GDPR at bernard
Last updated: 5 October 2026
Bernard Moves Ltd runs bernard. The company is registered in England and Wales, number 17343403, at 1 Mentmore Terrace, London E8 3PN.
You use bernard to run your website and your audience. For some data you are in charge and we work for you. For other data we are in charge. The table shows which is which.
| Where you are in charge | Where we are in charge |
|---|---|
| You are the controller. We are your processor. We use this data only to run the service for you, and only as you tell us. | We are the controller. The Privacy Policy explains how we use this data. |
| Your contacts, subscribers and fans | Your name, email address and sign-in details as an account holder |
| Your buyers and their orders | Your two-step sign-in settings, once you turn them on |
| Your students and learners, their access and progress | Your billing records (Stripe holds the card details) |
| Your forum members and their posts | People who ask us to move their site, and the crawls we make of those sites |
| What people send through your site’s forms | Visitors to bernardmoves.com |
| The content of your sites | Support email and our marketing email |
| Analytics about visitors to your sites | Product records: AI tool-call logs, AI usage and feedback you give us |
Where you are in charge, that includes other companies’ tools you choose to add to your own site, such as a booking calendar or a chat widget. Your agreement with each company covers what it collects from your visitors, and they are not bernard’s sub-processors.
Microsoft Clarity runs only on bernardmoves.com, with your consent. Microsoft acts as an independent controller of that data.
Where your data lives
We host bernard in Ireland: the application and your files on Amazon Web Services, and the database on Supabase. The original files of your published site are held in Ireland, and Cloudflare keeps cached copies in its data centres around the world so pages load quickly for your visitors.
Some of our suppliers work outside the UK and the EEA. For those transfers we rely on adequacy decisions or standard contractual clauses. Our sub-processor list names each supplier.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you;
- correct it;
- delete it;
- restrict or object to how we use it;
- give it to you in a form you can take elsewhere.
Where we rely on your consent, you can withdraw it at any time.
If you are one of our customers’ contacts
If a business uses bernard and holds your details, that business decides how it uses them. Ask the business first. If you write to us, we pass your request to the business.
How to ask
Email hello@bernardmoves.com. Tell us what you want and which email address your account or record uses.
If you run a bernard account, you can view, correct, export and delete your contacts yourself in the app.
How long we keep data
- Your account and sites: while your account is open.
- When you delete your account: we delete it at once, with no grace period. A background job removes your records, files and site history within minutes.
- Backups: copies stay in our backups until they expire, up to 365 days. We use backups only to recover from a disaster. We do not restore deleted data for any other reason.
- A record of the deletion: we keep the account name, the owner’s email address and the plan, so we know the account existed and was deleted.
- Emails you send to your audience: we delete the message body after 90 days and delivery events after 180 days. After two years we unlink the message record from the recipient.
- Your connected AI key: we delete it when you remove or replace it, or close your account.
Complaints
Tell us first, at hello@bernardmoves.com, and we will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.