Privacy Policy

Last updated: April 19, 2026 · Effective: April 19, 2026

Move Abroad Rentals (“[LEGAL_ENTITY_NAME]”, “we”, “us”, “our”) operates the website moveabroadrentals.com and moveabroadrentals.ca. This Privacy Policy explains what personal information we collect, why we collect it, and how we protect it.

We are a Canadian company subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). We also comply with the General Data Protection Regulation (GDPR) for visitors from the European Union and Portugal, the Personal Data Protection Act (PDPA) for visitors from Thailand, and Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Information We Collect

Information you provide directly:

Email signup / Newsletter: Email address, first name, and destination preferences (for listing alerts, weekly newsletter, and product announcements). Managed via Brevo with CASL-compliant double opt-in.
Verified Realtors: Full name, agency name, email, countries and cities of operation, license/registration number, website or portfolio link
Verified Partners: Full name, company name, email, countries and cities of operation, website or active listing profile link, LinkedIn or social media business page
Listing Owners (Private Landlords): Full name, email (verified via confirmation link), country and city of property, property description and rental terms
Listing submissions: Property details, photos, contact information — partners choose which contact methods are displayed publicly on their listings
Contact forms: Name, email address, and message content
Lead generation forms: Destination preferences, timeline, budget range, and other relocation preferences you choose to provide. This information may be used to connect you with relevant service providers (insurance, money transfer, visa services) only with your explicit opt-in consent at the time of form submission.
Digital product purchases: If you purchase a digital product (guide, worksheet, toolkit), the transaction is processed by Gumroad. We receive your email address and purchase details from Gumroad to fulfil your order. Payment card data is handled entirely by Gumroad and never touches our servers.

Partner consent and control:

When applying for the Verified Partner Program, you are asked to provide explicit consent before your information is stored. You choose which contact details (email, phone, WhatsApp, website) are displayed publicly on your listings. Information not marked as public is used only for verification and internal communication — it is never shared with renters or third parties.

You may update your public contact preferences at any time through your account settings, or by contacting us directly.

Information collected automatically:

Browser type and version
Pages visited and time spent
Referring website
Approximate geographic location (country level only)

Our analytics tool (Umami) is self-hosted and cookieless. It does not collect personal information, does not store IP addresses, and does not use cookies or fingerprinting.

Information we never collect:

Government-issued photo identification — never requested
Bank statements or financial documents — never requested
Payment card details — handled entirely by our payment processors (Stripe for featured listings, Gumroad for digital products); card data never touches our servers

2. How We Use Your Information

To provide and improve our rental listing service
To verify the identity and credentials of listing partners
To send listing alerts, weekly newsletters, and product announcements (only if you opted in)
To fulfil digital product purchases
To respond to your enquiries
To connect you with relevant service providers when you explicitly opt in via a lead generation form
To comply with legal obligations (tax records, regulatory requirements)

We do not sell, rent, or share your personal information with third parties for marketing purposes. When you opt in to a lead generation form, we share only the information you provided on that specific form with the relevant service provider(s), and only with your explicit consent.

3. Partner Verification

When you apply as a listing partner:

Verified Realtors: Your license number is checked against publicly available registry databases (AMI in Portugal, AMPI in Mexico). Verification is typically instant.
Verified Partners: Your business website, listing profiles, and professional presence are reviewed by our team. No documents required.
Listing Owners: Your email is verified via a confirmation link. Your listing goes through our photo and content moderation pipeline before publishing.
We store only the verification result (tier, approved/rejected, and date) alongside your profile
We do not request or store copies of government-issued identification documents, utility bills, or financial records

You may request complete deletion of your partner profile and all associated data at any time (see Section 6: Your Rights).

4. Data Storage and Security

Your data is stored on encrypted servers hosted by DigitalOcean in Toronto, Canada. We use industry-standard security measures including encryption in transit (TLS/SSL) and at rest.

If you purchase featured listing placement, payment processing is handled entirely by Stripe, which is PCI-DSS compliant. If you purchase a digital product, payment is handled by Gumroad. We never store, process, or have access to your full credit card number.

5. Cookies and Tracking

We use cookies to:

Essential cookies: Keep you logged in and remember your preferences
Functional cookies: Remember your currency and display preferences

Our analytics tool (Umami) is self-hosted and does not use cookies or collect personal information. We do not use Google Analytics or any other third-party analytics service.

Affiliate links: This site contains affiliate links to third-party services (such as Wise, SafetyWing, NordVPN, and others). When you click an affiliate link, the third-party service may set its own cookies for tracking purposes. We earn a commission on qualifying purchases or sign-ups, but we do not share any of your personal data with affiliate partners. Each affiliate partner operates under its own privacy and cookie policies.

You can disable cookies in your browser settings, though some site features may not function correctly. For full details on specific cookies, see our Cookie Policy.

6. Your Rights

Depending on your location, you have the following rights regarding your personal data:

All users (PIPEDA — Canada):

Access your personal information we hold
Request correction of inaccurate information
Withdraw consent for data processing
File a complaint with the Office of the Privacy Commissioner of Canada

European Union and Portugal visitors (GDPR):

All rights listed above, plus:
Right to erasure (“right to be forgotten”)
Right to data portability
Right to restrict processing
Right to object to processing
File a complaint with the CNPD (Portugal’s data protection authority) or your local supervisory authority

Thailand visitors (PDPA):

Right to access, correct, and delete your personal data
Right to withdraw consent
Right to data portability
Right to object to collection, use, or disclosure

Mexico visitors (LFPDPPP):

ARCO rights: Access, Rectification, Cancellation, and Opposition
Right to revoke consent

7. Data Retention

Email subscribers: Retained while subscribed to alerts/newsletters, deleted within 30 days of unsubscribing
Partner profiles: Retained while partnership is active, deleted within 30 days of a deletion request
Listing data: Retained while the listing is active, removed when the partner deletes it or requests removal
Transaction records: Retained as required by Canadian tax law (typically 6 years)
Lead generation data: Retained for up to 12 months after submission, or until you request deletion
Analytics data: Aggregated and anonymised — no personal identifiers retained

8. Third-Party Services

We use the following third-party services that may process your data:

DigitalOcean — Cloud server hosting (Toronto, Canada datacenter). All server-side data resides on DigitalOcean infrastructure.
Google Maps — Neighbourhood-level location display on listings (no exact addresses shared)
Brevo — Email marketing and transactional emails. Collects email address, first name, and destination preferences. Used for weekly newsletter, listing alerts, and product announcements. CASL compliant with double opt-in. GDPR compliant with EU data centers.
Umami — Self-hosted, privacy-first web analytics (no cookies, no personal data collected)
Stripe — Payment processing for featured listings (PCI-DSS compliant). Only used when partners purchase featured placement. Card data never touches our servers.
Gumroad — Digital product sales and delivery. Collects email address and payment information through Gumroad’s own checkout system. Card data is handled entirely by Gumroad and never touches our servers. We receive your email and purchase details to fulfil your order.
Affiliate partners — We include affiliate links to services such as Wise, SafetyWing, NordVPN, and others. When you click an affiliate link and visit a partner site, that partner may collect data according to its own privacy policy. We do not share your personal data with affiliate partners. We earn commissions on qualifying purchases or sign-ups made through these links.

Each third-party service operates under its own privacy policy. We only share the minimum data required for the service to function.

9. Children’s Privacy

Our service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active subscribers and displayed prominently on this page. The “Last updated” date at the top reflects the most recent revision.

11. Contact Us

For privacy enquiries, data access requests, or deletion requests:

Email: hello@moveabroadrentals.com
Subject line: Privacy Request — [Your Name]
Response time: Within 30 days as required by PIPEDA, GDPR, PDPA, and LFPDPPP

[LEGAL_ENTITY_NAME]
[REGISTERED_ADDRESS]
Canada

Placeholders marked with [BRACKETS] must be completed before launch.