Effective Date: October 3, 2025 Last Updated: October 3, 2025
MoveLink ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application MoveLink - Kenya Moving Planner (the "App").
- Contact Information: Name, email address, phone number
- Moving Details: Pickup and delivery locations, property type, moving date
- Quote Requests: Details about your moving requirements
Location Data: Coarse location (city/region level) to provide relevant moving services and quotes. The app does not access precise GPS coordinates.
- Device Information: Device type, operating system, app version
- Usage Data: How you interact with the app features
- Google Places API: Location suggestions and address verification
- Moving Service Providers: Quotes and availability information
We use the collected information to:
- Provide Services: Connect you with moving service providers in Kenya
- Generate Quotes: Calculate accurate moving estimates based on your requirements
- Improve Experience: Enhance app functionality and user interface
- Customer Support: Respond to your inquiries and provide assistance
- Legal Compliance: Comply with applicable laws and regulations
Personal Data Sale Policy: We do not sell your personal information to third parties for monetary or other valuable consideration. Your personal data is only shared as explicitly described below with your consent or as required by law.
We share your moving request details (locations, property type, contact information) with relevant moving companies with your explicit consent to provide you with quotes and services. Your contact details are shared with a maximum of 5 verified moving providers per quote request to ensure competitive pricing while protecting your privacy.
Alternative Option: You may choose to receive anonymized quotes without sharing direct contact details. In this case, moving companies provide quotes through our platform, and you can choose to reveal your contact information only to selected providers.
Consent Management: You provide explicit, informed consent when submitting a quote request. Lawful Basis: Article 5(1)(a) of Kenya DPA 2019 - processing based on your explicit consent. You can modify your sharing preferences in app settings or withdraw consent by contacting us at privacy@movelink.co.ke. Consent Records: We maintain detailed logs of when, how, and what consent was provided, including timestamp, IP address, and consent version for legal compliance and audit purposes.
We may share information with third-party service providers who assist us in:
- App hosting and maintenance
- Location services (Google Places)
- Analytics and app improvement
- Customer support
We may disclose your information if required by law or to:
- Comply with legal processes
- Protect our rights and property
- Ensure user safety
- Investigate potential violations
We implement appropriate security measures to protect your information:
- Encryption: Data transmission is encrypted using SSL/TLS
- Access Controls: Limited access to personal information
- Regular Updates: Security measures are regularly reviewed and updated
- Secure Storage: Data is stored on secure servers
In the unlikely event of a data breach that poses a risk to your personal information, we are committed to transparency and compliance with Kenya Data Protection Act 2019:
- Email Notification: We will send a detailed notification to your registered email address
- In-App Alert: A prominent notification will appear when you next open the MoveLink app
- Website Notice: A public notice will be posted on our website privacy page
- Regulatory Notification: We will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours of becoming aware of the breach, as required by Kenya Data Protection Act 2019
- User Notification: We will notify affected users without undue delay, typically within 72 hours of confirming the breach affects personal data
- Change Your Password: If the breach involves account credentials, immediately change your MoveLink app password
- Monitor Your Accounts: Watch for unusual activity on accounts where you used similar login information
- Review Moving Requests: Check your recent moving quotes and requests for any unauthorized changes
- Contact Support: Reach out to our security team if you notice suspicious activity or have concerns
- Stay Informed: Monitor our communications for updates on the incident and remediation steps
- Security Team: security@movelink.co.ke
- Data Protection Officer: dpo@movelink.co.ke
- 24/7 Support: Use the emergency contact feature in the MoveLink app
- Phone: +254 700 123 456 (business hours: 8 AM - 6 PM EAT)
We maintain detailed incident response procedures and will provide regular updates until the matter is fully resolved.
- View Data: Request access to your personal information
- Update Information: Correct or update your details in the app
- Delete Account: Request deletion of your account and associated data
- Opt-Out: Unsubscribe from promotional communications
- Right to Data Portability: Request your personal data in a structured, machine-readable format for transfer to another service provider
- Right to Object: Object to processing of your personal data for marketing, research, or other legitimate interests
- Right to Restrict Processing: Request limitation of processing your personal data under certain circumstances (e.g., while verifying accuracy)
- Right to Lodge a Complaint: File a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your rights have been violated
- Permission Control: Grant or revoke location permissions in device settings
- Limited Use: Location data is only used for moving service matching
To exercise any of your data protection rights, please contact us with the following information:
- Full Name: Your complete legal name as registered
- Account Identifier: Email address or phone number associated with your MoveLink account
- Identity Verification: Copy of government-issued ID (passport, national ID, or driving license)
- Specific Request: Clear description of the right you wish to exercise and any relevant details
- Preferred Response Method: How you would like to receive our response (email, postal mail, or in-app notification)
- Email: privacy@movelink.co.ke or dpo@movelink.co.ke
- Postal Address: MoveLink Technologies Ltd, Data Protection Officer, Westlands Office Park, Block C, 3rd Floor, Waiyaki Way, Westlands, P.O. Box 12345-00100, Nairobi, Kenya
- Phone: +254 700 123 456 (business hours: 8 AM - 6 PM EAT)
- Standard Requests: We will respond within 30 days of receiving your complete request
- Complex Requests: May require up to 60 days for complex requests (we will notify you of any extension)
- Urgent Matters: Data breach or security concerns will be addressed within 72 hours
If you are not satisfied with our response, you may lodge a complaint with: Office of the Data Protection Commissioner of Kenya
- Website: https://odpc.go.ke
- Email: info@odpc.go.ke
- Address: KENCOM House, 17th Floor, Moi Avenue, Nairobi, Kenya
We retain your information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Moving Quote Requests: Personal data in quote requests is retained for 12 months after the moving date or until you request deletion, whichever comes first.
Contact Information: Name, email, and phone number are retained for 24 months from last account activity for customer service and legal compliance.
Location Data: Coarse location data is deleted immediately after quote generation is complete, unless saved as part of a moving request (then subject to 12-month retention).
Account Activity Logs: Retained for 2 years for security purposes, fraud prevention, and legal compliance requirements.
Payment Information: Processed by third-party providers and not stored on our servers. Refer to payment processor's retention policies.
Marketing Consent Records: Retained indefinitely for legal compliance until consent is withdrawn, then archived for 7 years.
Automated Deletion: Our systems automatically delete personal data at the end of specified retention periods unless legal obligations require longer retention.
Manual Deletion Requests: User-requested deletions are processed within 30 days with confirmation provided.
Secure Archival: Data required for legal compliance is securely archived with restricted access and encrypted storage.
Deletion Verification: We provide deletion certificates upon request showing when and what data was permanently removed.
You can request deletion of your personal data at any time by contacting us at privacy@movelink.co.ke or dpo@movelink.co.ke. We will process deletion requests within 30 days, subject to legal retention requirements.
For data already shared with moving service providers or other third parties:
- We will request deletion from third parties when you request account deletion
- Third parties are contractually required to delete your data within 90 days of our request
- We will notify you if any third party cannot delete your data due to legal obligations
- You may contact third parties directly for immediate deletion using contact information provided in quote responses
MoveLink is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18 without verifiable parental consent as required by Kenya's Data Protection Act, 2019, Section 31.
Parental Consent Requirements: If a child under 18 wishes to use our services:
- Written consent from parent/guardian is required before any data processing
- Parent/guardian must provide government-issued ID verification
- Consent can be withdrawn at any time with immediate data deletion
- Special protection measures apply to children's data with enhanced security
Discovery and Deletion: If we discover that a child under 18 has provided us with personal information without verified parental consent, we will delete it immediately and notify the parent/guardian if contact information is available.
Your personal information may be transferred to and processed in countries other than Kenya for the following purposes and under the specified safeguards:
- United States: For cloud hosting services (Google Cloud Platform, Vercel hosting)
- European Union: For analytics and app development tools
- Other Countries: Only with your explicit consent or under adequacy decisions recognized by Kenya
Data transfers occur under the following legal grounds as required by Kenya Data Protection Act 2019 (Section 48):
- Your explicit consent for specific transfers
- Contractual necessity for service provision
- Adequacy decisions where the destination country provides adequate protection
- Standard Contractual Clauses (SCCs) approved by data protection authorities
- Standard Contractual Clauses: We use EU-standard contractual clauses with all international service providers
- Data Processing Agreements: All third parties sign binding agreements limiting data use
- Encryption in Transit: All data transfers use TLS 1.3 encryption
- Limited Data Scope: Only necessary data is transferred, never full profiles
- Retention Limits: International processors must delete data within specified timeframes
- Regular Audits: We conduct annual compliance reviews of international partners
- Opt-out Rights: You can refuse specific international transfers where technically feasible
- Notification: We will inform you before transferring data to new countries
- Access Rights: You can request details about which countries have processed your data
- Withdrawal: You can withdraw consent for discretionary transfers at any time
Current international data processors and their locations:
- Google Cloud Services (United States) - App hosting and location services
- Vercel (United States) - Website hosting
- Analytics Providers (European Union) - App performance monitoring
We ensure all international transfers comply with Kenya's Data Protection Act 2019 and provide adequate protection for your personal information.
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the app
- Sending an email notification (if applicable)
- Updating the "Last Updated" date
If you have questions about this Privacy Policy or our privacy practices, please contact us:
MoveLink Support
- Email: privacy@movelink.co.ke
- Address: MoveLink Technologies Ltd, Westlands Office Park, Block C, 3rd Floor, Waiyaki Way, Westlands, P.O. Box 12345-00100, Nairobi, Kenya
- Data Protection Officer: dpo@movelink.co.ke
- In-App Contact: Use the contact form in the MoveLink app
This privacy policy complies with the Data Protection Act, 2019 of Kenya and other applicable Kenyan data protection regulations.
Legal Review Certification: This Privacy Policy has been reviewed and approved by qualified legal counsel specializing in Kenya Data Protection Act 2019 compliance to ensure full adherence to statutory requirements before publication.
When you first use the MoveLink app, we will ask for your explicit consent to:
- Process your personal information to provide moving services and generate quotes
- Store your contact details securely in our systems
- Use location data to match you with relevant moving companies in your area
- Communicate with you about your moving requests and app updates
- Share your contact information with moving companies (up to 5 verified providers per request)
- Receive marketing communications about moving tips and service updates
- Process analytics data to improve app performance and user experience
- Transfer data internationally to trusted service providers (US, EU) under adequate safeguards
You can provide consent for different types of data processing independently:
- Moving Service Matching (Required): Process your moving details to connect you with appropriate service providers
- Contact Information Sharing (Optional): Share your name, phone, and email with selected moving companies
- Marketing Communications (Optional): Receive promotional emails and app notifications
- Analytics and Improvement (Optional): Use anonymized data to enhance app functionality
- International Data Processing (Optional): Process your data through international service providers
- Clear Language: All consent requests use plain English explanations
- Separate Choices: Each type of processing has its own consent option
- No Pre-Ticked Boxes: All consent checkboxes start unchecked
- Easy Withdrawal: You can withdraw any consent at any time through app settings or by contacting us
You can withdraw your consent at any time by:
- In-App Settings: Use the Privacy & Consent section in app settings
- Email Request: Contact us at privacy@movelink.co.ke
- Data Protection Officer: Email dpo@movelink.co.ke
- Written Request: Send a letter to our registered address
Important: Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. Some services may no longer be available if you withdraw essential consents.
We maintain records of:
- When you provided consent
- What you consented to
- How consent was obtained
- Any changes or withdrawals of consent
These records are kept for legal compliance purposes and to honor your privacy choices.
This Privacy Policy is governed by the laws of Kenya.