Privacy policy

MOVANA Express Limited(“MOVANA Express”, “we”, “us”) is a company registered in the United Kingdom (Company No. SC865340), with our registered office at 24 Old Street, London EC1V.

We are the data controller for personal information collected through this website and the MOVANA Express dashboard. For data-protection queries, contact us at privacy@movana.co.

We only collect the data we need to provide our shipping platform. That includes:

• Account information — first name, last name, email, phone, business name (optional), postcode.
• Shipping information — sender and recipient names, postal addresses, phone numbers, parcel weight/dimensions, declared contents, tracking events.
• Billing information — invoice line items and totals. Card details are handled by our payment processor and never stored on MOVANA servers.
• Technical information — IP address, browser type, device type, pages visited, timestamps. Used for security, fraud-prevention and service performance.
• Communication records — emails and support messages you send to us, plus our replies.

Under UK GDPR we must have a lawful basis for processing your personal data. Ours are:

• Contract — to deliver the shipping services you have booked, create accounts, generate labels, process tracking and handle invoices.
• Legitimate interests — to keep the service secure, prevent fraud and debug issues.
• Legal obligation — to keep records required by HMRC, Companies House and consumer-protection law.
• Consent — for optional marketing emails. You can withdraw consent at any time.

To deliver your parcels we share the minimum necessary information with:

• Carriers — Royal Mail, Evri, DPD, UPS, DHL Parcel UK (and any others you book). They receive the addresses and parcel details needed to fulfil the shipment.
• Infrastructure providers — Google Firebase (UK / EEA region) for authentication, database hosting and serverless functions.
• Payment processor — for processing card transactions.
• Law enforcement and regulators — only where legally required to do so.

We do not sell your data to anyone, ever. We do not share data with advertisers.

We keep account data for as long as your account is active. After deletion we retain:

• Invoicing and shipment records for six years (UK tax retention period).
• Security and fraud-prevention logs for 12 months.
• Marketing email subscriptions only while you remain subscribed.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase data we no longer need to keep (the “right to be forgotten”).
• Restrict processing in certain circumstances.
• Port your data to another service in a structured, machine-readable format.
• Object to processing based on legitimate interests, including direct marketing.
• Withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email privacy@movana.co. We respond within one calendar month.

If you're unhappy with our response you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

• All data in transit is encrypted with TLS 1.2 or higher.
• All data at rest in our Firestore database is encrypted by default.
• Access to production data is limited to named MOVANA Express staff with multi-factor authentication.
• We run regular vulnerability scans and patch dependencies on a fixed cadence.
• We'll notify affected users and the ICO within 72 hours of any personal-data breach that poses risk.

We host data with Google Firebase in UK / EEA regions wherever possible. Where data is processed outside the UK / EEA, it is covered by the UK's International Data Transfer Agreement (IDTA) or equivalent safeguards.

We use a single, strictly-necessary session cookie to keep you signed in. No analytics, advertising or third-party tracking cookies. Full detail is in our Cookie policy.

If we make material changes we'll notify account holders by email at least 14 days before changes take effect. The “Last updated” date at the top of this page always reflects the current version.