Privacy Policy

Last Updated: 25 February 2025

Introduction

weMOVEtogether ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our educational guidance platform at weMOVEtogether.co.uk (the "Service").

We are the data controller for the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Information We Collect

Information You Provide to Us

When you use our Service, we collect information you provide directly:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Location preferences, property interests, timeline information
• Payment Information: Processed securely through our payment provider (Stripe). We do not store your full card details
• Communications: Messages you send us, feedback, and support requests
• Progress Data: Your course progress, completed modules, saved resources

Information We Collect Automatically

When you access our Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent, navigation patterns
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies and Tracking: See our Cookie Policy below

How We Use Your Information

Service Delivery

• Provide access to our educational content and platform features
• Process your payments and manage your account
• Track your progress through our educational modules
• Deliver personalised educational content based on your interests

Communications

• Send service-related emails (welcome, payment confirmations, important updates)
• Respond to your questions and support requests
• Send educational resources and tips (you can opt out at any time)

Improvement and Analytics

• Understand how users interact with our Service
• Improve our platform, content, and user experience
• Develop new features and educational materials

Legal and Security

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our Terms of Service
• Resolve disputes

Legal Basis: We process your data based on:

• Contract performance: To provide the Service you've purchased
• Legitimate interests: To improve our Service and ensure security
• Consent: For marketing communications (where required)
• Legal obligation: To comply with applicable laws

How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who process data on our behalf:

• Stripe: Payment processing (PCI-DSS compliant)
• Email Service Provider: Transactional and marketing emails
• Analytics: Usage analytics to improve our Service
• Hosting Provider: Secure cloud infrastructure (e.g., Vercel, AWS)

All service providers are bound by data protection agreements and may only use your data as instructed by us.

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or security issues
• Protect the safety of our users

Business Transfers

If weMOVEtogether is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

International Data Transfers

Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Adequacy decisions confirming equivalent data protection standards

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Account Data: Retained while your account is active
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Data: Typically retained for 24-36 months
• Marketing Data: Until you unsubscribe or withdraw consent

After the retention period, we securely delete or anonymise your data. If you close your account, we will delete or anonymise your personal data within 90 days, except where we must retain it for legal or regulatory purposes.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data, subject to certain legal exceptions.

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used format and transfer it to another service.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Withdraw consent at any time where we rely on consent to process your data.

Right to Complain

Lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

To exercise your rights, contact us at privacy@wemovetogether.co.uk. We will respond within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our Service. We use Cookiebot as our Cookie Management Platform (CMP) to help you manage your cookie preferences and ensure compliance with UK GDPR.

Cookie Consent Management

When you first visit our site, Cookiebot displays a cookie consent banner allowing you to:

• Accept or decline non-essential cookies
• View detailed information about each cookie category
• Customise your cookie preferences
• Change your preferences at any time

Your consent choices are stored and respected across your visits. You can update your cookie preferences at any time by clicking the cookie settings link in our footer or revisiting our website.

Cookie Categories

Essential Cookies (Always Active)

Required for the Service to function properly. These include cookies for authentication, security, and session management. These cannot be disabled without affecting core functionality.

Analytics Cookies (Requires Consent)

We use Google Analytics 4 (GA4) to understand how users interact with our Service. GA4 helps us:

• Measure page views, session duration, and user engagement
• Understand which content is most helpful
• Identify technical issues and improve performance
• Track conversions and user journeys

Google Consent Mode v2: We implement Google Consent Mode v2, which adjusts how Google Analytics operates based on your cookie consent. If you decline analytics cookies:

• GA4 operates in a privacy-preserving mode
• No personal identifiers or cookies are stored
• Only anonymised, aggregated data is collected
• Your IP address is anonymised

Learn more about Google Consent Mode.

Marketing Cookies (Requires Consent)

Used for advertising and personalisation. We do not currently use marketing cookies, but if we do in future, we will ask for your explicit consent through Cookiebot.

Preference Cookies (Requires Consent)

Remember your settings and preferences to provide a more personalised experience.

Managing Your Cookie Preferences

You have full control over your cookie preferences:

• Via Cookiebot Banner: Adjust your preferences when you first visit or click "Cookie Settings" in our footer
• Via Browser Settings: Most browsers allow you to block or delete cookies. Note that blocking essential cookies may prevent the Service from functioning properly
• Via Third-Party Tools: Use browser extensions or privacy tools to manage cookies across multiple sites

For more information about cookies and how to manage them, visit allaboutcookies.org.

Data Collected by Analytics

When you consent to analytics cookies, Google Analytics 4 may collect:

• Pages you visit and time spent on each page
• How you arrived at our site (e.g., search engine, direct link)
• Device type, browser, operating system
• Approximate location (city/region level, not precise location)
• Anonymised IP address

This data is used solely to improve our Service and user experience. Google's use of data is governed by their Privacy Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access limits to authorised personnel only
• Secure Infrastructure: Regular security audits and monitoring
• Payment Security: PCI-DSS compliant payment processing through Stripe

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security but will notify you of any data breach as required by law.

Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: privacy@wemovetogether.co.uk

We aim to respond to all enquiries within 5 business days.