Effective date: September 11, 2026
Website: https://movush.com/
Privacy email: info@movush.com
This Privacy Policy explains how Foshan Movush Furniture Co.,Ltd, trading as Movush (“Movush,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you:
This Privacy Policy is intended for website visitors, prospective and current customers, dealers, distributors, architects, designers, fit-out teams, suppliers, logistics and installation contacts, and other business or project partners. It does not apply to information handled by an independent dealer, distributor, payment provider, carrier, installer, marketplace, social network, or other third party for its own purposes. Those parties should provide their own privacy notices.
If you do not agree with this Privacy Policy, please do not provide personal information through the website. You may still contact us to discuss an alternative way to communicate where reasonably available.
The controller responsible for this Privacy Policy is:
Foshan Movush Furniture Co.,Ltd
Trading as: Movush
Room 102, Building 2, Zhujie Industrial Park
No. 37 Kangze 5th Road, Baiyun District
Guangzhou, Guangdong, China
Email: info@movush.com
Website: https://movush.com/
Our privacy contact is Oliver Lau, Business Development Manager. Oliver Lau is the operational contact for privacy questions and requests; this designation does not identify him as a statutory Data Protection Officer unless Movush expressly states otherwise.
In some projects, an independent dealer, distributor, customer, logistics provider, installer, or other organisation decides why and how it uses personal information. That organisation acts as a separate controller and its own privacy notice applies to its processing. Where Movush processes personal information solely on another organisation’s documented instructions, the other organisation’s notice may apply and Movush may act as its processor or service provider.
Information about a company is not always personal information. However, a business email address, direct telephone number, job title, signature, account identifier, correspondence, or project activity may identify or relate to an individual and can therefore be personal information.
The information we collect depends on how you interact with Movush and which website features are available to you.
We may collect:
Fields marked as required on a form are needed for us to route and respond to that request. Other fields are optional. Providing information is generally voluntary, but if you do not provide information needed for an enquiry, account, quotation, order, delivery, legal requirement, or support request, we may be unable to complete the requested activity.
We may receive business contact or project information from:
Where required by applicable law, we will provide privacy information when we first contact you, within the required period, or before we use the information for a new purpose.
When you use our website, we and our providers may automatically collect:
We currently use WordPress, WooCommerce components, Google tag technologies, Google Analytics, and WooCommerce source-attribution technology. Section 4 explains the relevant cookies and choices.
Our ordinary website and business enquiry processes are not designed to collect government identifiers, financial-account credentials, precise geolocation, biometric data, health information, racial or ethnic origin, religious beliefs, sexual orientation, trade-union membership, or other special-category information.
Account login credentials may be considered sensitive personal information under some laws. We use them only to authenticate users, protect accounts, prevent misuse, and provide the requested service. We do not use sensitive personal information to infer characteristics about you.
Do not place payment-card details, identity-document numbers, health information, or other unnecessary sensitive information in a project-notes field or ordinary email. If we receive information that is not needed, we may delete it, restrict it, or use it only as required to address the communication or comply with law.
We use personal information only for defined and compatible purposes. Where the EU General Data Protection Regulation (GDPR), UK GDPR, or another law requires a legal basis, the basis depends on the activity.
| Purpose | Typical information | Legal basis where required |
|---|---|---|
| Respond to an enquiry, discuss a project, or provide requested product information | Contact, professional, enquiry, project, and communication information | Steps at your request before a contract; legitimate interests in responding to business enquiries and supporting commercial projects |
| Prepare or administer a quotation, contract, order, delivery, installation, warranty, or after-sales request | Contact, project, transaction, fulfilment, and communication information | Performance of a contract or steps before a contract; legitimate interests where you act for an organisation; legal obligations |
| Create, authenticate, administer, and secure an account | Contact, professional, authentication, permission, and activity information | Contract; legitimate interests in providing secure access and protecting systems |
| Coordinate with dealers, distributors, designers, logistics providers, installers, suppliers, and project participants | Contact, project, transaction, fulfilment, and communication information | Contract; legitimate interests in planning and delivering the requested project |
| Maintain records, manage finance, tax, customs, warranty, disputes, audits, and legal claims | Contact, transaction, fulfilment, account, and communication information | Legal obligations; legitimate interests in governance, recordkeeping, and establishing, exercising, or defending legal claims |
| Operate, troubleshoot, protect, and prevent misuse of our website and services | IP address, device, logs, account, security, and interaction information | Legitimate interests in availability, security, fraud prevention, and service integrity; legal obligations where applicable |
| Measure website use and understand enquiry or order sources | Cookie identifiers, online activity, referral, campaign, and device information | Consent where required for non-essential cookies or similar technologies; otherwise legitimate interests where permitted by law |
| Improve products, content, resources, customer support, and enquiry journeys | Enquiry, project, communication, aggregated, analytics, and feedback information | Legitimate interests in improving our business and services; consent where required |
| Send relevant product, event, partnership, or business updates | Contact, professional, relationship, interest, and communication-preference information | Consent where required; otherwise legitimate interests in relevant B2B communications, subject to applicable electronic-marketing rules and your right to object |
| Respond to privacy requests and regulatory enquiries | Contact, verification, request, account, and communication information | Legal obligations; legitimate interests in verifying and documenting requests and protecting personal information |
| Manage a reorganisation, investment, financing, sale, or acquisition | Relevant business records and due-diligence information | Legitimate interests in corporate transactions; legal obligations; contract where applicable |
Where we rely on legitimate interests, those interests include responding to business contacts, preparing and delivering projects, managing customer and partner relationships, keeping accurate records, improving services, securing our systems, preventing misuse, and protecting legal rights. We consider the nature of the information, the context, reasonable expectations, safeguards, and potential effect on individuals. You may object where applicable; see Sections 11–13.
Where processing depends on consent, you can refuse or withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. If another lawful basis requires continued processing—for example, retaining an invoice to comply with law—we may retain the relevant information for that limited purpose.
If we want to use personal information for a materially different purpose, we will assess whether the new purpose is compatible and provide any notice or obtain any consent required by law before the new processing begins.
Cookies are small text files stored by a website in your browser. Similar technologies include pixels, tags, local storage, and session storage. They can support essential functions, remember choices, measure website use, or attribute an enquiry or order to a source.
The exact cookie name can include a site- or container-specific suffix. Availability and duration can also depend on browser limits and whether a feature is used.
| Category | Technology or example names | Provider | Purpose | Typical duration |
|---|---|---|---|---|
| Strictly necessary / account | WordPress and authentication cookies, including account-session cookies when a user signs in | Movush / WordPress | Authenticate users, maintain secure sessions, protect forms, and support requested account functions | Session; or longer if “remember me” is selected, subject to configuration |
| Strictly necessary / cart | woocommerce_cart_hash, woocommerce_items_in_cart | Movush / WooCommerce | Remember cart contents and changes after a user uses cart functionality | Session |
| Strictly necessary / session | wp_woocommerce_session_* | Movush / WooCommerce | Locate a visitor’s cart/session data after relevant store functionality is used | Typically 2 days |
| Consent preference | Consent-choice cookie or equivalent storage used by the live consent tool | Movush / consent-management provider | Remember whether you accepted, rejected, or customised non-essential technologies | Up to 12 months, unless a shorter period is configured or you clear it |
| Analytics | _ga, _ga_<container-id> | Google Analytics | Distinguish browsers and persist analytics session state | Google’s default is up to 2 years; browsers may impose shorter limits, including approximately 400 days in current Chromium-based browsers |
| Source attribution | sbjs_session | Movush / WooCommerce Sourcebuster | Record the current page path and page count for the current attribution session | 30 minutes |
| Source attribution | sbjs_current, sbjs_current_add, sbjs_first, sbjs_first_add, sbjs_udata, sbjs_migrations | Movush / WooCommerce Sourcebuster | Record current/first source, referral, entry page, campaign parameters, device/user-agent details, and migration data for the current session | Session |
| Functional storage | Elementor or WordPress local/session-storage entries | Movush / WordPress / Elementor | Maintain interface or capability state needed by the website | Browser session or until local storage is cleared, depending on the item |
Google Tag Manager may be used to manage approved website tags. Tag Manager itself is a tag-management system; the data collected depends on the tags configured in it. Our policy is to use it only for the purposes disclosed in this Privacy Policy and subject to applicable consent choices.
Google Analytics may receive information such as the page URL, IP address, device/browser information, cookie identifiers, and interaction events. Learn more about how Google uses information from sites that use its services. Google also provides a Google Analytics opt-out browser add-on.
Where prior consent is required, our policy is that non-essential analytics, attribution, advertising, or similar technologies must remain disabled until you make an affirmative choice. Strictly necessary technologies may operate without consent where the law permits because they provide a service you requested, remember privacy choices, maintain security, or transmit a communication.
You should be able to use the website’s Cookie Settings control to accept, reject, or change non-essential choices. You can also block or delete cookies in your browser, although doing so may affect requested account, cart, language, or form functions.
Where applicable law recognises a browser-based universal opt-out mechanism, such as Global Privacy Control (GPC), our policy is to treat that signal as a request to opt out of sale, sharing, or targeted advertising for that browser or device. See Sections 12 and 13. Other “Do Not Track” signals are not yet uniformly defined; we do not respond to them unless applicable law requires it.
Submitting an enquiry or project brief starts a conversation about that request. It does not, by itself, subscribe you to unrelated promotional campaigns.
We may send:
You can stop marketing emails by using the unsubscribe method in the message or emailing info@movush.com. We may retain a limited suppression record so that we continue to respect your request. Opting out of marketing does not stop non-marketing messages needed for an active enquiry, contract, account, order, safety matter, or legal obligation.
We do not disclose personal information simply because it may be useful to another party. We may disclose the minimum information reasonably necessary to the following categories of recipients:
Service providers are expected to use information only for the contracted service and to protect it as required by applicable law and contract. Independent recipients may determine their own purposes and should provide their own privacy information.
Movush is established in China and supports enquiries and projects in multiple markets. Personal information may therefore be accessed, stored, or otherwise processed in:
These countries may have privacy laws that differ from the laws where you live.
Where applicable law restricts an international transfer, we use or require an appropriate legal mechanism. Depending on the data flow, this may include:
Safeguards can include data minimisation, access controls, confidentiality commitments, encryption in transit, role-based access, vendor diligence, and limits on onward disclosure. You may contact info@movush.com for information about the destination and applicable safeguard for a relevant transfer, subject to protection of confidential information.
We do not keep personal information indefinitely by default. Retention depends on the purpose, relationship, legal requirements, dispute or warranty periods, security needs, and whether the information is contained in backups or records subject to a lawful hold.
| Record type | Intended retention period or criterion |
|---|---|
| General website enquiry that does not become an active project or business relationship | Up to 24 months after the last substantive interaction, unless a shorter period is requested or a longer period is needed for a legal claim or obligation |
| Quotation, project, or commercial negotiation that does not proceed | Generally up to 3 years after the last substantive activity, subject to applicable limitation, compliance, or dispute requirements |
| Customer, contract, purchase order, order, delivery, installation, warranty, invoice, tax, customs, and payment-support records | For the relationship and then for the period required or reasonably necessary under applicable contract, accounting, tax, customs, warranty, product, audit, and limitation laws |
| Account profile and authentication data | While the account is active; then deleted, disabled, or anonymised within a reasonable period, except for transaction, security, or legal records that must be retained separately |
| Direct-marketing contact and preference data | Until you opt out, withdraw consent, the communication is no longer relevant, or the relationship becomes inactive; a minimal suppression record may be retained as long as needed to honour the opt-out |
| Website security and diagnostic logs | Generally up to 12 months, unless a security incident, legal requirement, or investigation justifies longer retention |
| Google Analytics user-level and event-level data controlled by Movush | No more than 14 months under the intended configuration; aggregated reports may remain for longer where they no longer identify an individual |
| Analytics cookies | As stated in Section 4 or until you reject, withdraw consent, or clear them, subject to browser limits |
| WooCommerce source-attribution cookies | Current browser session, except sbjs_session, which is typically 30 minutes; attribution information may become part of an order record only when a relevant order is placed |
| Privacy requests, identity/authority verification, and response records | Generally 24 months after closure, or longer where required to demonstrate compliance, resolve an appeal, or address a legal claim |
When a retention period ends, we delete, anonymise, or securely isolate the information. Deletion from backups may occur during the normal backup-replacement cycle, provided the information is not restored for ordinary use.
We use reasonable technical and organisational measures appropriate to the nature and risk of the information. These may include:
No website, email, transmission, or storage system can be guaranteed completely secure. Please use a secure method agreed with us before sending sensitive commercial documents, and do not send payment-card details or unnecessary personal information through ordinary enquiry fields.
Movush does not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects on an individual. We may use routine automation to route a form, detect spam, protect an account, organise records, or measure website activity, but a person remains involved in material project, quotation, customer, partnership, or service decisions.
If this changes, we will provide the information and choices required by applicable law before using the new process.
If the GDPR, UK GDPR, Swiss Federal Act on Data Protection, or comparable law applies, you may have some or all of the following rights, subject to legal conditions and exceptions:
We generally respond to a valid request without undue delay and within one month where the GDPR or UK GDPR applies. The period may be extended where law permits because of complexity or number of requests; if so, we will explain the extension.
You can find EEA supervisory authorities through the European Data Protection Board member list. UK residents may contact the Information Commissioner’s Office. Swiss residents may contact the Federal Data Protection and Information Commissioner.
Please contact Movush first if you are comfortable doing so, so that we have an opportunity to address the concern. This does not limit your right to contact a regulator or seek another remedy.
This section applies to residents of a U.S. state whose comprehensive privacy law applies to Movush and to the relevant processing. Rights and definitions vary by state, and legal exemptions may apply.
The table describes the categories that we may collect and have collected in the 12 months before the effective version of this Privacy Policy, depending on the website features and business relationship used.
| Category | Examples relevant to Movush | Main sources | Main purposes | Categories of recipients for a business purpose |
|---|---|---|---|---|
| Identifiers and customer-record information | Name, business email, telephone number, postal or delivery address, IP address, account identifier | You; your organisation or project partner; website and account systems | Enquiries, accounts, quotations, projects, orders, delivery, support, security, legal compliance | IT/hosting, communications, account, project, dealer/distributor, logistics, installer, professional, and legal providers |
| Commercial information | Product interests, quotations, order or transaction history, project type, quantities, timing, warranty or support records | You; your organisation or project partner; Movush records | Project support, quotation, fulfilment, customer service, forecasting, recordkeeping | Project participants, service providers, professional advisers, and authorities where required |
| Internet or other electronic-network activity | Browsing, pages, searches, referral/UTM source, interactions, cookie IDs, browser, device, logs | Website, browser, Google Analytics, WordPress/WooCommerce technologies | Website operation, security, measurement, source attribution, and improvement | Hosting/IT, analytics/tag, security, and support providers |
| Approximate geolocation | Country, region, city, or general location inferred from IP; we do not request precise device geolocation through ordinary website use | You; IP-derived service information | Route enquiries, support regional service, security, and aggregate measurement | Hosting/IT, analytics, security, and project providers as needed |
| Professional or employment-related information | Company, job title, role, professional contact information, project responsibility | You; employer, colleague, partner, public professional source | B2B relationships, project coordination, quotations, support, and permitted communications | Communications, customer/project, dealer/distributor, professional, and support providers |
| Inferences | Likely product or project interest inferred from the pages viewed or information submitted | Website interactions; enquiry and project information | Respond to the request, organise follow-up, and improve relevant content | Analytics, communications, and customer/project providers |
| Sensitive personal information | Account login credentials where an account is enabled | You; account system | Authentication, account security, and fraud/misuse prevention only | Account, hosting/IT, and security providers |
We do not knowingly collect biometric identifiers, precise geolocation, government identification numbers, health information, racial or ethnic origin, religious beliefs, sexual orientation, union membership, or contents of private communications through ordinary website and enquiry functions. Please do not voluntarily include these categories in project notes.
We disclose information to service providers and contractors for the business purposes described in this Privacy Policy. Analytics providers may receive online identifiers and activity to provide measurement services. Our contracts, settings, and consent controls are intended to limit those disclosures to the disclosed service purpose.
If our practices change, we will update this notice and provide any legally required “Do Not Sell or Share” or targeted-advertising opt-out before the new practice begins.
We use account credentials only for authentication, security, and the service an account holder reasonably expects. We do not use or disclose sensitive personal information to infer characteristics or for purposes that create a right to limit under the CCPA. If that changes, we will provide the legally required right-to-limit mechanism before the new use begins.
Depending on your state and applicable law, you may have the right to:
We do not currently offer a financial incentive, loyalty benefit, price difference, or service difference in exchange for collecting, selling, or sharing personal information.
For California residents, the categories collected, sources, purposes, and categories of recipients are described in Section 12(A). The categories disclosed for business purposes during the relevant 12-month period may include identifiers/customer records, commercial information, internet/network activity, approximate geolocation, professional information, inferences, and limited account credentials, each only as needed for the recipient categories shown in that table.
We do not sell or share any of those categories as those terms are defined by the CCPA. We do not use sensitive personal information for purposes outside the limited purposes described above. We do not discriminate against a California resident for exercising CCPA rights.
Where required, we recognise Global Privacy Control (GPC) as an opt-out of sale, sharing, and targeted advertising for the browser or device sending the signal. Because our stated practice is not to engage in those activities, a recognised signal should not reduce ordinary website access. You may also email info@movush.com if you believe a signal was not respected.
We do not currently respond to other browser “Do Not Track” signals that are not legally recognised or do not communicate a sufficiently clear choice.
You may submit a privacy request by:
Describe the right you want to exercise and provide enough context—such as the email address used, approximate interaction date, company or project name, and relevant account or quotation reference—for us to locate the information. Do not send a passport, government ID, password, or other sensitive document unless we specifically request an appropriate verification method and explain why it is necessary.
We may need to verify that the request relates to you. Verification will be proportionate to the nature of the request and the risk of unauthorised disclosure or deletion. We use verification information only for the request, security, fraud prevention, and compliance record.
If you submit a request for another person, we may require proof of your authority and may ask the individual to confirm the request directly, unless law provides another process.
We respond within the period required by applicable law. For applicable U.S. state requests, this is generally within 45 days, with an extension where law permits and notice is provided. For applicable GDPR and UK GDPR requests, this is generally within one month.
Requests are normally free. We may charge a reasonable fee or refuse a request only where applicable law allows—for example, if a request is manifestly unfounded, excessive, repetitive, or technically disproportionate—and we will explain the decision.
Rights may be limited by legal exceptions, including where information is needed to complete a transaction, provide a requested service, protect security, comply with law, preserve legal rights, respect another person’s rights, or retain records that cannot lawfully be deleted.
If we deny a request and your state law provides an appeal right, reply to our decision or email info@movush.com with the subject Privacy Appeal within 45 days of the decision. Explain why you believe the decision should be reconsidered. We will respond within the period required by applicable law and provide information about any further complaint right.
Our website, commercial furniture products, accounts, and project services are intended for adults acting in a business or professional context. They are not directed to children under 16, and we do not knowingly collect personal information online from children under 16.
In the United States, we do not knowingly collect personal information online from a child under 13 in circumstances governed by the Children’s Online Privacy Protection Act (COPPA). We also do not knowingly sell or share personal information of anyone under 16.
If you are a parent or guardian and believe a child has provided personal information, contact info@movush.com. We will review the report and delete or otherwise address the information as required by law.
Our website may link to or embed content from independent websites, social networks, maps, document services, dealers, distributors, logistics providers, or other third parties. Their privacy practices are controlled by their own notices. A link does not mean that Movush controls or is responsible for the third party’s processing.
Before sending personal information to a third party, review its privacy notice and use the privacy settings it provides.
We may update this Privacy Policy when our website, products, accounts, project processes, service providers, markets, or legal obligations change. The published version will display its effective or “last updated” date.
If a change materially affects how we use personal information or reduces an existing choice, we will provide additional notice or obtain consent where required before the new processing begins. Previous versions may be requested by emailing info@movush.com.
For a privacy question, request, complaint, or concern, contact:
Foshan Movush Furniture Co.,Ltd
Trading as: Movush
Attention: Oliver Lau, Business Development Manager — Privacy Contact
Email: info@movush.com
Website: https://movush.com/
Address: Room 102, Building 2, Zhujie Industrial Park, No. 37 Kangze 5th Road, Baiyun District, Guangzhou, Guangdong, China
Please use the subject Privacy Request when exercising a right and Privacy Appeal when appealing a request decision. We will review and respond in accordance with the law that applies.