Privacy policy

QuoteMyMove is a trading name of Transscot Ltd ("we", "us"), a company registered in Scotland. We operate the QuoteMyMove marketplace at quotemymove.co.uk and we are the data controller for the personal data described below.

Registered company number: SC641345.

Registered office: Room 3.10, 7 Scott St, Motherwell ML1 1PN.

Registered with the UK Information Commissioner's Office, registration number ZA925819.

When you request a quote we collect what you tell us: your name, email, phone number, address or postcode, and the details of the job — property type and size, dates, and anything you add in the notes. You may also upload photos of what needs moving.

We verify your phone number by sending a code to it. That is how we keep invented enquiries out of the marketplace, so professionals are not paying for people who do not exist.

If you sign in with Google we receive your name, email address and profile picture. If you sign in with an emailed link we receive nothing beyond the address you gave us.

Professionals additionally provide company details, the services and areas they cover, vetting documents such as insurance certificates, and pay through Stripe.

Under UK GDPR we have to tell you not just what we do with your data but why we are allowed to. For the core of the service:

• Passing your enquiry to professionals — to take steps at your request before entering a contract, Art. 6(1)(b). This is the thing you asked us to do.
• Verifying your phone number — our legitimate interest in keeping fabricated enquiries out of a marketplace people pay to take part in, Art. 6(1)(f).
• Grading enquiries — our legitimate interest, Art. 6(1)(f). See section 6.
• Taking payment from professionals and keeping records — performance of our contract with them, Art. 6(1)(b), and our legal obligation to keep financial records, Art. 6(1)(c).

We do not sell personal data, and we never will. It is not a side business we have decided against; there is no arrangement under which it could happen.

Your full contact details are shown only to professionals who have paid to receive your enquiry, and only those who cover your area and the service you asked for.

An enquiry is offered to at most five professionals. If you asked to be matched with a single firm, it goes to exactly one. Before a professional pays, they see the job — area, property, dates — with your name shortened and your email and phone masked. They cannot contact you until they have paid.

Photos you upload are shown only after a professional has paid for your enquiry, and never on public pages.

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to processing we are doing on the basis of legitimate interest. You can also ask for your data in a portable format. Email office@quotemymove.co.uk and we will respond within one month, as UK GDPR requires.

Where we have already passed your details to a professional, we will delete our copy, but you will need to ask them directly about theirs — they become an independent controller of that data once they receive it.

Some records we cannot delete on request: financial records must be kept for six years under UK tax law.

Every enquiry is scored automatically on how complete and how urgent it is — whether there is a date, how much detail was given, whether the phone number is verified. The score sets what a professional pays us for the introduction, and it is shown to them alongside the reasons for it.

It does not decide anything about you. It does not affect whether your enquiry is passed on, which professionals see it, or what they may charge you. There is no automated decision-making producing legal or similarly significant effects within the meaning of Art. 22, and no profiling of you as a person — the score describes the enquiry, not the enquirer.

QuoteMyMove uses cookies and similar technologies in four clearly-labelled categories:

• Strictly necessary — login session, CSRF protection, form-progress storage. These can't be disabled because the site can't function without them. Lawful basis: legitimate interest under UK GDPR Art. 6(1)(f).
• Cookie-free measurement — we count which steps of the quote form are reached, using a random identifier that exists only for the page you're on. It sets no cookies, stores nothing on your device, and records no IP address or personal details, which is why no consent toggle is needed for it. Events are deleted after 180 days. Lawful basis: legitimate interest under UK GDPR Art. 6(1)(f).
• Analytics — Google Analytics 4 via Google Consent Mode v2. Only enabled when you click "Accept all" or toggle Analytics on. When disabled, GA4 still receives cookieless pings (no personal identifiers) so we can see aggregate visitor counts. Lawful basis: your consent.
• Marketing — Google Tag Manager and Google Ads pixels for measuring partner-acquisition campaigns and re-engaging movers who didn't complete a quote. Disabled by default. Lawful basis: your consent.
• Preferences — remembering small UI choices like your last-selected postcode or service. Disabled by default. Lawful basis: your consent.

You can change your choices at any time using the Cookie settings link in the page footer. We re-ask for consent every 12 months in line with ICO guidance.

Cookie-setting third parties: Google Ireland Ltd (Analytics & Tag Manager), Stripe Payments UK Ltd (payment session), plus our own first-party session cookies. None of these are used to build cross-site advertising profiles outside QuoteMyMove without explicit consent. The full list of companies that process your data is in section 8 below.

We use a small number of service providers ("processors") to run QuoteMyMove. Each is contractually bound to process your data only on our instructions, and none of them may use it for their own purposes.

• MongoDB, Inc. (Atlas) — hosts our database: your quote requests, account details and messages. Stored in the EU.
• Cloudflare, Inc. (R2) — stores files you upload, such as photos of items to be moved, and documents uploaded by partners. Stored in the EU.
• Google Ireland Ltd — sign-in with Google (name, email, profile picture), and, with your consent, Analytics and Tag Manager.
• Stripe Payments UK Ltd — processes partner wallet top-ups. Card details go directly to Stripe and never reach our servers.
• Google Ireland Ltd (Maps Platform) — when you type an address, what you type is sent to Google to suggest matching addresses, and postcodes are sent to work out the driving distance for a move. Your name and contact details are not.
• Twilio Inc. and Amazon Web Services (SNS) — send the SMS code that verifies your phone number. Which one is used depends on availability; both receive only the number and the message.
• Resend (Plus Five Five, Inc.) — sends transactional email such as quote confirmations and review invitations.
• Anthropic PBC — where a partner uploads an insurance certificate, we may use automated document reading to extract the policy details. This applies to partner business documents only, never to customer data.

We do not sell personal data, and we do not share it with anyone outside this list except the approved professionals you asked us to connect you with, or where the law requires it.

We keep personal data only for as long as we need it for the purpose it was collected.

• Quote requests — kept while we connect you with professionals and afterwards so you can refer back to them in your account.
• Photos you upload — deleted automatically 30 days after your move date. Photos attached to an enquiry that is never submitted are deleted within 48 hours. This runs on a schedule; nobody has to remember to do it.
• Location data from an address lookup — the coordinates behind your postcode are kept with the enquiry, because they are what the distance and the price are worked out from.
• Account details — kept while your account is open. Delete your account and we remove them.
• Payment and invoicing records — kept for six years, as UK tax law requires.
• Reviews you publish — kept indefinitely unless you ask us to remove them, since they help other customers choose.

You can ask us to delete your data sooner at any time — see section 5.

Our database and uploaded files are stored in the European Union. Some of our processors are US-headquartered and may access data from outside the UK to provide support; where they do, transfers are covered by the UK International Data Transfer Addendum or equivalent safeguards, as UK GDPR requires.

Passwords are hashed with bcrypt and we never store them in any recoverable form. All traffic uses TLS. Sessions use httpOnly cookies, marked secure in production. Payment card details go straight to Stripe and never reach our servers.

Photos you upload are stripped of their embedded metadata — including any GPS coordinates your phone recorded — before they are stored, so a photograph of your living room does not also disclose where you live to whoever receives it.

Sign-in links sent by email work once and expire after twenty minutes.

For any privacy question, email office@quotemymove.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO).