Back to home

    Privacy Policy

    Last updated: 13 August 2026

    1. Who we are

    MyMoveMate is an organisational tool designed to help people buying and selling residential property in England stay informed and in control throughout their move. MyMoveMate is a product of PM Product Solutions Limited, company number 17155942, registered in England and Wales, whose registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. PM Product Solutions Limited is the data controller for the personal data described in this policy. When you purchase MyMoveMate, the charge will appear on your bank or card statement as PM Product Solutions Limited. This privacy policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    2. What data we collect

    When you use MyMoveMate, we collect and store the following information:

    • Your email address. Authentication credentials are handled securely by our authentication provider; we do not store readable passwords and we cannot see your password
    • Your first name and onboarding preferences (move type, budget range, property preferences, preferred locations)
    • Notes you add to your notes log
    • Properties you add to your shortlist (addresses, URLs, prices, notes, status)
    • Key contacts you save (names, roles, phone numbers, emails, companies)
    • Your stage progress and completed tasks
    • Records of payments and your access status, including identifiers provided by our payment processor (we never see or store your full card details)
    • Basic technical logs generated when you use the service, such as authentication events and error logs

    3. How we use your data

    Your data is used solely to provide the MyMoveMate service to you. We use it to save your progress, display your notes and contacts, track your stage in the buying journey, and personalise your experience. We do not use your data for marketing, advertising, profiling, or any purpose beyond delivering the service you signed up for.

    Our lawful bases for processing are: performance of a contract (providing your account, saving your move data, and taking payment), legal obligation (keeping payment and tax records), and legitimate interests (keeping the service secure and preventing abuse).

    4. Data sharing

    We never sell or rent your personal data, and we do not use advertising networks or behavioural tracking tools. We do rely on a small number of service providers (processors) who handle data strictly on our instructions in order to run MyMoveMate:

    • Lovable - hosting, application platform, database, file storage, and the sending of service emails. Aggregate, non-identifying usage analytics are provided by the platform.
    • Supabase - the managed database, authentication, and storage infrastructure underlying the platform.
    • Stripe - payment processing. Stripe handles your card details directly as an independent controller under its own privacy policy; we receive only a payment reference and status.

    Data is primarily stored in the United Kingdom or European Economic Area. Where any provider processes data outside the UK, that transfer is covered by the UK International Data Transfer Addendum or an equivalent safeguard.

    5. Data storage and security

    Your data is stored securely using industry-standard encryption at rest and in transit. Access to your data is protected by authentication and row-level security policies, meaning only you can access your own data. We take reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse.

    The one exception is the optional estate-agent sharing described in section 12: if you deliberately choose to share a short readiness summary with an approved estate-agent branch taking part in our Partner pilot, authorised people at that branch can see that summary until you stop sharing.

    6. Cookies

    MyMoveMate uses only essential cookies and equivalent local storage required for authentication and session management. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for detail on the aggregate platform analytics our host collects.

    7. Data retention

    When you mark your move as complete - or record that it has fallen through - we generate a PDF record of your move for you to download, and then permanently delete your move data: your notes, key contacts, property shortlist, and stage progress. The PDF is held in private storage for 7 days so you can download it, and is then deleted automatically by a scheduled job. We keep only an anonymised summary of the move (such as the postcode district and the dates involved) which cannot be used to identify you or your property.

    Your account and email address remain until you ask us to delete them. Payment and tax records are kept for 6 years, as required by UK law, and are held separately from your move data.

    8. Data deletion

    You can request full deletion of your account and all associated data at any time by emailing privacy@mymovemate.co.uk. We will process your request within 30 days in line with UK GDPR requirements. Upon deletion, all personal data - including your account, onboarding profile, notes, contacts, property shortlist, stage progress, and any completed move records - will be permanently removed.

    9. Your rights under UK GDPR

    Under UK data protection law, you have the right to:

    • Access - request a copy of the personal data we hold about you
    • Rectification - ask us to correct any inaccurate data
    • Erasure - request deletion of your data (see section 8 above)
    • Portability - request your data in a structured, machine-readable format
    • Object - object to the processing of your data
    • Complain - lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

    To exercise any of these rights, please contact us at privacy@mymovemate.co.uk.

    10. Changes to this policy

    We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.

    11. Contact

    If you have any questions about this privacy policy or how we handle your data, please contact us at privacy@mymovemate.co.uk.

    12. Optional sharing with an estate-agent branch (Partner pilot)

    An estate-agent branch taking part in our controlled Partner pilot can invite you to MyMoveMate using a single-use invitation link. Accepting that invitation connects the branch to your workspace so you can see its contact details. Accepting does not share any of your information. Sharing is a separate, optional step that you switch on yourself, and you can switch it off again at any time.

    If you switch sharing on, the only information the branch can see through the Partner dashboard is:

    • The display label you choose for yourself (it does not have to be your full name)
    • Your move context (buying, selling, or buying and selling) taken from the invitation
    • Your self-reported stage
    • Your answers to a fixed set of readiness items
    • Your help status (green means no help needed, amber means you would like help)
    • A fixed blocker category, where you select one
    • The date you last confirmed your update
    • Any call or email contact request you send, and whether the branch has acknowledged it

    The following is never visible to a branch through the Partner dashboard:

    • Your login email address
    • Any authentication data
    • Your notes
    • Your property shortlist
    • Your key contacts
    • Your documents
    • Your financial information
    • Your detailed stage history
    • Your wider dashboard activity

    The purpose of sharing is narrow: it helps you pass a short, self-reported organisational update to the branch you have chosen. The branch only ever receives information after an explicit action by you. If you revoke sharing or disconnect from the branch, the branch's access stops immediately.

    Readiness information is self-reported by you. It is not identity, anti-money-laundering, compliance, legal or financial verification, and it should not be relied on as such. Contact requests are not a guaranteed response service: we do not promise that a branch will respond, and we do not promise a response time.

    Partner-linked data is deleted through the same wipe as the rest of your move data when you mark your move complete or record that it has fallen through (see section 7). Separately, we keep de-identified daily totals of pilot activity - counts of event types only, with no client, invitation, link or branch identifiers, no exact timestamps and no free text - so we can see whether the pilot is being used at all.

    This section is draft wording for a controlled pilot. The precise data-protection roles of MyMoveMate and a participating branch for the shared summary are still being reviewed, and this wording will be confirmed before the pilot is opened to real clients.