Privacy Policy

Vaniffy Ltd ("we", "us") takes your privacy seriously. This policy explains what data we collect, why, how we use it, and your rights under UK GDPR. If you have questions, contact our Data Protection point of contact at [email protected].

1. What we collect

When you request a quote or book a move we collect: your name, email, phone number, pickup and delivery addresses, move details (volume, dates, extras), and any notes you provide. If you create an account we also store login activity and preferred contact method. Payment details are collected and processed by Stripe — we never see or store your full card number.

We also collect anonymous usage data through Google Analytics 4 and Google Search Console. This includes pages visited, time on site, approximate location (city/country, derived from a truncated IP address), device type, browser, referring source, and the search queries that brought you to the site. This data is aggregated and not used to identify you personally.

2. Why we collect it

We use your data to: provide quotes and coordinate moves, share the minimum necessary information with your assigned Operator (contact details are only shared after the Operator accepts the job), process payments, file customs paperwork for international moves, send booking updates and important notifications, and comply with our legal obligations.

3. Who we share it with

We share your information with: the assigned removal Operator (only after they accept the job), Stripe (payment processing), Resend (transactional email), Twilio (WhatsApp notifications, if you opt in), HMRC and relevant customs authorities for international moves, Google (anonymous analytics and search performance data via Google Analytics 4 and Google Search Console), and our hosting and infrastructure providers. We never sell your data or share it for advertising.

4. How long we keep it

We retain quote requests and move records for 6 years for accounting and legal purposes. Login codes are deleted after 10 minutes. Marketing consent records are kept until you unsubscribe. You can request earlier deletion of your account and associated data at any time.

5. Your rights

Under UK GDPR you have the right to: access the data we hold about you, correct inaccurate data, request deletion (subject to our legal retention obligations), restrict or object to processing, and receive a copy of your data in a portable format. To exercise any of these, email [email protected]. We respond within 30 days.

6. Cookies and analytics

Essential cookies. We use essential cookies for session management and CSRF protection — these are required for the site to work and don't need consent.

Google Analytics 4. We use Google Analytics 4 (measurement ID G-ZF5PXBBTW2) to understand how visitors use the site so we can improve it. GA4 sets first-party cookies (typically _ga and _ga_ZF5PXBBTW2) that store a randomly generated identifier and session information. IP addresses are truncated by Google before storage and are never logged in full. We have IP anonymisation enabled and have not enabled Google Signals, advertising features, or cross-device tracking. Analytics data is retained for 14 months.

Google Search Console. We use Google Search Console to monitor how the site performs in Google Search (impressions, clicks, search queries). Search Console does not set cookies on your browser; Google provides us with aggregated query and click data already collected on Google's own properties.

No advertising cookies. We do not use advertising cookies, remarketing pixels, or cross-site tracking. You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on, or block analytics cookies in your browser settings.

7. Security

All data is transmitted over HTTPS. Passwords are never stored in plain text. Magic login codes are hashed and single-use. We follow industry best practices for securing databases, backups, and server infrastructure.

8. Changes

We may update this Policy occasionally. Material changes will be announced by email to registered users. The version in effect when you submit a quote will govern the processing of that data.

9. Complaints

If you believe we have mishandled your data, please contact us first at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).