Privacy Policy

MAGM ASSET SOLUTIONS LTD, trading as CargoNest, is the data controller for the personal data described in this policy. We are a company registered in England, and we sell physical moving and home-storage supplies through magasssol.shop.

Registered office: 84-90 Higher Road, Urmston, Manchester, England, M41 9AP, United Kingdom
Email: support@magasssol.shop
Phone: +44 7710880405

We have not appointed a Data Protection Officer, as we are not required to. Privacy questions and rights requests go to the email address above and are handled by our customer team.

We collect only what we need to sell, ship and support physical goods:

We do not collect identity documents, and we do not ask for or store special-category data such as health, biometric, political or religious information. Please do not send such data to us.

• Directly from you — checkout, contact form, bulk-quote form, membership sign-up, emails and phone calls.
• From your device — server logs and strictly necessary cookies when you browse magasssol.shop.
• From our payment processor — Stripe confirms payment outcome, card brand, last four digits and billing country back to us.
• From delivery carriers — tracking events, delivery confirmation and, where relevant, failed-delivery reasons.

Where we rely on consent you may withdraw it at any time by emailing us; that does not affect processing carried out before you withdrew it. Where we rely on legitimate interests, you may object — see your rights.

We do not sell your personal data, and we do not use it for third-party advertising or profiling.

Card payments are processed by Stripe, an independent payment provider and a PCI-DSS Level 1 certified service provider. When you pay, your card details are entered on Stripe's own secure checkout, not on magasssol.shop.

CargoNest never sees, receives or stores your full card number, expiry date or security code. Stripe returns to us only what we need to run the order: whether payment succeeded, the amount and currency, the card brand and last four digits, and the billing country. Stripe acts as an independent controller for its own fraud-prevention and regulatory purposes; see Stripe's own privacy policy for that processing.

Payments appear on your statement as CARGONEST. If you dispute a charge, we may need to share your order and delivery records with Stripe and your card issuer to respond to the dispute.

Because we ship physical goods, some data has to leave us in order for your order to arrive:

• Delivery address and contact details are passed to the carrier handling your parcel, so they can deliver it and contact you about the delivery. Carriers are separate controllers for their own tracking and proof-of-delivery records.
• Order contents and quantities are used by our fulfilment process to pick, pack and dispatch your kit, and to produce the dispatch note in the box.
• Returns and damage claims use your order reference, the reason you give, and any photographs you send. We keep these with the order record so we can settle the claim and, where the carrier caused the damage, raise it with them.
• Billing data from Stripe is reconciled against the order record for accounting and to handle refunds and chargebacks.

We do not pass your details to carriers for any purpose other than delivering your order, and we do not share your address with other retailers or marketing companies.

We use a small number of service providers, who process data on our instructions under a written contract:

We may also disclose data to our accountants and professional advisers, or where we are required to by law, a court, or a regulator. If our business is ever sold or reorganised, order records may transfer to the buyer, who would remain bound by this policy.

We ship worldwide, so data necessarily moves across borders. Some of our processors are based in, or store data in, the United States and other countries outside the United Kingdom and the European Economic Area.

Where data leaves the UK or EEA, we rely on one of the following safeguards: an adequacy decision covering the destination country; the UK International Data Transfer Addendum; or the European Commission's Standard Contractual Clauses, together with additional technical measures such as encryption in transit and at rest. You can request a copy of the relevant safeguard by emailing support@magasssol.shop.

• All traffic to magasssol.shop is encrypted with TLS.
• Card data never touches our servers; it is handled on Stripe's PCI-DSS certified infrastructure.
• Database and administrative access is restricted to named staff and protected by strong credentials.
• Payment credentials are held as encrypted environment variables, never in our source code or in your browser.
• We keep only the data we actually need to sell, ship and support the goods.

No system is perfectly secure. If a breach ever affects your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where required, and tell you without undue delay where the risk to you is high.

If you are in the UK or the EEA, the UK GDPR and EU GDPR give you the right to: access a copy of your data; have inaccurate data corrected; have data erased where we no longer need it; restrict or object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time.

If you are a California resident, the CCPA as amended gives you the right to know what personal information we collect and why, to request deletion or correction, to receive a copy, and not to be discriminated against for exercising those rights. You may use an authorised agent.

To exercise any right, email support@magasssol.shop. We answer within one month (UK/EU) or 45 days (California), and we may ask a question or two to confirm your identity — usually just the order reference and the email used at checkout. Exercising these rights is free.

Some data cannot be erased on request where we must keep it: order and payment records are retained for six years to meet tax and accounting law, as set out in how long we keep it.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months, including for any consumer we know to be under 16.

There is therefore nothing to opt out of. We do not run advertising trackers or advertising cookies on magasssol.shop. If that ever changes we will update this policy and provide a clear opt-out before any such processing begins. You can still email support@magasssol.shop to record a preference.

We use only what the store needs to work: a strictly necessary cookie for your admin session where applicable, and browser local storage to remember your cart between pages. We do not use advertising cookies, and we do not run third-party advertising or profiling trackers.

Full detail, including how to clear these, is in our Cookie Policy.

Automated decisions. We do not make decisions producing legal or similarly significant effects about you by automated means. The Move Sizer is a rules-based suggestion tool that runs on the answers you give and recommends products; it does not profile you and it does not decide anything about you. See the Move Sizer Notice.

Children. CargoNest is not intended for children. Our store may not be used by anyone under 13. Customers aged 13 to 17 may only order with the consent of a parent or guardian, who is responsible for the order. We do not knowingly collect data from children under 13; if you believe a child has given us data, email support@magasssol.shop and we will delete it.

If you are unhappy with how we have handled your data, please tell us first at support@magasssol.shop — most issues are resolved quickly.

You also have the right to complain to a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). If you are in the EEA, you may complain to the supervisory authority in your country of residence, work or the place of the alleged infringement.

Changes to this policy. If we change how we use personal data we will update this page and the date below. Where the change is significant we will tell customers by email. This policy was last updated on 15 July 2026.