Privacy Policy

Reloca8 is operated by Gratia Nova Limited t/a Reloca8 (“Reloca8”, “we”, “us”). We are the data controller for the personal data described in this policy — meaning we decide how and why it’s processed, and we’re responsible for looking after it.

For UK users: Gratia Nova Limited t/a Reloca8 is registered with the Information Commissioner’s Office as a data controller, registration number ZC249602. You can verify this entry on the ICO’s public register at ico.org.uk/ESDWebPages/Search.

[Registered office address and company number still to be inserted here before this policy is published live.]

We collect only what a move actually requires:

• Identity & contact details — name and email address, collected when you create an account.
• Move details — your current and new address, move date, and which services you’ve asked us to handle.
• Your electronic signature — the signature image you draw when signing a customer authorization, plus the timestamp and IP address it was signed from (see below — this one gets its own section because it matters more than the rest).
• Service status data — which notices you’ve downloaded or sent and which deals you’ve selected, so your dashboard reflects your actual progress.
• Basic technical data — device and browser information, and the IP address your requests come from, largely for security and fraud prevention.

We rely on the following legal bases (UK GDPR / EU GDPR terms — the reasoning is the same under US frameworks):

• Performance of a contract — we can’t prepare your change-of-address or cancellation paperwork without your address, your instructions, and your signed authority.
• Legitimate interests — fraud prevention, keeping the service secure, and understanding how the product is used so we can improve it.
• Legal obligation — retaining a signed audit trail of the authority you granted us, in case a provider, regulator, or you yourself ever needs to verify what was agreed and when.
• Consent — for anything optional, like marketing emails, which you can withdraw at any time.

When you sign a customer authorization inside Reloca8, you are giving us limited, specific authority to prepare change-of-address, transfer, and cancellation paperwork for named providers, using your move details — paperwork you then review and send yourself; we do not submit anything to a provider directly on your behalf. That signature — the image, the exact text you agreed to, the timestamp, and the IP address it was signed from — is stored as a legal record of that authorization. We do not use it for any purpose beyond that record and the specific instructions you authorized.

To act on your move, we necessarily share a limited slice of your data with:

• The specific providers you name — your council, utility company, the DMV, USPS, and similar — but only the details needed to process the exact instruction you authorized (e.g. your account reference, current and new address, and move date).
• Broadband/fiber partners — if you click through to compare or sign up for a new deal, the partner receives a referral identifier so we can be credited for the introduction. See our Affiliate Disclosure for the full picture.
• Service providers who work for us — our hosting and database providers, who process data on our instructions under contract and never use it for their own purposes.

We do not sell your personal data. We never have.

Reloca8 serves both UK and US customers, and our infrastructure providers may process data in either region. Where personal data moves from the UK/EU to a country without an adequacy decision, we rely on appropriate safeguards (such as the UK International Data Transfer Addendum or Standard Contractual Clauses) to keep it protected to the same standard.

We keep account and move data for as long as your account is active, plus a limited period afterward to satisfy legal and audit obligations. Signed customer authorizations and their audit trail (signature, timestamp, IP) are retained for longer — in line with the statute-of-limitations periods for contract disputes in the relevant jurisdiction — since they exist specifically to be evidence if ever needed. Deleting your account removes your profile and dashboard data; it does not immediately erase authorization audit records we’re required to retain, though we will minimize what’s kept to only what the legal basis requires.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure, subject to our legal retention obligations above
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, for anything based on consent

UK/EU users can also lodge a complaint with the Information Commissioner’s Office. California residents have equivalent rights under the CCPA/CPRA, including the right to know what’s collected and to opt out of any “sale” of personal data — Reloca8 does not sell personal data, so there is nothing to opt out of. To exercise any of these rights, contact us at privacy@reloca8.com.

We use a small number of strictly necessary cookies and browser storage to keep you signed in and remember your region preference. Full detail — including what we’d use if that ever changes — lives in our Cookie Policy.

Reloca8 is intended for adults arranging their own household moves. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

We use encryption in transit and at rest, role-based access controls, and database-level row security so that account data is only ever reachable by its owner. More detail is on our Trust & Security page. No system is perfectly secure, and we’ll notify affected users and relevant regulators without undue delay if that ever changes.

If we make material changes to this policy, we’ll update the date at the top of this page and, where the change is significant, notify you directly.

Questions about this policy or your data? Email privacy@reloca8.com.