Privacy Policy
Last updated: June 2026. This policy explains how Movepat (“we”, “us”) handles personal data when you use Movepat (Spain).
Who we are
Movepat is operated by Movepat, based in Spain. For privacy questions, contact us at privacy@movepat.com.
What data we collect
Movepat is designed to collect as little data as possible. We may process:
- Route selections — citizenship, destination, and current country you choose when building your move plan. These may appear in the page URL and are sent to Stripe as checkout metadata when you purchase.
- Visa route profile — your selected move reason (e.g. remote work, employment) stored locally in your browser and in the dashboard URL, used to personalize visa-related steps.
- Checklist progress — which steps you have completed, stored locally in your browser (localStorage).
- Purchase status — a local flag indicating you unlocked the Complete Move Plan for a given route, stored in your browser.
- Payment data — when you pay, Stripe processes your email and payment details. We do not store card numbers on our servers.
- Technical data — basic server logs from our hosting provider (e.g. IP address, browser type) needed to deliver the site securely.
When enabled, we use privacy-friendly analytics (Plausible) to collect anonymous usage events — such as which visa route you select and whether you click optional professional help links. We do not use advertising trackers. Analytics can be disabled by not setting the site's analytics configuration.
Why we use your data and legal basis
- To provide the service — showing your personalized checklist and saving progress (legitimate interest / performance of a contract).
- To process payments — fulfilling your purchase of the Complete Move Plan (contract).
- To operate the website — security, troubleshooting, and basic delivery (legitimate interest).
Third parties
We share data only where needed to run Movepat:
- Stripe — payment processing. See Stripe's Privacy Policy.
- Google Fonts — fonts are loaded from Google when you visit the site. Google may receive your IP address. See Google's Privacy Policy.
- Cloudflare — hosting and content delivery. See Cloudflare's Privacy Policy.
Storage and retention
Checklist progress and premium access flags are stored in your browser until you clear site data. Stripe retains payment records according to its own policies and legal obligations. Server logs are kept only as long as needed for security and operations.
International transfers
Some providers (such as Stripe and Google) may process data outside the European Economic Area. Where required, they use appropriate safeguards such as Standard Contractual Clauses.
Your rights under GDPR
If you are in the EU/EEA or UK, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Data portability, where applicable
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection authority
To exercise these rights, email privacy@movepat.com. Because much of your data is stored locally in your browser, you can also clear it yourself via your browser settings.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the latest version.