Privacy Policy

Last updated: [config required: privacy.policyEffectiveDate]

1. Who is the data controller?

The data controller is [config required: privacy.controllerLegalName], doing business as MoveSpace. You can reach the controller in writing at [config required: privacy.controllerMailingAddress], by email at [config required: privacy.rightsRequestEmail], or through our rights-request form.

When you book a move through a moving company on our platform, that moving company is a separate, independent data controller for its own customer data (your booking, billing, communications, and any data you give the company directly). The moving company maintains its own privacy notice; this policy describes only MoveSpace's practices.

2. Categories of personal information we collect

We collect personal information in the categories below. The categories use the terminology adopted by current U.S. state privacy statutes.

  • Identifiers: name, email address, postal address, phone number, account credentials, IP address, device identifiers.
  • Customer records: billing address, payment-card brand and last four (full card numbers handled directly by our PCI-compliant payment processors and never stored on our servers).
  • Commercial information: bookings you have made, quote requests, services you have received, ratings and reviews you have submitted.
  • Internet or network activity: pages viewed, links clicked, search terms entered on the platform, interactions with our chat assistant.
  • Geolocation information: approximate location derived from IP address; precise origin and destination addresses you supply for a move.
  • Inferences: preferences and interests inferred from your booking history (used only to improve our service to you, not to build a profile sold to third parties).
  • Sensitive personal information: account log-in credentials and payment-card information that, in combination, would permit access to a financial account. We do not knowingly collect or process other sensitive categories enumerated under state law (genetic data, biometric data for identification, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health, sex life, or sexual orientation).

3. Sources of personal information

We obtain personal information from the following sources:

  • Directly from you when you create an account, request a quote, book a move, or contact support.
  • From the moving company you book with when they update your booking, send messages, or generate documents (estimates, bills of lading, invoices).
  • From our service providers (payment processors, mapping providers, fraud-prevention vendors, FMCSA verification services) acting on our behalf.
  • From your device (cookies, IP address, basic device metadata).

4. Purposes of processing

We use personal information for the following business and commercial purposes:

  • Providing the platform — quoting, booking, payment, dispatch, communications, and document generation.
  • Verifying moving company licensing and insurance against FMCSA / SAFER public records.
  • Processing payments (handled by Stripe, Square, or Clover depending on the moving company's configured processor).
  • Detecting, investigating, and preventing fraud and abuse on the platform.
  • Responding to consumer support requests, including privacy-rights requests.
  • Improving the platform — measuring usage, debugging issues, designing new features.
  • Complying with legal and regulatory obligations (tax, FMCSA, state moving regulations, response to valid legal process).

5. Categories of recipients

We disclose personal information only to the categories of recipients below, and only for the purposes described above.

  • The moving company you book with — receives your name, contact information, move details, and any messages you send to them. Required to fulfill your booking.
  • Payment processors (Stripe, Square, Clover) — receive payment-card information directly from you (we do not see or store full card numbers) and receive bookkeeping metadata about your payment.
  • Email and SMS providers — receive your name, email address, phone number, and message content for the limited purpose of delivering communications you have asked for or that the platform sends to operate.
  • Mapping providers — receive origin and destination addresses for the limited purpose of computing distance and ETAs.
  • Fraud-prevention vendors — receive limited information necessary to score risk on bookings and payments.
  • FMCSA / SAFER databases — receive moving-company DOT and MC numbers (no consumer information) to verify licensing.
  • Legal and regulatory recipients — when required by law, court order, subpoena, or government regulation.

We do not sell personal information for monetary consideration. We do not engage in cross-context behavioral advertising. The only consideration we receive in connection with disclosing your personal information is the service the recipient provides to us under contract, and recipients are restricted by contract from using your data for any purpose other than the service they provide to us.

6. Data retention

We retain personal information for the period necessary to provide the platform and meet our legal obligations:

  • Booking records, invoices, and tax records: 7 years after the booking, to comply with federal and state tax law and FMCSA recordkeeping requirements.
  • Account information for active accounts: as long as the account remains active.
  • Account information after account closure: 90 days for short-term recovery, after which we delete or de-identify.
  • Server logs (IP addresses, request metadata): 90 days, then deleted.
  • Communications (email, SMS, chat history): 3 years, to support customer-service quality and dispute resolution.

You may request earlier deletion using the rights-request form, subject to the statutory exceptions described in the state-specific sections below.

7. Data security

  • All data in transit is encrypted using HTTPS / TLS 1.2 or higher.
  • Sensitive fields are encrypted at rest using AES-256-GCM.
  • Payment-card data is processed by PCI-compliant third parties; we do not store full card numbers.
  • Access to personal information is restricted to authorized personnel and follows a principle of least privilege.
  • We monitor for, and respond to, suspected security incidents and material breaches.

No method of transmission or storage is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security.

8. Children

The platform is not intended for, and is not directed to, children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us at the address in Section 1 and we will delete it.

9. Your state-specific privacy rights

The rights you have, the time we have to respond, and the procedure to exercise them depend on your state of residency. Find your state below for the specific disclosures and rights that apply.

We could not determine your state from the request. Click any state below to expand the relevant disclosures.

IndianaINCDPAInd. Code §§ 24-15-1-1 to 24-15-13-1
Effective 2026-01-01

The following disclosures are made to Indiana residents pursuant to INCDPA (Ind. Code §§ 24-15-1-1 to 24-15-13-1).

Your rights as a Indiana resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under INCDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

INCDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the INCDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Indiana Attorney General at https://www.in.gov/attorneygeneral/consumer-protection-division/file-a-consumer-complaint/.

Statute-specific notes

Indiana follows the VCDPA framework with opt-IN consent for sensitive data. Right to portability is conditioned on the personal data having been provided directly to the controller by the consumer.

KentuckyKCDPAKy. Rev. Stat. §§ 367.3611 to 367.3637
Effective 2026-01-01

The following disclosures are made to Kentucky residents pursuant to KCDPA (Ky. Rev. Stat. §§ 367.3611 to 367.3637).

Your rights as a Kentucky resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under KCDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

KCDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the KCDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Kentucky Attorney General at https://ag.ky.gov/Consumer-Complaints.

Statute-specific notes

Kentucky tracks Indiana's framework closely. Opt-IN consent for sensitive data; appeal response within 60 days.

Rhode IslandRIDTPPAR.I. Gen. Laws §§ 6-48.1-1 to 6-48.1-12
Effective 2026-01-01

The following disclosures are made to Rhode Island residents pursuant to RIDTPPA (R.I. Gen. Laws §§ 6-48.1-1 to 6-48.1-12).

Your rights as a Rhode Island resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under RIDTPPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

RIDTPPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the RIDTPPA appeal process; if you remain dissatisfied, you may submit a complaint to the Rhode Island Attorney General at https://riag.ri.gov/consumer-protection.

Statute-specific notes

Rhode Island requires controllers to identify, in their privacy notice, all third parties to whom personal data has been sold or may be sold. We do not sell personal data; the categories of third parties with which we share personal data for service-provider purposes are listed in this policy.

MarylandMODPAMd. Code Comm. Law §§ 14-4601 to 14-4615
Effective 2025-10-01

The following disclosures are made to Maryland residents pursuant to MODPA (Md. Code Comm. Law §§ 14-4601 to 14-4615).

Your rights as a Maryland resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under MODPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

MODPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, consumer health data (including reproductive or sexual health information), mental or physical health condition or diagnosis, sex life or sexual orientation, status as transgender or nonbinary, citizenship or immigration status, national origin; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the MODPA appeal process; if you remain dissatisfied, you may submit a complaint to the Maryland Attorney General at https://www.marylandattorneygeneral.gov/Pages/CPD/complaint.aspx.

Statute-specific notes

Maryland is the strictest comprehensive privacy statute in force. It (1) prohibits the SALE of sensitive personal data outright, with no consent override; (2) requires that the collection and processing of personal data be limited to what is reasonably necessary and proportionate to provide or maintain the specific product or service the consumer requested; and (3) imposes additional protections for consumers known to be under 18 (no targeted advertising, no sale of their personal data, regardless of consent).

MinnesotaMCDPAMinn. Stat. §§ 325O.01 to 325O.13
Effective 2025-07-31

The following disclosures are made to Minnesota residents pursuant to MCDPA (Minn. Stat. §§ 325O.01 to 325O.13).

Your rights as a Minnesota resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under MCDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

MCDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the MCDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Minnesota Attorney General at https://www.ag.state.mn.us/Office/Complaint.asp.

Statute-specific notes

Minnesota grants consumers a unique right to question the result of profiling that produces legal or similarly significant effects, to be informed of the reasons for the result, and (where feasible) to be informed of the actions the consumer might have taken to secure a different result. Universal opt-out mechanism recognition required from effective date.

TennesseeTIPATenn. Code Ann. §§ 47-18-3201 to 47-18-3213
Effective 2025-07-01

The following disclosures are made to Tennessee residents pursuant to TIPA (Tenn. Code Ann. §§ 47-18-3201 to 47-18-3213).

Your rights as a Tennessee resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under TIPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

TIPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the TIPA appeal process; if you remain dissatisfied, you may submit a complaint to the Tennessee Attorney General at https://www.tn.gov/attorneygeneral/working-for-tennessee/consumer/consumer-complaints.html.

Statute-specific notes

Tennessee provides an affirmative defense for controllers that maintain a written privacy program reasonably conforming to the NIST Privacy Framework or an analogous framework. Opt-IN consent for sensitive data.

New JerseyNJDPAN.J. Stat. Ann. §§ 56:8-166.4 to 56:8-166.21
Effective 2025-01-15

The following disclosures are made to New Jersey residents pursuant to NJDPA (N.J. Stat. Ann. §§ 56:8-166.4 to 56:8-166.21).

Your rights as a New Jersey resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under NJDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

NJDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status, transgender or nonbinary status, financial information that would permit access to a consumer's financial account; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the NJDPA appeal process; if you remain dissatisfied, you may submit a complaint to the New Jersey Attorney General at https://www.njconsumeraffairs.gov/Pages/Consumer-Complaints.aspx.

Statute-specific notes

New Jersey is unique in expressly classifying financial-account-access information as sensitive personal data. Heightened protections apply to consumers known to be ages 13–17 — opt-IN required for sale, targeted advertising, and certain profiling.

IowaIADCPAIowa Code §§ 715D.1 to 715D.9
Effective 2025-01-01

The following disclosures are made to Iowa residents pursuant to IADCPA (Iowa Code §§ 715D.1 to 715D.9).

Your rights as a Iowa resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under IADCPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

IADCPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace provides notice and an opportunity to opt out of its processing.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 90 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 135 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. If you believe MoveSpace's handling violated IADCPA, you may submit a complaint to the Iowa Attorney General at https://www.iowaattorneygeneral.gov/for-consumers.

Statute-specific notes

Iowa allows controllers up to 90 days to respond — the longest window of any state with a comprehensive privacy law. Iowa does not include a right to correct, a right to opt out of profiling, or an appeal right. Sensitive data is handled via notice + opt-out (not opt-in).

DelawareDPDPA6 Del. C. §§ 12D-101 to 12D-115
Effective 2025-01-01

The following disclosures are made to Delaware residents pursuant to DPDPA (6 Del. C. §§ 12D-101 to 12D-115).

Your rights as a Delaware resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under DPDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

DPDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis (including pregnancy), sexual orientation, sex life, status as transgender or nonbinary, citizenship or immigration status, status as a victim of a crime; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the DPDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Delaware Attorney General at https://attorneygeneral.delaware.gov/fraud/cpu/complaint/.

Statute-specific notes

Delaware mirrors Oregon's broader sensitive-data definition. Universal opt-out mechanism recognition is required from the effective date. Right to obtain a list of specific third parties to which the controller has disclosed personal data is included.

New HampshireNHPAN.H. Rev. Stat. §§ 359-NN:1 to 359-NN:13
Effective 2025-01-01

The following disclosures are made to New Hampshire residents pursuant to NHPA (N.H. Rev. Stat. §§ 359-NN:1 to 359-NN:13).

Your rights as a New Hampshire resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under NHPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

NHPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the NHPA appeal process; if you remain dissatisfied, you may submit a complaint to the New Hampshire Attorney General at https://www.doj.nh.gov/consumer/complaints/.

Statute-specific notes

New Hampshire follows the VCDPA framework. Universal opt-out mechanism recognition required from the effective date. Opt-IN consent for sensitive data.

NebraskaNDPANeb. Rev. Stat. §§ 87-1101 to 87-1117
Effective 2025-01-01

The following disclosures are made to Nebraska residents pursuant to NDPA (Neb. Rev. Stat. §§ 87-1101 to 87-1117).

Your rights as a Nebraska resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under NDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

NDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the NDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Nebraska Attorney General at https://protectthegoodlife.nebraska.gov/file-complaint.

Statute-specific notes

Nebraska's applicability threshold is unique — it covers any controller that conducts business in Nebraska or produces a product or service consumed by Nebraska residents (no minimum data volume threshold). Opt-IN consent for sensitive data; universal opt-out signal recognition required.

MontanaMTCDPAMont. Code Ann. §§ 30-14-2801 to 30-14-2817
Effective 2024-10-01

The following disclosures are made to Montana residents pursuant to MTCDPA (Mont. Code Ann. §§ 30-14-2801 to 30-14-2817).

Your rights as a Montana resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under MTCDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

MTCDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data collected from a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the MTCDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Montana Attorney General at https://dojmt.gov/consumer/consumer-complaints/.

Statute-specific notes

Montana follows the VCDPA framework with mandatory universal opt-out signal recognition. Opt-IN consent for sensitive data; appeal response within 60 days. Consumers may exercise rights through an authorized agent.

TexasTDPSATex. Bus. & Com. Code §§ 541.001–541.205
Effective 2024-07-01

The following disclosures are made to Texas residents pursuant to TDPSA (Tex. Bus. & Com. Code §§ 541.001–541.205).

Your rights as a Texas resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under TDPSA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

TDPSA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data collected from a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

Do Not Sell or Share My Personal Information — exercise your TDPSA opt-out right.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the TDPSA appeal process; if you remain dissatisfied, you may submit a complaint to the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

Statute-specific notes

Texas requires the privacy notice to include the conspicuous statement: "NOTICE: We may sell your sensitive personal data." or "NOTICE: We may sell your biometric personal data." if the controller in fact does so. The TDPSA expressly requires controllers selling sensitive data or biometric data to post these notices. We do not sell sensitive or biometric data; the notice is therefore stated in the negative on this page. Opt-IN consent is required for processing sensitive data; appeal response within 60 days.

OregonOCPAOr. Rev. Stat. §§ 646A.570 to 646A.589
Effective 2024-07-01

The following disclosures are made to Oregon residents pursuant to OCPA (Or. Rev. Stat. §§ 646A.570 to 646A.589).

Your rights as a Oregon resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under OCPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

OCPA treats the following categories as sensitive personal information: racial or ethnic background, national origin, religious beliefs, mental or physical health condition or diagnosis (including pregnancy), sexual orientation, sex life, status as transgender or nonbinary, status as a victim of crime, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data of a child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the OCPA appeal process; if you remain dissatisfied, you may submit a complaint to the Oregon Attorney General at https://justice.oregon.gov/consumercomplaints/.

Statute-specific notes

Oregon's sensitive-data definition is the broadest of the VCDPA-family statutes — it expressly includes status as transgender or nonbinary and status as a victim of crime. Oregon also extends the right of access to allow consumers to obtain a list of specific third parties to which the controller has disclosed personal data. Opt-IN consent is required for processing sensitive data.

UtahUCPAUtah Code §§ 13-61-101 to 13-61-404
Effective 2023-12-31

The following disclosures are made to Utah residents pursuant to UCPA (Utah Code §§ 13-61-101 to 13-61-404).

Your rights as a Utah resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under UCPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

UCPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, sexual orientation, citizenship or immigration status, information regarding a medical condition or diagnosis; genetic or biometric data, if used for identification; specific geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace provides notice and an opportunity to opt out of its processing.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. If you believe MoveSpace's handling violated UCPA, you may submit a complaint to the Utah Attorney General at https://attorneygeneral.utah.gov/contact-us/.

Statute-specific notes

Utah grants fewer rights than its peers — no right to correct, no right to opt out of profiling, no appeal right. Sensitive data is handled via notice + opt-out rather than opt-in consent. There is no Data Protection Assessment requirement. Enforcement is exclusively by the Utah Division of Consumer Protection and the Attorney General.

ColoradoCPAColo. Rev. Stat. §§ 6-1-1301 to 6-1-1313
Effective 2023-07-01

The following disclosures are made to Colorado residents pursuant to CPA (Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313).

Your rights as a Colorado resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under CPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 45 days, with a possible 60-day extension, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

CPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status; genetic or biometric data that may be processed for the purpose of uniquely identifying an individual; personal data from a known child. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the CPA appeal process; if you remain dissatisfied, you may submit a complaint to the Colorado Attorney General at https://complaints.coag.gov/s/contact-us.

Statute-specific notes

Colorado requires controllers to recognize a universal opt-out mechanism (such as Global Privacy Control) as an opt-out of the sale of personal data and processing for targeted advertising. Affirmative opt-IN consent is required before processing sensitive data. Consumers may appeal a denial of a rights request; appeal response within 45 days, extendable by 60 days. Data Protection Assessments required for high-risk processing.

ConnecticutCTDPAConn. Gen. Stat. §§ 42-515 to 42-525
Effective 2023-07-01

The following disclosures are made to Connecticut residents pursuant to CTDPA (Conn. Gen. Stat. §§ 42-515 to 42-525).

Your rights as a Connecticut resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under CTDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

CTDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation, citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying an individual; personal data collected from a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the CTDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Connecticut Attorney General at https://portal.ct.gov/AG/Common/Complaint-Forms.

Statute-specific notes

Connecticut requires opt-IN consent for processing sensitive data and recognition of universal opt-out signals. Consumers may appeal a denial; appeal response within 60 days. Data Protection Assessments required for high-risk processing. Special protections apply to consumers ages 13–17 — controllers may not process such consumers' personal data for targeted advertising or sale without consent.

VirginiaVCDPAVa. Code Ann. §§ 59.1-575 to 59.1-585
Effective 2023-01-01

The following disclosures are made to Virginia residents pursuant to VCDPA (Va. Code Ann. §§ 59.1-575 to 59.1-585).

Your rights as a Virginia resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under VCDPA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to opt out of profiling that produces legal or similarly significant effects. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. MoveSpace does not perform such profiling on consumer personal information.
  • Right to appeal a denial of your privacy request. If MoveSpace denies your request, you may appeal the decision. MoveSpace will respond to your appeal within 60 days, in writing, with a substantive explanation of the decision.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.

Sensitive personal information

VCDPA treats the following categories as sensitive personal information: racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status; genetic or biometric data processed for the purpose of uniquely identifying a natural person; personal data collected from a known child; precise geolocation data. When MoveSpace collects or processes information falling into any of these categories, MoveSpace obtains your affirmative opt-in consent before processing it.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

If your request is denied

MoveSpace will explain the decision in writing within the response window. You may appeal the decision through the VCDPA appeal process; if you remain dissatisfied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform.

Statute-specific notes

Virginia requires controllers to obtain affirmative opt-IN consent before processing sensitive data. Consumers have a right to appeal a controller's refusal to act on a request; the controller has 60 days to respond to an appeal. Data Protection Assessments are required for processing of sensitive data, sale of personal data, processing for targeted advertising, and processing involving heightened risk of harm. No private right of action — enforcement is exclusively through the Attorney General.

CaliforniaCCPA / CPRACal. Civ. Code §§ 1798.100–1798.199.100
Effective 2020-01-01

The following disclosures are made to California residents pursuant to CCPA / CPRA (Cal. Civ. Code §§ 1798.100–1798.199.100).

Your rights as a California resident

  • Right to know what personal information we have about you. You may request the categories and specific pieces of personal information MoveSpace has collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom MoveSpace has shared it.
  • Right to request deletion of your personal information. You may request that MoveSpace delete personal information collected from you. MoveSpace will honor the request unless an exception under CCPA / CPRA applies (for example, to complete a transaction you requested, comply with a legal obligation, or detect security incidents).
  • Right to correct inaccurate personal information. You may request that MoveSpace correct inaccurate personal information about you. We will use commercially reasonable efforts to honor the request, taking into account the nature of the personal information and the purposes of the processing.
  • Right to receive your personal information in a portable format. You may request a copy of the personal information you have provided to MoveSpace in a portable, readily usable format.
  • Right to opt out of the sale of your personal information. You may direct MoveSpace not to sell your personal information. MoveSpace does not sell personal information for monetary consideration.
  • Right to opt out of targeted advertising or cross-context behavioral advertising. You may opt out of the processing of your personal information for targeted advertising or, where applicable, cross-context behavioral advertising. MoveSpace does not engage in cross-context behavioral advertising; opt-out signals such as Global Privacy Control are honored regardless.
  • Right to limit the use and disclosure of sensitive personal information. You may direct MoveSpace to limit the use of your sensitive personal information to that which is reasonably necessary to perform the services you have requested.
  • Right to use an authorized agent to exercise these rights on your behalf. You may designate an authorized agent to submit a request on your behalf. MoveSpace will require verification of the agent's authority and your identity before acting.
  • Right to be free from discrimination for exercising your privacy rights. MoveSpace will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or provided a different level or quality of service.
  • Limited private right of action for certain data breaches. Under CCPA / CPRA, you may have a private right of action for certain unauthorized data breaches involving specific categories of personal information.

Sensitive personal information

CCPA / CPRA treats the following categories as sensitive personal information: government identifiers (SSN, driver's license, state ID, passport); account log-in credentials, financial account numbers, debit/credit card numbers in combination with security/access codes; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, union membership; contents of mail, email, and text messages where the business is not the intended recipient; genetic data; biometric information processed for the purpose of uniquely identifying a consumer; personal information collected and analyzed concerning a consumer's health; personal information concerning a consumer's sex life or sexual orientation. When MoveSpace collects or processes information falling into any of these categories, you may request that MoveSpace limit its use and disclosure of it to what is reasonably necessary to provide the services you have requested.

How to exercise your rights

Submit a request through the consumer rights request form. MoveSpace will respond within 45 days; if a request is complex the response window may be extended once for an additional 45 days, with notice — total response time will not exceed 90 days. MoveSpace must verify your identity before acting.

MoveSpace honors opt-out preference signals such as Global Privacy Control (GPC). If your browser sends GPC, it is treated as a request to opt out of any sale or sharing of your personal information for that browser session and any account it is associated with.

Do Not Sell or Share My Personal Information — exercise your CCPA / CPRA opt-out right.

If your request is denied

MoveSpace will explain the decision in writing within the response window. If you believe MoveSpace's handling violated CCPA / CPRA, you may submit a complaint to the California Attorney General at https://oag.ca.gov/privacy/ccpa.

Statute-specific notes

California consumers may submit at least two designated methods of submitting requests, one of which is a toll-free number for businesses operating offline. Verifiable consumer requests have a 45-day response window with one 45-day extension when reasonably necessary, with notice. The California Privacy Rights Act (CPRA) added the right to correct, the right to limit use of sensitive personal information, and recognition of "opt-out preference signals" such as Global Privacy Control. Children: opt-IN consent required for the sale or sharing of personal information of consumers under 16.

If you reside in a state not listed above, you may still have privacy rights under federal law (for example, COPPA for children, FERPA for educational records). The rights-request form below accepts submissions from any U.S. state and we will respond as required by applicable law.

10. Global Privacy Control

MoveSpace honors the Global Privacy Control (GPC) signal as a universal opt-out of the sale or sharing of personal information. If your browser sends a GPC signal we will treat it, for as long as the signal is sent, as if you had submitted an opt-out request — for that browser, and for any account associated with the browser. You do not need to submit a separate request, and we will not require you to opt back in to receive the platform's baseline service.

GPC is a setting available in some browsers (Brave, DuckDuckGo, Firefox with the configuration enabled, certain Chrome extensions). See globalprivacycontrol.org for participating browsers.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in an updated effective date at the top of this page; substantive changes that affect your rights will be communicated to logged-in users by email at the address on file at least 30 days before the change takes effect, and notice will be posted on this page.

12. Contact

For questions about this policy or to exercise your rights, use our rights-request form, email [config required: privacy.rightsRequestEmail]. You may also write to us at [config required: privacy.controllerMailingAddress].

Our website is at https://movespace.market.

Privacy Policy — MoveSpace