Privacy and Cookies Notice

1. Who we are

Making Moves London Limited (“Making Moves”, “we”, “us”, “our”) is a company registered in England and Wales (company number: 09274821), with its registered office at 8 Devonshire Square, London, EC2M 4YJ. We provide commercial property, office acquisition, lettings and relocation agency services.

We are registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZA359887.

This notice explains how we collect, use, share and protect personal data about our clients, prospective clients, tenants, landlords, occupiers, and visitors to our website. It does not cover how we process personal data about our own employees and workers, which is set out in a separate internal privacy notice.

2. Our Data Protection Officer

Our Data Protection Officer is Sally Evans, who can be contacted at operations@makingmoves.london / 02035953121 or by post at the address above, marked for the attention of the Data Protection Officer.

3. The personal data we collect

Depending on your relationship with us, we collect and process the following categories of personal data:

Identity data: name, date of birth (where relevant, e.g. for anti-money-laundering purposes) and copies of identity documents.
Contact data: business address, email address, and telephone number.
Financial data: income, bank details, credit history, and other financial information relevant to referencing, credit checks, or your transaction (where relevant, e.g. for anti-money-laundering purposes).
Property data: details of the property or properties you are letting, buying, selling, occupying, or seeking, including your preferences and requirements.
Employment/business data: employer, job title, and business details, primarily for prospective commercial clients.
Marketing preferences: your choices about how, and whether, we contact you.
Technical data: IP address, browser type, and other information collected automatically when you visit our website (see “Cookies”, Section 12).
Special category and criminal offence data: in limited circumstances, such as health information disclosed in connection with a property’s accessibility, or information obtained through anti-money-laundering checks.

4. Where we get your data from

Directly from you – when you make an enquiry, register your details, instruct us, or otherwise interact with us or our website.
From third parties acting on your behalf – such as a solicitor, referencing agency, or other party involved in your transaction.
From publicly available sources – such as the Land Registry, Companies House, or other public registers.
From third-party data providers, for prospective business clients, to identify and contact organisations and individuals who may be interested in our services. We do this on the basis of our legitimate interests (see Section 5). A summary of our assessment of this interest is available on request. If you receive marketing from us on this basis, you can object at any time – see Section 10.
From credit reference agencies – we obtain financial and credit information from TransUnion and Experian for referencing purposes (see Section 7).
From analytics providers – we use Snitcher to identify the businesses (not individuals) visiting our website – see Section 12.

5. How we use your data, and our lawful basis for doing so

We only use personal data where we have a valid lawful basis under UK data protection law to do so:

Purpose	Lawful basis
Providing estate agency, lettings, acquisition and relocation services to clients	Performance of a contract, or steps taken at your request before entering into a contract (Article 6(1)(b))
Referencing, credit and financial checks	Legitimate interests (Article 6(1)(f)), and legal obligation (Article 6(1)(c)) where required by law
Anti-money laundering and identity verification checks	Legal obligation (Article 6(1)(c))
Direct marketing to prospective clients, including using third-party sourced contact data	Legitimate interests (Article 6(1)(f)) – you can object at any time, free of charge
Website analytics	Consent, for non-essential cookies; legitimate interests, for strictly necessary functions
Complying with our legal/regulatory obligations, and resolving disputes	Legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f))

Where we rely on legitimate interests, we have assessed that our interest is not overridden by your rights and interests, having regard to the nature of the data involved, how it was obtained, and what you would reasonably expect. You can ask us for more information about this assessment, or object to the processing, at any time.

6. Special category and criminal offence data

Where we process special category data or criminal offence data (for example, in connection with anti-money-laundering obligations), we do so only where a specific condition under Article 9 or Article 10 UK GDPR (as applicable) is met – such as your explicit consent or a legal obligation.

7. Who we share your data with

Other parties involved in your transaction, such as solicitors, conveyancers, mortgage brokers, and other professionals – this happens regularly, given the nature of our services.
Credit reference agencies, currently TransUnion and Experian, for referencing and credit-checking purposes.
Service providers who help us run our business, including our CRM provider, HubSpot; our sales engagement and data-enrichment providers, Zeliq, Lusha, RocketReach; and our website analytics provider, Snitcher. These providers only use your data in accordance with our instructions and a written data processing agreement.
Regulators, law enforcement, and other authorities, where we are required to do so by law.
A buyer or successor, if we sell or transfer any part of our business.

We do not sell personal data to third parties. We cannot accept responsibility for the separate processing carried out by these organisations under their own privacy notices, or by third-party sites we link to (for example, social media platforms).

8. International transfers

We do not transfer data outside of the UK except where a client is situated in another country, we process their data as requested. If we were to transfer personal data outside the UK, we ensure it is protected by a safeguard recognised under UK data protection law, such as:

a finding by the UK government that the destination country provides an adequate level of protection; or
the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, entered into with the recipient.

You can ask us for more information about the safeguard used for a particular transfer.

9. How long we keep your data

We keep personal data for as long as necessary for the purpose it was collected, taking into account the following:

Category	Retention period
Client and transaction records	6 years
Anti-money-laundering / identity verification records	5 years from the end of the business relationship, in line with the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, where applicable to the service concerned
Prospective client / marketing data sourced from third parties	5 years from acquisition, currently under review – see our Legitimate Interests Assessment. A shorter period is expected to apply where you have not engaged with any of our communications.
Website analytics cookie (Snitcher, “SNID”)	2 years
Complaints and regulatory correspondence	2 years

10. Your rights

Under UK data protection law, you have the right to:

be informed about how we use your data (this notice);
access a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data erased, in certain circumstances;
restrict our processing, or object to it – including the right to object to direct marketing at any time, free of charge and without needing to give a reason;
receive a copy of data you provided to us in a portable format, in certain circumstances;
withdraw consent, where we rely on consent as our lawful basis; and
not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you (see Section 11).

To exercise any of these rights, please contact us at operations@makingmoves.london or by post at the address above, marked for the attention of the Data Protection Officer, with enough information to allow us to identify you and locate the relevant data. We aim to respond within one month.

Providing some personal data (for example, for referencing or anti-money-laundering purposes) is a requirement of entering into certain services with us; if this information is not provided, we may not be able to proceed.

11. Automated decision-making

We use Snitcher to identify the organisation (not the individual) associated with visits to our website, based on IP address, for analytics and marketing purposes. This does not involve a decision that produces legal or similarly significant effects on any individual, and we do not currently use solely automated decision-making of that kind in our services.

12. Cookies

We use cookies on our website for analytical purposes. Cookies may also be set by social media platforms we link to, and by other third-party promotional sites; we cannot accept responsibility for their processing.

We use Snitcher to measure business (not individual) usage of our website. Snitcher shows us the company name and address associated with the IP addresses of our visitors, and sets a cookie named ‘SNID’, with a lifetime of two years, to distinguish between visitors.

Where cookies are not strictly necessary for the website to function, we ask for your consent before setting them, and you can withdraw this at any time via cookie settings link or browser settings.

13. Complaints

If you’re unhappy with this notice, our data protection practices, or wish to raise a concern, please contact us in the first instance at operations@makingmoves.london or by post at the address above.

You also have the right to complain to the UK’s supervisory authority:

The Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF – ico.org.uk

14. Changes to this notice

We may update this notice from time to time. The version at the top of this page is always the current one. This version was last updated on 1^st January 2026.