Data Protection & Privacy Notice

1. Who we are and what this notice covers

Move Forward Homes Ltd ("Move Forward Homes", "we", "us", "our") is a UK property sourcing company. We connect homeowners who need to sell quickly with cash buyers and property investors, and we refer opportunities on to established property traders.

We are the data controller for the personal information described in this notice. That means we decide what information we collect about you and what we do with it, and we are legally responsible for looking after it.

We are not required to appoint a Data Protection Officer. The Director, Aaron James Fairhurst, is personally responsible for data protection at Move Forward Homes and is your point of contact for anything in this notice.

Who this notice applies to

• Sellers and homeowners — anyone who contacts us about selling a property, or whose property we approach or assess.
• Cash buyers, investors and JV partners — people and companies who buy deals from us or partner with us.
• Property traders — people and companies we refer opportunities to.
• Enquirers and visitors — anyone who contacts us by phone, WhatsApp, email, social media, our website or a leaflet response.
• Professional contacts — solicitors, agents, brokers and other introducers we work with.

2. The information we collect

The information we collect depends on how you deal with us. We only collect what we actually need.

If you are a seller or homeowner

• Name, address, phone number, email address and preferred contact method.
• Details of the property — address, tenure, condition, occupancy, tenancies, any mortgage or charges, and photographs.
• Your situation and reasons for selling, and how quickly you need to move, only where you choose to tell us (for example relocation, probate, separation, financial pressure, problem tenants or the cost of repairs).
• Ownership information, including entries from HM Land Registry and Companies House.
• Notes of our conversations, viewings, valuations and offers.
• Identity documents and anti-money-laundering (AML) checks — passport or driving licence, proof of address, date of birth, and the results of electronic identity, sanctions and politically exposed person screening.
• Bank or solicitor details where these are needed to complete a transaction.

If you are a cash buyer, investor or JV partner

• Name, company name and number, address, phone number and email address.
• Your buying criteria — areas, budget, property types and strategy.
• Proof of funds and source of funds evidence, and AML identity and screening results.
• Records of deals introduced, fees agreed and paid, and JV contributions and profit shares.

If you are a property trader we refer to

• Name, company details and contact details.
• The types of opportunity you want to receive.
• Referrals we have sent you, outcomes, and referral fees agreed and paid.

Information about owners of properties we identify ourselves

Part of what we do is spotting properties that look vacant, neglected or run down — for example an overgrown garden, a broken window or post building up — and either approaching the owner or passing the observation to a property trader.

Where we do this we may record the property address, our observations about its condition, and, where it is publicly available, the name and correspondence address of the registered owner from HM Land Registry or Companies House. We do not carry out surveillance of people, we do not enter private property, and we do not record information about who lives at an address or their circumstances.

Sensitive information

We do not ask for information about your health, ethnicity, religion, sexual life, political opinions or trade union membership, and you do not need to give it to us.

People sometimes sell because of illness, bereavement or a relationship breakdown, and you may choose to tell us. If you do, we will record only what we genuinely need in order to help you, we will treat it in confidence, and we will rely on your explicit consent to hold it. You can withdraw that consent at any time and we will delete it.

Information about criminal offences may come up through the sanctions and financial crime screening we are legally required to run. We process it only to meet our obligations under the money laundering regulations, under the substantial public interest condition in Schedule 1 of the Data Protection Act 2018 (preventing or detecting unlawful acts).

Website and marketing information

If you use our website or social media, we may collect your IP address, device and browser information, and how you found and moved around the site. Where we use cookies or similar technologies that are not strictly necessary, we will tell you and, where the law requires it, ask for your consent first. Under the rules that changed in February 2026, some low-risk analytics and appearance cookies no longer require consent, but you will always be given a simple way to opt out of them.

We do not use website analytics, advertising pixels, or any tracking that follows you to other websites. There is no cookie banner on our site because there is nothing on it that requires your consent.

Our enquiry form uses Cloudflare Turnstile to tell real people apart from automated bots, which stops the form being abused. To make that judgement it looks at your IP address and characteristics of your browser and device, and it may set a cookie that is strictly necessary for that security purpose. It does not profile you, does not track you across other sites, and is not used for advertising. We deliberately do not use Google reCAPTCHA, which does track people across websites.

3. Where we get your information from

• Directly from you — by phone, WhatsApp, text, email, our website, social media, a leaflet response or in person.
• From someone who refers you to us, such as a solicitor, letting agent, family member, neighbour or another investor.
• From publicly available sources, including HM Land Registry, Companies House, the electoral roll, planning and licensing registers, and property portals.
• From our own observation of a property from a public road or footpath.
• From identity, sanctions and credit reference providers used for AML checks.
• From marketing and lead generation platforms where you have submitted an enquiry.

4. Why we use your information, and our legal basis

The law requires us to have a valid reason — a "lawful basis" — for every use of your personal information. Ours are set out below.

About "legitimate interests"

Where we rely on legitimate interests, we have weighed our business interest against your rights and freedoms and satisfied ourselves that our use of your information is fair and would not be unexpected. You can ask us for a copy of that assessment at any time, and you can object to any processing based on legitimate interests — see section 9.

A small number of activities — such as reporting suspicions of financial crime, or responding to a request from a public body — fall within the "recognised legitimate interests" introduced by the Data (Use and Access) Act 2025, where the law does not require us to carry out that balancing exercise.

5. Who we share your information with

We do not sell your personal information, and we never pass your details to anyone simply to add you to a marketing list.

6. How we protect your identity when we market a deal

This is important, so we want to be plain about it.

• When we first present an opportunity to our buyer or JV network, we describe it in outline only — for example the area, property type, condition, guide price and expected margin. We do not include your name or the full address at that stage.
• We will only release your name, full address and contact details to a specific buyer once you have agreed to it, and once that buyer has satisfied our proof of funds and identity checks.
• Anyone we share your details with is required to keep them confidential and to use them only for the purpose of that transaction.
• If you tell us you do not want your property circulated at all, we will not circulate it.

7. Marketing, calls and messages

If you have given us your details as a buyer, JV partner or trader, we will send you deal alerts and updates by email, WhatsApp or SMS. You can opt out at any time by replying "STOP", clicking unsubscribe, or emailing us — and we will act on it straight away.

We may deliver leaflets or letters to properties in the areas we work in. If you would rather not receive these, tell us the address and we will add it to our suppression list.

We screen telephone numbers against the Telephone Preference Service and Corporate TPS before making any unsolicited marketing call, and we do not make automated or recorded marketing calls.

We keep a permanent do-not-contact list. If you ask us to stop contacting you, we have to keep a minimal record of your details for that purpose only — this is what allows us to honour your request.

8. How long we keep your information

We keep personal information only for as long as we need it, then delete it securely or, where appropriate, anonymise it.

9. Your rights

Under UK data protection law you have the following rights. They are free to exercise, and we will not treat you any differently for using them.

Automated decision-making

We do not make decisions about you by automated means and we do not profile you. Offers are made by a person, based on the property and your circumstances. Our AML screening tools produce alerts, but a person always reviews them before anything is decided.

How to exercise a right

Email contact@moveforwardhomes.com or call 07417 577160. We will respond within one month. If your request is complex or you have made several requests, we may extend this by up to two further months, and we will tell you within the first month if we need to.

We may ask you to confirm your identity before we release information — this is to protect you, not to delay you. If we ask for clarification about what you want, the clock pauses until you reply.

10. How to complain

If you are unhappy with how we have handled your personal information, please tell us first. Since 19 June 2026 you have a legal right to complain directly to us, and we have a legal duty to take that complaint seriously.

If you are still not satisfied, or if we have not dealt with your complaint properly, you can complain to the Information Commissioner's Office. The ICO will normally expect you to have raised it with us first.

Complaints about our property sourcing service itself — rather than about your data — can be raised with the Property Redress Scheme, membership number PRS060191.

11. Keeping your information safe

We take the security of your information seriously and use measures proportionate to a small business handling sensitive personal and financial data:

• Devices are password or biometric protected and encrypted, with automatic screen locking.
• Accounts use strong, unique passwords and two-factor authentication wherever it is available.
• Information is stored in reputable cloud services with access limited to those who need it.
• Identity documents are stored in a restricted location and are never sent by unencrypted email or messaging app.
• Paper records are kept locked away and shredded when no longer needed.
• Data is backed up, and access is removed promptly when someone stops working with us.

How your enquiry reaches us

When you submit the enquiry form, your details are encrypted in transit and passed to a small program running on Cloudflare's network. That program checks the submission is genuine, then delivers it directly into our own Microsoft 365 mailbox over an authenticated connection to Microsoft.

Because it is sent from that mailbox to that same mailbox, your enquiry never crosses the public email network — the part of ordinary email where a message can, in principle, be intercepted. It is not stored on the website, and it is not passed to any form service, marketing platform or third-party CRM.

If a breach happens that is likely to put your rights at risk, we will report it to the ICO within 72 hours and tell you without undue delay if there is a high risk to you.

12. Sending information outside the UK

We aim to keep your information in the UK, and enquiries you send us are stored in our own Microsoft 365 mailbox on a UK-based account.

There is one transfer we would rather be plain about. Our website and enquiry form run on Cloudflare, a company based in the United States that operates a worldwide network. When you submit the form, your details are processed momentarily at whichever Cloudflare location is nearest to you before being delivered to us. Cloudflare does not keep a copy of your enquiry. This is covered by Cloudflare's data processing agreement, which incorporates the UK Addendum to the EU Standard Contractual Clauses and the UK Extension to the EU–US Data Privacy Framework.

Where any other provider we use stores or processes data outside the UK, we make sure the transfer is protected — either because the country has UK adequacy status, or through the UK International Data Transfer Agreement or the UK Addendum, together with a transfer risk assessment. You can ask us for details of the safeguards in place at any time.

13. Changes to this notice

What changed in version 1.1. We rebuilt our website and enquiry form. This version names Cloudflare and Microsoft as the providers involved, explains exactly how an enquiry travels from the form into our mailbox, describes the anti-spam check on the form, and sets out the one international transfer that involves. No new information is collected, and nothing is kept for longer.

We review this notice at least once a year, and whenever our business or the law changes. The version number and date are shown at the top. Where a change materially affects how we use your information, we will contact you directly. We recommend you check the current version before sharing new information with us.