Last updated: 3 June 2026
Important privacy note. This is a plain-language summary of how Savvy Mover handles personal data. It is not legal advice. We keep this policy under review and will update it as our legal, ICO and processor records are finalised or change.
We collect only what we need to run a property-listing and sale-coordination service. We will never sell, rent, trade or broker your personal data, and we will never share it with third parties for their own marketing, advertising, profiling or unrelated commercial use. Most of our systems are self-hosted, so your information stays with us rather than being spread across third parties. Where we do pass data on, it is only to provide the service, follow your instructions, use named processors under our instructions, or comply with the law. You decide whether to upload sensitive documents, and you can give them to your own solicitor instead. You can ask to see, correct, export or delete the information we hold about you. The detail is below.
We will never sell your personal data. We will never share it with third parties for their own use.
That means no data brokers, no third-party advertising lists, no selling buyer or seller profiles, and no passing your contact details to referral partners unless you actively ask us to.
The only limited exceptions are where sharing is needed to run Savvy Mover, where you choose to share something, where a named processor acts only on our instructions, or where the law requires it.
The data controller for the personal information described here is Savvy Mover, operated by the Savvy Mover founder/operator. We will update this policy with any formal legal entity name, registered address and Information Commissioner's Office (ICO) registration reference where one is issued or required.
Our data-protection contact is [email protected]. If you have a question about your data, or want to exercise any of your rights, email us there or use our contact page.
We collect different information depending on how you use the service. Some of it you give us; some is created as you use the site. The categories below describe everything we hold.
To hold an account you must give us your name, email address and a password, and you must accept these terms and this policy. Everything else is optional and depends on what you choose to do: you only provide listing details if you sell, enquiry and offer details if you buy, and verification documents only if you decide to. You never have to upload an identity document, proof of funds or a mortgage agreement in principle to use the platform: you can provide those to your own solicitor directly instead.
Under UK data protection law we must have a lawful basis for each purpose. The table below maps what we do to the basis we rely on. The bases for identity documents and proof of funds are the most sensitive, so we keep that handling narrow and under review.
| What we do | Lawful basis |
|---|---|
| Run your account, authenticate you, publish and review listings, pass enquiries, viewings and offers between buyers and sellers, and coordinate a transaction | Contract |
| Keep messages for safeguarding, keep dispute and commitment evidence, generate draft AI summaries, look up public property context, keep comparables, prevent abuse and fraud, rate-limit forms, and keep audit and security logs | Legitimate interests |
| Refer you to an optional partner, and measure listing performance with usage analytics (both off unless you opt in) | Consent |
| Keep certain identity, funding and record-keeping information where the law requires it | Legal obligation |
Where we rely on legitimate interests, we have weighed our need against your rights, and you can object at any time using the contact details above. Where we rely on consent, you can withdraw it at any time, which will not affect anything we did before you withdrew it.
We keep personal data only for as long as we need it for the purpose we collected it, or to meet a legal obligation, and then we delete or anonymise it. The periods below are our current retention stance; we keep them under review and may update them.
Our promise is simple: we will never sell, rent, trade or broker your personal data. We will never share it with third parties for their own marketing, advertising, profiling or unrelated commercial use.
The only times personal data leaves our direct control are the limited cases below: when it is needed to run the service, when you choose to share something, when a named processor acts on our instructions, or when the law requires it.
Most of our systems are self-hosted, which keeps the bulk of your data with us. The third parties that may handle some of your personal data are listed below. We keep our processor record, hosting details and data-processing paperwork under review as the service changes.
| Provider | What it does | Where |
|---|---|---|
| Self-hosted database, file storage and AI | Store your data, your documents and photos, and generate draft summaries. The AI is self-hosted, so your data is not sent to a third-party AI service. | Self-hosted private infrastructure |
| Brevo transactional SMTP | Sends service emails (verification, alerts, notifications). Sees your email address, name and the message content. | Brevo. Processing and transfer details are kept in our processor record and reviewed as the service changes. |
| Cloudflare Turnstile | A privacy-friendly check on public forms to keep out bots. Sees a visitor token and IP address on Cloudflare's side. | Cloudflare. Processing and transfer details are kept in our processor record. |
| Public-data sources | Energy-performance (EPC), planning, flood-risk, recorded-crime, sold-price, school/Ofsted, transport, council-tax and coal-mining reporting-area look-ups. We send a postcode, local authority, address and/or map coordinates; we receive public information back. | UK government / public-data providers |
Identity-verification, title and search-pack providers are not connected today. Before any such provider is switched on, the operator will complete a data-protection impact assessment and put a written agreement in place, because that involves higher-risk data.
We prefer UK-based or self-hosted providers to keep your data in the UK. Where a provider is based outside the UK (for example, Cloudflare, which is headquartered in the United States), we rely on an approved safeguard, such as the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework, where applicable.
We use a self-hosted AI assistant to produce optional draft summaries, for example a summary of a transaction. It is given only short, pre-labelled, personal-data-free facts to work with. It does not see the contents of your documents and it does not see your financial figures unless you have separately consented to that for a specific document. Sensitive personal notes are never sent to the AI at all.
Every AI output is a reviewable draft and carries a “subject to contract” note. AI summaries are an aid, not advice or a verified record: always check anything important with your solicitor.
You decide whether to upload any document. You can always give documents to your own solicitor directly instead of uploading them here.
If you do upload a document, it is stored privately, outside the public website, and it is not made public. By default a sensitive document is visible only to you and to our admin team; you choose whether to share a document with the other party in a transaction. Documents shared with a solicitor go through a private, time-limited link that is scoped to one transaction and that you can revoke. Where a seller needs to know only a general fact, such as a coarse readiness label, that is all they see, rather than the underlying document.
We use a small number of essential cookies to keep you signed in and the site working. We also offer optional usage analytics, which are off until you accept them on the banner shown on your first visit. If you do not accept, no analytics are recorded. You can change your choice at any time. Our Cookie Policy explains this in more detail.
You have the right to access, correct, delete, restrict, export (port) and object to our use of your personal data, and to withdraw consent where we rely on it. To exercise any of these, email [email protected] or use our contact page. We will respond within one month. We may need to confirm your identity first, so that we do not disclose your data to someone else.
If you ask us to delete your data, we will do so, except where we are required to keep certain records, for example a transaction record that may be needed for a legal claim or a record we must keep by law. We will tell you if any such exception applies.
If something has gone wrong, please tell us first so we can put it right. You can raise a privacy or data concern at [email protected] or through our contact page, and you can raise any other complaint through our complaints process.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator, at ico.org.uk or on 0303 123 1113. We would ask that you give us the chance to help first.
We may update this policy from time to time. If we make a material change, we will take reasonable steps to let you know and will update the “last updated” date above.
This policy describes how we handle your data. It is not legal or financial advice. Savvy Mover is software, not a law firm, conveyancer, mortgage adviser, insurer or estate agent. For advice about your own move, always consult a qualified solicitor or licensed conveyancer.