Privacy policy

01 — Who we are

The controller of your data

Moving Money Company ("Moving Money Company", "we", "us") decides how and why the personal data described here is processed, which makes us the data controller for it.

This policy covers this website and the application form at /apply. It does not cover any site we link out to.

02 — What we collect

Only what you type into the form

We collect nothing at all from you until you submit an application. Reading this site leaves no record with us: there is no analytics, no tag manager, no advertising pixel and no embedded third-party widget on any page. Fonts are served from our own domain rather than a font CDN, so simply visiting does not disclose your IP address to anyone else.

We do not ask for and do not want financial account details, card numbers, government identifiers, or any special category data such as health, biometric or political information. Please do not put any of it in the free-text fields.

03 — Why

Purpose and legal basis

We use your application to decide whether we can serve your business, and to reply to you about it. The lawful bases we rely on under the UK GDPR and EU GDPR are:

• Steps prior to entering a contract. You asked us to assess a possible commercial relationship, and assessing it is how we answer.
• Legitimate interests. Keeping the form free of automated and fraudulent submissions, and keeping a record of who we have spoken to. We consider these proportionate because the data is business-contact information, given deliberately, and used only for the purpose it was given for.
• Legal obligation. Where we are required to retain records, for example to meet anti-money-laundering or accounting duties that apply to us.

Your application is scored automatically to prioritise our response. A person reviews every outcome before anything is decided, so there is no solely automated decision producing a legal or similarly significant effect on you. A decline means we are not taking it further at this time; it is not a judgement about you, and it is not shared with anyone.

04 — Cookies

We do not set any

This site sets no cookies, and stores nothing in your browser's local or session storage. There is no consent banner because there is nothing to consent to. We do not track you across other websites, and we do not build a profile of you.

05 — Sharing

We do not sell it, and we share it narrowly

We do not sell your personal data, rent it, or share it for anyone else's marketing. Your application is disclosed only to:

• Our own staff who assess applications and reply to them.
• Our hosting provider, which operates the servers this site runs on and necessarily processes traffic to them.
• Telegram Messenger, where we have enabled notifications. A summary of each application — including your name, company, email address and website — is sent to a private Telegram chat so the team is alerted to it. Telegram processes that message on its own infrastructure under its own privacy policy.
• Professional advisers or authorities, where we are legally required to disclose, or need advice on a dispute.

06 — Transfers

Your data may leave your country

We serve merchants across South Asia, Southeast Asia, APAC, Latin America and MENA, and the notification channel described above is operated outside the UK and EEA. That means personal data in an application may be transferred internationally.

Where we transfer personal data out of the UK or EEA, we do so on the basis of an adequacy decision where one applies, or otherwise under Standard Contractual Clauses or the UK International Data Transfer Addendum, together with any additional safeguards the transfer requires. You can ask us for details of the mechanism used for a particular transfer.

07 — Retention

As long as it is useful, then no longer

Applications that become customers are kept for the life of the relationship and for as long afterwards as our legal and accounting obligations require.

Applications that do not proceed are kept for up to 24 months, so that we recognise you if you come back to us and do not ask the same questions twice. After that they are deleted. You can ask us to delete yours sooner.

Submissions that trip our automated-traffic checks are discarded immediately and never stored.

08 — Security

Architecture, not certification

The site is served over HTTPS with a strict content security policy, is not embeddable in a frame, and loads no third-party scripts — so there is no external code running on the page that could read what you type into the form. Access to stored applications is limited to the people who need it.

We describe our security as architecture rather than as a certification, because we hold no certification and claiming one would be false. No system is perfectly secure. If you believe you have found a vulnerability, please tell us at privacy@example.com before disclosing it publicly.

09 — Your rights

What you can ask us to do

If you are in the UK or the EEA you have the rights below. We extend them to everyone who applies, wherever you are, because running two standards is how the lower one wins.

Access

Ask for a copy of the personal data we hold about you.

Rectification

Have inaccurate details corrected.

Erasure

Ask us to delete your application.

Restriction

Ask us to pause processing while a dispute is resolved.

Portability

Receive your data in a portable, machine-readable format.

Objection

Object to processing carried out under legitimate interests.

Withdraw consent

Where processing rests on consent, withdraw it at any time. Withdrawal does not affect processing already carried out.

Write to privacy@example.com and we will respond within one month. There is no charge.

If you are not satisfied with our response you can complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the supervisory authority where you live or work. We would rather you came to us first, but it is your right either way.

10 — Children

This is a business-to-business service

Nothing here is directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.

11 — Changes

We date it rather than announce it

When this policy changes, the date at the top changes with it. If a change materially affects how we use data you have already given us, we will contact applicants directly rather than rely on you noticing a new date.