Data Retention Policy

This policy explains how long MoveQuoteLocal retains different categories of personal data, in line with UK GDPR storage-limitation principles and our legal obligations.

• Active enquiries retained up to 12 months from last contact, then archived.
• Unmatched/unused enquiries automatically deleted after 90 days if no Partner has actioned them.
• Cancelled enquiries anonymised within 30 days of cancellation.

• Stored in a private bucket with signed, time-limited URLs.
• Default retention: 72 hours (3 days) from upload.
• Automatically purged on expiry unless your enquiry is still active.
• Excluded from search engine indexing.

Retained for up to 7 years as evidence of lawful processing, in line with ICO guidance on demonstrating compliance and limitation periods for civil claims.

• Active partner accounts: retained for the duration of the contract.
• Insurance & verification documents: retained for the duration of the contract + 6 years.
• Removed partners: account access revoked immediately; minimal records retained for dispute and audit purposes.

Retained for 7 years as required by HMRC and UK accounting regulations.

Authentication logs, lead access logs, admin action logs and webhook logs are retained for up to 12 months for fraud prevention and security investigations.

When you request erasure via our GDPR portal, personal identifiers are removed from active systems within 30 days. Anonymised aggregate analytics and statutorily-required records (consent logs, invoicing) are retained as set out above.