Privacy Policy

BandBack Move · Effective 24 July 2026 · Version 2.0

1. Who we are

BandBack Ltd is the data controller for personal data collected through BandBack Move (bandback.co.uk/move).

• Company Number: 16881605
• Registered Office: 3rd Floor, 86-90 Paul Street, London, England EC2A 4NE
• Email: [email protected]
• ICO Registration Number: GB2154199

2. What data we collect

When you use BandBack Move, we collect the following categories of personal data:

• Identity data: name, email, phone (optional)
• Move data: stage of move, move date, postcodes, property type, ownership status
• Household data: whether you have children or pets (used to personalise your checklist)
• Consent data: your marketing and partner consent preferences, the date and time you gave them, the exact wording you agreed to, and the IP address the consent was given from
• Technical data: IP address, browser type, referring website, UTM tracking parameters
• Behavioural data: progress through your checklist, services you click on

3. How we use your data

4. Who we share your data with, and how we’re paid

4.1 When you click a partner link

Most of the time, you share your own data. You tap a link in your checklist, you land on a partner’s website, and you decide what to tell them. We don’t send them anything — we just record that you clicked, so we know which parts of the checklist are useful. Where we have an affiliate arrangement, the partner pays us a commission if you go on to buy something. This never increases the price you pay.

4.2 When you opt in to partner contact

If you tick the partner contact box during sign-up, we may pass your details directly to relevant companies so they can contact you about your move. We receive a fee from those companies for the introduction. We want to be straightforward about that: this is how BandBack Move stays free to use. We are not a charity and we are not pretending otherwise. But it only ever happens if you have actively ticked the box, and you can change your mind at any time. If you don’t tick the box, your details are never passed to anyone for marketing purposes, and you still get the complete moving plan.

4.3 Categories of partner

This list reflects our partners as at the date of this policy. It changes from time to time — the current version of this page is always the accurate one.

Important: When we refer you to a regulated firm (FCA, SRA, RICS), they conduct their own onboarding and apply their own privacy policy from that point. BandBack Ltd does not provide regulated financial, legal or surveying advice. Your home may be repossessed if you do not keep up repayments on a mortgage.

4.4 Other recipients

• Service providers we use to operate the platform (email service, analytics, hosting)
• Legal authorities if required by law or court order
• Professional advisors (accountants, solicitors) under confidentiality obligations

4.5 What we will not do

• We will never pass your details to anyone for marketing purposes without your explicit opt-in.
• We will never sell your data to general marketing list brokers or data brokers.
• We will never pass your details to a mortgage broker or other regulated firm without your explicit consent.
• We will never make your moving plan conditional on opting in.

5. Referral fees and commercial relationships

BandBack Move is free for users. We are paid in two ways: affiliate commission when you click through and purchase from a partner, and referral fees where you have opted in to partner contact. These commercial arrangements are disclosed throughout the platform. They never increase the price you pay, and you are never under any obligation to use a partner service.

6. Data retention

We retain your personal data for up to 2 years from your move date, or until you request deletion, whichever is sooner. Records of consent — including the wording you agreed to and the timestamp — are retained for as long as we hold your data plus a further 12 months, so that we can demonstrate the basis on which your data was processed. Anonymous analytical data may be retained longer. Magic login tokens expire 24 hours after creation.

7. Your rights under UK GDPR

You have the right to:

• Access a copy of your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time

To exercise any other right, email [email protected]. We will respond within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

8. Cookies

See our Cookie Policy at bandback.co.uk/cookie-policy for details of the cookies we use.

9. Changes to this policy

We may update this policy occasionally. Significant changes will be communicated by email to those who have opted in to updates. The “Last updated” date at the top will reflect the most recent revision.