MoverBook — Privacy Policy
Last updated: 10 August 2026
1. Who we are
MoverBook (“MoverBook”, “we”, “us”) is a software platform operated by GlobalFormBook Limited, a company registered in the Isle of Man (company number 138516C), registered office 35 Fairfield Avenue, Onchan, IM3 4BG, Isle of Man. Website: https://moverbook.co.uk.
This policy explains what personal data we handle, why, and your rights over it. It covers three parts of our service:
- The manager application — used by removal & moving businesses (“tenants”) to run their operations.
- The customer portal — used by a tenant’s own customers to view quotes, invoices and job updates.
- The public quote website — where members of the public can request a moving quote.
2. Our role depends on whose data it is — please read this first
Because MoverBook is a business-to-business platform, our legal role changes depending on the data:
- Tenant account data (the removal business, its staff, its own contact details, billing) — we are the data controller. This policy governs how we use it.
- A tenant’s customer data (the people a removal business quotes for and moves — names, addresses, move details, messages, photos) — the tenant is the data controller and we are the data processor. We only process that data on the tenant’s instructions to provide the service. If you are a customer of a removal business and want to exercise your rights over your data, contact that business in the first instance; they are responsible for it. We will support them in responding.
This distinction matters for your rights (Section 9) and is set out in more detail in our tenant terms and the processor commitments in Annex B.
3. Personal data we collect
From tenants and their staff (we are controller):
- Identity & contact: name, business name, email, phone, postcode.
- Account & security: password (stored only as a salted hash — we never see it in plain text), login and device/session information, audit logs of actions taken in the account.
- Billing: subscription plan, payment status and transaction references. Card details are handled entirely by our payment provider (SumUp) — MoverBook never receives or stores full card numbers.
From a tenant’s customers (we are processor, on the tenant’s behalf):
- Identity & contact: name, email, phone.
- Move details: pickup and drop-off addresses, property type and floor, inventory, dates, special instructions.
- Correspondence: emails, SMS and WhatsApp messages exchanged through the platform, and enquiry text.
- Job photos uploaded by crew.
- Quote, job, invoice and payment records.
From the public quote website:
- The details a person submits to request a quote (name, contact details, move details), and anti-spam signals from Cloudflare Turnstile.
We do not intentionally collect special-category data (health, ethnicity, etc.). Please don’t submit it through free-text fields.
4. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Provide the platform and its core features to tenants | Contract |
| Process a tenant’s customer data to deliver quotes, jobs, invoices | Processing on behalf of the tenant (the tenant relies on its own basis — usually contract/legitimate interests) |
| Take subscription payments and manage billing | Contract |
| Send service and lifecycle emails (quote confirmed, en route, complete, review request) | Contract / legitimate interests |
| AI-assisted extraction of details from enquiry emails and documents | Legitimate interests (operating an efficient service); see Section 6 |
| Secure the platform, prevent fraud and abuse, keep audit logs | Legitimate interests / legal obligation |
| Keep financial records | Legal obligation (tax/accounting) |
| Improve and support the product | Legitimate interests |
Where we rely on legitimate interests, we have considered your rights and will provide our balancing assessment on request.
5. AI processing of enquiry content
To save tenants re-typing, the platform can automatically extract structured details (names, addresses, move details) from enquiry emails and attached documents. This uses a third-party AI provider (Anthropic, see Annex A). Enquiry content — which may contain customer personal data — is sent to that provider solely to return the extracted fields. It is not used to train their models. A free, on-device parser is tried first; the AI step runs only when needed.
6. Who we share data with (sub-processors)
We do not sell personal data. We share it only with the service providers we need to run the platform, listed in Annex A, each under a contract that restricts them to processing it on our instructions. We may also disclose data where required by law, or to establish/defend legal claims.
7. International transfers
Some of our providers are outside the Isle of Man / UK (for example, AI and payment providers in the United States or EU). Where personal data is transferred internationally, we rely on appropriate safeguards such as the provider’s certification, adequacy regulations, or standard contractual clauses. Details are available on request.
8. How long we keep it
We keep tenant account data for as long as the account is active, and afterwards only as long as needed for our legal and accounting obligations.
For a tenant’s customer data, retention is controlled by the tenant through the platform’s retention settings. When a retention period expires, the platform anonymises personal data — permanently removing names, contact details, addresses, messages and photos — while keeping a financial skeleton (job, quote and invoice numbers, amounts, dates and status) that is no longer personal data. Financial records are retained to meet tax obligations (typically at least six years). Anonymisation is irreversible.
9. Your rights
Subject to the law, you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent where we relied on it. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects — the platform’s AI feature only extracts data to assist a human and does not make such decisions.
- If we are the controller (tenant account data), contact us at privacy@moverbook.co.uk.
- If the data is a removal business’s customer data, that business is the controller — please contact them. We will assist them as their processor.
You can also complain to the Isle of Man Information Commissioner (inforights.im). If you are in the UK, you may instead contact the UK Information Commissioner’s Office (ico.org.uk).
10. Security
We protect personal data with measures including: passwords stored as salted hashes (BCrypt); role-based access control; strict per-tenant data isolation; encryption in transit (HTTPS/TLS); parameterised database access; audit logging; and regular encrypted backups. No system is perfectly secure, but we work to protect your data and to notify the relevant parties of any breach as required by law.
11. Cookies and tracking
The applications use only what they need to function — for example, a token to keep you signed in. The public quote website uses Cloudflare Turnstile to block spam. We do not use third-party advertising or cross-site tracking cookies. If we add analytics, we will update this policy and, where required, ask for your consent.
12. Children
The platform is a business tool and is not directed at children. We do not knowingly collect data from children.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, for significant changes, notify tenants.
14. Contact
Questions or requests: privacy@moverbook.co.uk, or write to GlobalFormBook Limited, 35 Fairfield Avenue, Onchan, IM3 4BG, Isle of Man.
Annex A — Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| DigitalOcean | Cloud hosting & backups | United Kingdom (London) |
| Twilio SendGrid | Transactional & lifecycle email | United States / EU |
| Twilio | SMS and WhatsApp messaging (where enabled by a tenant) | United States / EU |
| SumUp | Card payment processing & platform billing | EU |
| Anthropic | AI extraction of enquiry details (Section 5) | United States |
| Cloudflare | Bot/spam protection on the public quote site (Turnstile) | Global CDN |
Annex B — Our commitments when we act as processor (summary)
When we process a tenant’s customer data on their behalf, we commit to: process it only on the tenant’s documented instructions; keep it confidential; apply the security measures in Section 10; engage sub-processors (Annex A) only under equivalent obligations and notify tenants of changes; assist the tenant with data-subject requests and breach notifications; and, on termination, delete or return the data (subject to the financial-record retention in Section 8). The full processor terms form part of our Terms of Service / Data Processing Addendum.