Privacy Policy

1. Data Controller

This policy governs all personal data collected through https://themovingbros.com/ and is governed by the UK GDPR and the Data Protection Act 2018.

2. What We Collect

Information you provide

• Contact form: name, email address, organisation (optional), and message content.
• Email enquiries: any personal data included in direct correspondence.
• Research commission requests: details relevant to scope and delivery of commissioned work.

Automatically collected information

• Server logs: IP address, browser type, pages visited, referral URL, timestamps. Retained 30 days then deleted.
• Essential cookie: a localStorage entry recording cookie consent preference — no tracking data.

We do not collect sensitive personal data and do not use automated profiling or decision-making.

3. How We Use Your Data

• Responding to enquiries and research commission requests.
• Delivering commissioned research and analytical reports.
• Sending editorial updates where you have opted in.
• Maintaining server security through anonymised log analysis.
• Complying with legal obligations under UK law.

4. Legal Basis

• Contractual necessity (Art. 6(1)(b)): responding to enquiries and delivering commissioned work.
• Legitimate interests (Art. 6(1)(f)): server log retention for security purposes.
• Consent (Art. 6(1)(a)): editorial communications where you have explicitly opted in.
• Legal obligation (Art. 6(1)(c)): applicable statutory requirements under UK law.

5. Data Retention

• Contact and enquiry data: 2 years from last communication, then securely deleted.
• Research commission data: retained for the duration of the engagement plus 2 years.
• Server logs: 30 days, then auto-deleted.
• Cookie consent record: stored in browser localStorage until cleared by the user.

6. Data Sharing

We do not sell or trade personal data. Limited sharing occurs with:

• Email and hosting providers: operating under data processing agreements, providing only infrastructure.
• Legal requirements: where disclosure is required by law or court order.

All processors are located within the UK or EEA, or operate under UK adequacy decisions or Standard Contractual Clauses.

7. Cookies

This website sets one essential item only — a localStorage entry recording your consent preference. No third-party tracking, analytics, or advertising cookies are set.

You may clear your browser's localStorage at any time to reset this preference.

8. Your Rights

Under the UK GDPR you have rights to: access your data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may also withdraw consent at any time.

To exercise any right, contact [email protected]. We respond within 30 days. If unsatisfied, you may complain to the ICO at ico.org.uk or on 0303 123 1113.

9. Security

We apply appropriate technical and organisational measures to protect personal data — including HTTPS transmission, restricted staff access, and encrypted storage where applicable. In the event of a breach affecting your rights, we will notify you and the ICO as required under UK GDPR Article 33.

10. Contact

This policy was last reviewed on 1 September 2024 and may be updated at any time. Material changes will be announced on this page.