Privacy notice

Who we are

DudzikSpeed provides international removals and personal-effects transport between the UK, Northern Ireland, Poland and Ireland. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) the data controller is the DudzikSpeed company named on our licensing page. You can contact us about your data at hello@dudzikspeed.com.

What we collect and why

We collect only what we need to give you a quote, run your move and meet our legal duties.

• Account details: your name, email, password (stored only as a salted hash, never in plain text), preferred language and phone if you give it. Lawful basis: performance of a contract.
• Booking details: collection and delivery addresses and postcodes, box counts, furniture volume, dates and the prices calculated. Lawful basis: contract.
• Customs documents (outbound moves to Poland only): your passport or ID, an inventory of goods and proof of residence. This is identity data and we treat it with particular care. Lawful basis: contract and compliance with a legal obligation (customs).
• Payment data: card payments are processed by Stripe. We never see or store your full card number; we keep only the payment reference and amount. Lawful basis: contract.
• Chat and enquiry transcripts: messages you send to our assistant, so we can answer and improve the service. Lawful basis: legitimate interest.
• Marketing preferences: only if you opt in. Lawful basis: consent, which you can withdraw at any time.
• Technical data: your approximate country (from Cloudflare) to suggest a language, and standard security logs. Lawful basis: legitimate interest in a secure, usable site.

How your documents are protected

Customs documents are encrypted with AES-256-GCM before they are written to storage. The encrypted files are held in Cloudflare R2; our database stores only the file metadata and the encryption details needed to decrypt the file for you. Access is logged. Only you and the staff handling your move can retrieve a document, and every access is recorded in an audit log.

How long we keep it

We keep data only as long as we need it.

• Customs documents: deleted, encrypted bytes and metadata together, 90 days after your move, unless we must keep them longer for a customs or legal reason.
• Chat and enquiry transcripts: 12 months.
• Access and audit logs: up to 24 months.
• Account and booking records: until you close your account, after which we delete them, keeping only the minimum financial record the law requires us to retain (for example for tax).

A scheduled job runs daily to enforce these periods automatically.

Who we share it with

We do not sell your data. We share it only with the service providers that make the move work, each acting under a data-processing agreement:

• Cloudflare: website hosting, the database and encrypted document storage.
• Stripe: payment processing.
• Anthropic: powers the chat assistant (your messages are sent to generate a reply).
• Google: the routing service that calculates distance for your quote.
• Smartsheet: our internal enquiry log.

Some of these providers may process data outside the UK and EU. Where they do, transfers are covered by the appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent clauses).

Your rights

Under UK and EU data protection law you can:

• ask for a copy of your data (you can download it yourself from your account at any time),
• correct anything inaccurate,
• have your data erased (you can close your account and erase your data from the account page),
• restrict or object to certain processing,
• ask for your data in a portable format, and
• withdraw consent for marketing at any time.

To exercise any right, use the controls in your account or email hello@dudzikspeed.com. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EU.

Cookies

We use a single strictly necessary cookie to keep you signed in to your account. It is not used for tracking or advertising, so no consent banner is required. If we ever add analytics, we will ask for your consent first.

Changes to this notice

We may update this notice as the service develops. The date at the top shows when it was last reviewed. Material changes will be highlighted on this page.