Privacy Policy

WhereCanIMove is operated by 30M LIMITED (England and Wales, company 09386561), Office 3, St Ann’s House, 111 Guildford Road, Lightwater, Surrey, GU18 5RA, United Kingdom. We provide a free database of immigration and residency programmes.

We collect minimal data:

• Contact form submissions — name, email, and message when you contact us.
• Alert subscriptions — email address and programme preferences if you sign up for alerts.
• IP-based geolocation — your approximate country (used to personalise programme sorting). We do not store your IP address.
• Usage analytics — anonymous page views and interactions. No personal identifiers.
• Account & activity — if you create an optional account, we store your email and the activity tied to it (programmes you view, save, search, and compare) to build your personal dashboard overview and tailor recommendations. We do not sell account activity. Authorised operators can review saved research to provide support and understand agency-coverage needs.
• Saved research and packs — the routes you choose, research questions, timing and household preferences, purchased snapshots, checklist progress and budget figures. These are private to your account and authorised operators supporting the service. Please do not enter identity documents or unnecessary sensitive details.
• Digital nomad planner — optional passport and residence country names, work arrangement and permission status, working hours, target month and stay, household, destinations, priorities, and income/budget estimates. A temporary draft is held in this browser tab for up to 24 hours and checked for expiry on return; clear it with the planner’s reset button. Choosing account saving creates a temporary 15-minute handoff in this browser. When you request the email link, the chosen answers are stored privately with its token so the verified link can recover them on another device. Temporary token answers are cleared after a successful save. A failed save can be retried by the verified email owner within the original 15-minute window; expired token answers are purged on subsequent link requests. Saving to an account stores the answers privately with your research, normally for up to one year. We send only generic consented planner-stage events to measurement services, not these answers. No agency introduction or marketing permission is created by using or saving the planner.
• US discovery plans — optional country names, work and household preferences, working hours, timing, priorities and budget targets. Results are available without an account. A submitted browser draft expires after 24 hours on return; use the clear button to remove it sooner. Choosing save and verifying an email stores the plan privately for your account and authorised support staff. Starting plans can be removed from the planner’s saved-plan controls. Saving does not create marketing or agency-sharing permission. Generic measurement events require optional consent; research answers are not sent with them.
• Agency-help requests — your request and recorded contact permission. A named agency and the exact information must be approved before an introduction. Saving research or buying a pack does not subscribe you to marketing or authorise agency sharing.
• Campaign attribution — if you arrive from an advert and later submit your email or start checkout, we may store campaign tags and advertising click IDs with that lead or checkout so we can measure which campaigns worked.
• Billing records — if you buy a paid product, we store Stripe customer, checkout and subscription identifiers, the product or plan, status and billing period. Stripe processes payment-card and billing details; we do not receive or store full card numbers.
• Team membership — a Pro Team owner can assign seats to existing accounts. We store the owner/member relationship and member email so the owner can manage those seats.

• Accounts are optional — you can browse everything without signing in.
• We do not sell personal data. Service providers process information needed to operate the site; agencies receive only the information you approve for a named introduction.
• We do not store full payment-card details.

Essential storage (in your browser's localStorage) keeps the site working: your saved programmes, the research draft you choose to resume, email preference, and cookie choice. A secure session cookie keeps you signed in. This is always on.

Optional measurement uses Google Analytics, Google Ads, Microsoft Advertising UET and Meta Pixel to measure page views, interactions and conversions. These services are loaded only after you accept in the cookie banner. If you reject, or have not yet chosen, their browser scripts and cookies are not loaded. You can change your choice by clearing the site's stored data in your browser.

First-touch campaign parameters may be kept in first-party browser storage before consent so they can be attached to a form you deliberately submit. They are not sent to an advertising platform by that storage step.

• DigitalOcean — hosting infrastructure (servers in New York).
• Neon — database hosting (servers in US East).
• Anthropic (Claude) — powers the AI matcher and chat features. Queries are not stored or used for training.
• Resend — transactional email delivery for contact forms and alerts.
• Google Analytics — optional, consent-gated usage analytics (page views and interactions, IP-anonymised). Only active after you accept.
• Google Ads — optional, consent-gated advertising conversion measurement. Only active after you accept.
• Microsoft Advertising — optional, consent-gated UET conversion measurement for Bing and Microsoft search campaigns. Only active after you accept.
• Meta — optional, consent-gated Pixel and Conversions API measurement for Meta advertising. Verified purchase events can use a one-way hashed email for matching when configured. Confirming an email subscription does not itself authorise advertising measurement.
• Stripe — secure checkout, subscription billing, invoices and customer self-service. Stripe processes your payment and billing details under its own privacy terms.
• ip-api.com — IP geolocation lookup (country-level only, no personal data stored).

Contact form messages are retained for 12 months then deleted. Alert subscriptions remain active until you unsubscribe. Account and activity data is retained until you delete your account or request deletion. Billing and team-seat records are retained as needed for subscription administration, accounting, tax and legal obligations. Anonymous analytics data is retained for 24 months.

You have the right to:

• Request access to any personal data we hold about you.
• Request deletion of your data.
• Unsubscribe from alerts at any time.
• Contact us with any privacy concerns.

To exercise any of these rights, email [email protected].

We may update this policy from time to time. Material changes will be noted on this page with an updated date.