Privacy notice

Where Should I Live is run from the UK by dealmobile.co.uk (“we”). We are the controller of the personal data described here. Contact us at [email protected].

The short version

• You can use the site without an account. Your answers then stay in your own browser.
• If you sign in, we keep your email address and the profile you save, so it follows you between devices.
• We don’t sell your data, show adverts or use tracking or analytics cookies.
• You can delete your account yourself at any time.

What we collect

Without an account. Your answers, priorities and filters are saved in your browser’s local storage, not on our servers. See Cookies and storage.

With an account, we store:

• your email address
• a sign-in token that keeps you signed in for up to 90 days (we keep only a scrambled, hashed copy of it)
• the profile you save: passports, income, type of work, home city, who is moving with you (a partner’s income, type of work and passports, how many children in each age group, and how many other adults), and your preferences and weights.

Optional settings that could be sensitive. You can choose how much weight to give to a city’s religious or ethnic make-up, and whether women’s or LGBTQ+ safety matters to you. These settings are optional, neutral or off by default, and used only to rank cities for you. If you’re signed in they are saved with your profile; leave them at their defaults if you’d rather not store them.

If you tell us about people moving with you, please make sure they’re happy for you to share it. We only use it to work out tax, costs and visas for your household.

Logs and rate limits. Our web host and Cloudflare keep short-lived logs of requests, including IP addresses, to run the site and protect it. To stop sign-in links being abused, we keep rate-limit records for up to an hour. They hold only a scrambled (hashed) identifier, never your email or IP address.

Why we use it

• Your account and saved profile: to provide the service you signed up for (our contract with you, set out in the terms of use).
• The optional sensitive settings: your explicit consent, which you give by setting them. You can withdraw it at any time by resetting them or deleting your account.
• Logs and rate limits: our legitimate interest in keeping the site secure and working.

The only emails we send are the sign-in links you ask for. We send no marketing.

Who handles it for us

• Our web host, in the EU, stores the account database and runs the site.
• Cloudflare carries all traffic to the site and protects it from attacks.
• Google Workspace delivers the sign-in emails.
• Google Fonts serves the site’s fonts, so your browser connects to Google, which sees your IP address.
• OpenWeather supplies weather. Our server asks it for a city’s weather; nothing about you is sent.

Some of these providers may handle data outside the UK. Where they do, they use the safeguards UK law requires, such as the UK International Data Transfer Agreement or the UK-US data bridge.

How long we keep it

• Account data: until you delete your account.
• Sign-in links: 15 minutes. Sign-in tokens: 90 days, or until you sign out.
• Rate-limit records: up to an hour.
• Host and Cloudflare request logs: the short periods those providers set.

Deleting your account

Sign in, open Account at the top of your matches and choose Delete my account and data. This deletes your email address, saved profile and sign-in from our servers straight away and clears them from your browser. It can’t be undone.

Signing out also removes your profile and answers from the browser you’re using. For anything else, email [email protected].

Your rights

Under UK data protection law you can ask to see, correct, delete or take a copy of your data, object to how we use it, ask us to restrict it, and withdraw consent at any time. Email [email protected] and we’ll reply within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We’d appreciate the chance to put things right first.

Children

The site isn’t aimed at children. Accounts are for people aged 18 or over.

Changes to this notice

If we change this notice we’ll update the date below. If a change affects how we use your data, we’ll say so on the site, and email account holders, before it applies.