)(b)): To create and manage your account and deliver the service you signed up for.
  • Legitimate interests (Art. 6(1)(f)): To improve the platform, prevent fraud, and send product updates to existing customers. You may opt out of marketing emails at any time.
  • Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and other legal requirements.
  • Consent (Art. 6(1)(a)): Where we ask for your explicit consent (e.g., optional marketing communications and optional analytics or marketing cookies on the website).

4. How we use your data

  • To provide and maintain the Move and Store service.
  • To send transactional emails (account confirmation, invoices).
  • To send product update emails to existing customers (you can unsubscribe at any time using the link in each email).
  • To respond to support enquiries.
  • To detect and prevent fraud and abuse of the platform.
  • To comply with legal or regulatory obligations.

We do not sell your personal data to third parties.

5. Data retention

  • Active accounts: We retain your data for as long as your account is active.
  • Cancelled accounts: We retain account data for up to 90 days after cancellation, then anonymise or delete it unless a longer retention period is required by law (e.g., financial records kept for 6 years under UK tax law).
  • Support communications: Retained for up to 3 years for quality and legal purposes.
  • Usage analytics: Anonymised — no personal data is retained.

6. Payment data

Payments are processed by Stripe, Inc. We never see or store your full card details. Card data is transmitted directly to Stripe's servers. Stripe's privacy policy applies to payment processing.

7. Third-party processors

We use the following sub-processors to deliver the service. Each is bound by appropriate data processing agreements:

  • Supabase (EU/US): Database and authentication hosting.
  • Vercel (US/EU): Hosting and edge delivery.
  • Meta (EU/US): Marketing attribution, audience building, and conversions measurement when you consent to marketing cookies.
  • Stripe (US/EU): Payment processing.
  • Resend (US): Transactional email delivery.

8. International data transfers

Some of our sub-processors store and process data in the United States and other countries outside the UK. Where data is transferred outside the UK, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or reliance on an adequacy decision.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate or incomplete data.
  • Right to erasure — ask us to delete your personal data (subject to legal retention obligations).
  • Right to restrict processing — ask us to pause processing your data in certain circumstances.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making — we do not use solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, email misha@moveandstore.app. We will respond within 30 days.

10. Cookies and tracking

The Move and Store marketing website separates essential, analytics, and marketingcategories. Essential cookies stay on because the site depends on them, while optional analytics and marketing tracking stay off until you save a choice.

If you accept optional analytics cookies, Google Analytics 4 may set identifiers such as _ga so we can measure page visits, signup intent, contact-form completions, and channel performance on the marketing site.

If you accept optional marketing cookies, Meta may set identifiers such as _fbp and use click-derived identifiers such as _fbc. Google Tag Manager may also load approved marketing tools such as the Trustpilot widget on relevant marketing pages. We may also store a first-party marketing identifier in browser storage so we can measure campaign performance and understand which marketing efforts are effective. Optional analytics settings may also be used for attribution and performance reporting. You can change those choices at any time using the cookie settings link in the site footer.

The application at app.moveandstore.app uses strictly necessary session cookies only.

11. How to complain

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the chance to resolve any concern before you approach the ICO — please contact us first at misha@moveandstore.app.

12. Changes to this policy

We may update this policy from time to time. We will notify existing customers of material changes via email or an in-app notification. The “Last updated” date at the top of this page will always reflect the most recent revision.