Urban Movement Privacy + Cookies Policy
Privacy Notice
Last updated: July 2025
Urban Movement is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and relevant data protection legislation.
Who we are
Urban Movement Limited
Exmouth House
3-11 Pine Street, London EC1R 0JH
[email protected]
Urban Movement is the data controller for the personal data we collect via our website, professional enquiries, and business-to-business interactions.
What personal data we collect
We may collect and process the following types of personal data:
> Full name and job title
> Business contact details (email address, phone number, organisation)
> Enquiry or project-related correspondence
> Survey or feedback responses
> Website usage data (via cookies—see below Section)
How we use your data
We use your data for the following purposes:
> To respond to business or project enquiries
> To manage professional relationships and provide services
> To carry out stakeholder engagement or consultation activities
> To improve our website, services, and communications
> To comply with legal or regulatory obligations
Lawful basis for processing
We process your personal data under the following legal bases:
> Legitimate Interests – where necessary for the operation of our business (e.g. responding to enquiries, maintaining business relationships), provided this does not override your rights.
> Contractual Necessity – where processing is required to fulfil a contract with you or your organisation.
> Consen – where you actively opt-in (e.g. by completing a survey or requesting to be contacted).
We carry out legitimate interest assessments (LIAs) to ensure these rights are balanced.
Sharing your data
We may share your data with:
> Our internal team and trusted partners involved in delivering services
> Third-party service providers (e.g. Microsoft 365, Dropbox) under strict confidentiality and data processing agreements
> Public sector clients, only where necessary for project delivery and with appropriate safeguards
We will never sell or share your data for marketing purposes.
International data transfers (UK GDPR & Schrems II)
Where we use tools or services that may transfer personal data outside the UK (e.g. to the United States), we ensure that appropriate safeguards are in place, including:
> UK International Data Transfer Addendum to the Standard Contractual Clauses (SCCs)
> UK-US Data Bridge – for US-based processors certified under the UK Extension to the EU–US Data Privacy Framework
See: https://www.dataprivacyframework.gov/s/participant-search
These measures ensure your personal data is protected to UK standards even when processed abroad.
Data retention
We will retain your personal data only for as long as necessary:
> To fulfil the purposes for which it was collected
> To comply with legal, contractual, or audit requirements
> Typically, no longer than 6 months after project completion unless otherwise required
Data may be anonymised for longer-term statistical analysis where appropriate.
Cookies
Our website uses cookies to understand how visitors interact with our site. You can manage your cookie preferences through your browser settings. For more information see http://www.allaboutcookies.org/
Your data protection rights
You have the following rights under UK GDPR:
> Right to access your personal data
> Right to rectify inaccurate or incomplete data
> Right to erase your data (the “right to be forgotten”)
> Right to restrict or object to processing
> Right to data portability (in certain circumstances)
> Right to withdraw consent at any time (where applicable)
> Right to lodge a complaint with the UK Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us below.
Contact and complaints
If you have any questions about this Privacy Notice or how we handle your data, please contact:
Data Protection Lead:
Oli Davey
[email protected]
You also have the right to raise a concern with the Information Commissioner’s Office (ICO) https://ico.org.uk/concerns/
Last updated: July 2025
Urban Movement is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and relevant data protection legislation.
Who we are
Urban Movement Limited
Exmouth House
3-11 Pine Street, London EC1R 0JH
[email protected]
Urban Movement is the data controller for the personal data we collect via our website, professional enquiries, and business-to-business interactions.
What personal data we collect
We may collect and process the following types of personal data:
> Full name and job title
> Business contact details (email address, phone number, organisation)
> Enquiry or project-related correspondence
> Survey or feedback responses
> Website usage data (via cookies—see below Section)
How we use your data
We use your data for the following purposes:
> To respond to business or project enquiries
> To manage professional relationships and provide services
> To carry out stakeholder engagement or consultation activities
> To improve our website, services, and communications
> To comply with legal or regulatory obligations
Lawful basis for processing
We process your personal data under the following legal bases:
> Legitimate Interests – where necessary for the operation of our business (e.g. responding to enquiries, maintaining business relationships), provided this does not override your rights.
> Contractual Necessity – where processing is required to fulfil a contract with you or your organisation.
> Consen – where you actively opt-in (e.g. by completing a survey or requesting to be contacted).
We carry out legitimate interest assessments (LIAs) to ensure these rights are balanced.
Sharing your data
We may share your data with:
> Our internal team and trusted partners involved in delivering services
> Third-party service providers (e.g. Microsoft 365, Dropbox) under strict confidentiality and data processing agreements
> Public sector clients, only where necessary for project delivery and with appropriate safeguards
We will never sell or share your data for marketing purposes.
International data transfers (UK GDPR & Schrems II)
Where we use tools or services that may transfer personal data outside the UK (e.g. to the United States), we ensure that appropriate safeguards are in place, including:
> UK International Data Transfer Addendum to the Standard Contractual Clauses (SCCs)
> UK-US Data Bridge – for US-based processors certified under the UK Extension to the EU–US Data Privacy Framework
See: https://www.dataprivacyframework.gov/s/participant-search
These measures ensure your personal data is protected to UK standards even when processed abroad.
Data retention
We will retain your personal data only for as long as necessary:
> To fulfil the purposes for which it was collected
> To comply with legal, contractual, or audit requirements
> Typically, no longer than 6 months after project completion unless otherwise required
Data may be anonymised for longer-term statistical analysis where appropriate.
Cookies
Our website uses cookies to understand how visitors interact with our site. You can manage your cookie preferences through your browser settings. For more information see http://www.allaboutcookies.org/
Your data protection rights
You have the following rights under UK GDPR:
> Right to access your personal data
> Right to rectify inaccurate or incomplete data
> Right to erase your data (the “right to be forgotten”)
> Right to restrict or object to processing
> Right to data portability (in certain circumstances)
> Right to withdraw consent at any time (where applicable)
> Right to lodge a complaint with the UK Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us below.
Contact and complaints
If you have any questions about this Privacy Notice or how we handle your data, please contact:
Data Protection Lead:
Oli Davey
[email protected]
You also have the right to raise a concern with the Information Commissioner’s Office (ICO) https://ico.org.uk/concerns/
