Privacy Policy

Last updated: 5th July 2026

This Privacy Policy explains how Move Online ("we", "us", "our") collects, uses, and protects your personal data when you use our Service. We are the data controller in respect of your personal data. You can contact us about privacy matters at [email protected].

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Data We Collect

We collect and process the following categories of personal data:

Name to identify you and administer your account.
Email address for account administration, service communications, and (where you have agreed) marketing.
Instagram handle to provide features relating to your social media presence and to retrieve related public information through third-party services.
Free-text content any personal data you choose to include in free-text fields, uploads, or other content you submit to the Service.

Because free-text fields allow you to enter anything you wish, you control what personal data you provide there.

Please do not enter sensitive personal data (such as health, racial or ethnic origin, political opinions, religious beliefs, or similar special category data) unless it is necessary, and do not enter personal data about other people unless you have a lawful basis to do so (see clause 6).

We use cookies and similar technologies as described in clause 10, including a strictly necessary session cookie and, where you consent, advertising cookies.

2. How We Collect Your Data

We collect personal data:

directly from you when you register, configure your account, or use the Service; and
from third-party services where you connect them or where we retrieve information relating to identifiers you provide (for example, public Instagram data via analytics providers).

3. How We Use Your Data and Our Lawful Bases

Purpose	Lawful basis
Creating and administering your account	Performance of a contract
Providing the features of the Service, including AI and social media features	Performance of a contract
Processing payments and managing subscriptions	Performance of a contract
Service-related communications (e.g. account, security, billing)	Performance of a contract / legitimate interests
Marketing communications	Consent (which you may withdraw at any time)
Improving and securing the Service, and preventing misuse	Legitimate interests
Complying with legal and regulatory obligations	Legal obligation
Advertising measurement and conversion tracking (Meta Pixel and Conversions API)	Consent (which you may withdraw at any time)
Measuring the effectiveness of our marketing campaigns (UTM attribution)	Legitimate interests

Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. You may object to such processing (see clause 8).

4. Sharing Your Data with Third Parties

We share personal data with the third parties below, who act as our processors or, where indicated, as independent controllers. We only share what is necessary for the relevant purpose, and we have (or will have) appropriate data processing terms in place with each.

Anthropic: AI processing (AI Features). (United States)
HighLevel Inc: customer relationship management and marketing automation. (United States)
Jiffy Apps Limited: development, operation, and technical support of the Service, including management of our infrastructure (United Kingdom)
Laravel Holdings Inc: application error and performance monitoring. (Ireland (EU) location)
Nokia: API services. (United States)
OpenAI: AI processing (AI Features). (United States)
OVH Limited: hosting and cloud infrastructure. (United Kingdom)
Plus Five Zero Inc: sending transactional emails. (European Union location)
Social Blade LLC: social media analytics relating to your Instagram handle. (United States)
Stripe, Inc: payment processing. (United States; Stripe acts as an independent controller for certain payment data)
Telegram FZ-LLC / Telegram Group Inc: messaging and notification delivery. (United Arab Emirates / United States)
CookieYes Limited: cookie consent management. (United Kingdom)
Meta Platforms Ireland Limited: advertising measurement and conversion tracking via the Meta Pixel and Conversions API, where you have consented. (Ireland (EU); data may be processed in the United States. Meta acts as an independent/joint controller for certain advertising data.)

We may also disclose personal data to professional advisers, regulators, or law enforcement where required by law, and to a buyer or successor in the event of a sale, merger, or reorganisation of our business.

We do not sell your personal data.

Cloudflare Turnstile

Turnstile captures various signals about your device including IP address and user agent to determine whether you are a human or a bot.

Please see their Turnstile Privacy Addendum for more information.

Meta (Facebook and Instagram)

Where you consent to advertising cookies, we use Meta's advertising tools to measure how effective our advertising is:

The Meta Pixel runs in your browser and sets cookies (_fbp, _fbc) to record actions such as viewing our sign-up page.
The Meta Conversions API sends equivalent information to Meta directly from our servers, including a hashed (pseudonymised) version of your email address, your IP address, browser/user-agent information, the Meta cookie identifiers above, and details of your activity such as beginning checkout and completing a purchase (including its value and currency).

This happens only where you have given consent through our cookie banner, and you can withdraw consent at any time (see clause 10). Meta processes this data under its own Privacy Policy.

5. International Transfers

Some of the third parties above are located outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure an appropriate safeguard is in place, such as:

transfer to a country with UK "adequacy" status; or
the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum; or
another lawful transfer mechanism (for example, a provider's certification under the UK Extension to the EU–US Data Privacy Framework).

You may contact us at [email protected] for more information about the safeguards we use.

6. Personal Data About Other People

If you provide personal data relating to any other person (for example in free-text fields or uploaded content), you confirm that you have a lawful basis to do so and, where required, that you have informed that person and obtained their consent. You are responsible for that data, and you agree to indemnify us against any claim arising from your failure to have a lawful basis.

7. Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this policy, including for the duration of your account and for any period required to comply with legal, accounting, or reporting obligations.

8. Your Rights

Under the UK GDPR, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased in certain circumstances;
restrict or object to certain processing;
data portability;
withdraw consent at any time where we rely on consent; and
not be subject to solely automated decisions producing legal or similarly significant effects (where applicable).

To exercise any of these rights, contact us at [email protected]. We will respond within the time limits required by law.

9. Security

We use appropriate technical and organisational measures to protect your personal data. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. Cookies

We use cookies and similar technologies, grouped as follows:

Strictly necessary a session cookie required to operate the Service (for example, to keep you logged in). Because it is strictly necessary, it does not require your consent.
Consent management our cookie consent tool (CookieYes) records your cookie choices so we can respect them.
Advertising if, and only if, you consent, the Meta Pixel sets cookies (_fbp, _fbc) used to measure the effectiveness of our advertising on Facebook and Instagram (see clause 4). These are blocked until you consent and are not set if you decline.

You can accept or reject non-essential cookies and change your choice at any time, through the cookie banner which you can access by clicking the icon at the bottom left of this page.

We keep a record of your consent choices (including the categories selected, the time, and technical information such as your IP address) to demonstrate compliance.

11. Children

The Service is not intended for, and may not be used by, anyone under 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where a change is material, we will notify you within the Service and require you to review and accept the updated Privacy Policy before you continue to use it. You will not be able to continue using the Service until you have accepted the updated Privacy Policy. If you do not wish to accept a material change, you may decline and cancel your Account in accordance with clause 8.6 of our terms, and you will not be charged for any subsequent billing period. For non-material changes, we will notify you within the Service, and your continued use after the changes take effect constitutes acceptance.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or by calling 0303 123 1113.

14. Contact

For any questions about this Privacy Policy or your personal data, contact: [email protected]