Privacy Policy

1. Information we collect

We collect the information you provide directly, information generated as you use the Services, and information from the third parties that help us operate the network.

• Account & contact details: name, email address, phone number, password and, for hosts, business or billing details.
• Transaction & wallet data: wallet top ups, balances, charging sessions, energy delivered (kWh), prices and receipts.
• Charging & location data: chargers you start, connector details, session start and stop times, and, where you allow it, your device location to show nearby chargers.
• Vehicle data: where you connect a vehicle account, the make, model, battery state of charge and charging status needed to show and control a session.
• Device & usage data: device type, operating system, app version, IP address, identifiers, diagnostics and how you interact with the Services.
• Communications: messages, support requests and feedback you send us, and your contact and marketing preferences.

2. How we use your information

We use personal information for the following purposes, each with a lawful basis under the GDPR:

• To provide the Services: create your account, locate chargers, start and stop sessions, run the prepaid wallet and issue receipts (performance of our contract with you).
• To process payments: top up your wallet, charge for energy used and handle any legally required refunds through our payment partners (performance of contract).
• To keep the network safe: prevent fraud, abuse and unauthorised use, and protect users and hosts (legitimate interests).
• To support and communicate with you: respond to requests and send service messages such as receipts, low balance and session alerts (contract and legitimate interests).
• To improve the Services: understand usage and reliability and develop new features (legitimate interests).
• To send marketing: only where you have consented or as otherwise permitted by law; you can opt out at any time (consent and legitimate interests).
• To meet legal obligations: tax, accounting, calibration, metering and other regulatory requirements (legal obligation).

3. How we share your information

We do not sell your personal information. We share it only with the parties needed to run the network, and only to the extent necessary:

• Payment processors: to take wallet top ups and process charges securely. Card details are handled by the processor, not stored by EVUNITY.
• Vehicle connectivity providers: where you connect a vehicle, to read charging status and control a session at your request.
• Charge point hosts & roaming partners: limited session data (for example energy delivered and price) needed to deliver and settle a charge, including across OCPI roaming partners.
• Communications providers: SMS and email providers that deliver verification codes and service notifications.
• Hosting & infrastructure providers: cloud hosting, storage and analytics that operate the Services on our behalf.
• Professional advisers & authorities: where required by law, regulation, legal process or to protect our rights and the safety of users.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

All service providers are bound by contract to protect your information and to use it only for the purposes we specify.

4. Vehicle & charging data

If you link a vehicle account, EVUNITY accesses only the data needed to display and manage charging, such as battery state of charge, charging status and the ability to start or stop a session. We do not use this data to track your movements. You can disconnect your vehicle at any time from the app, which stops any further access.

5. Payments & wallet

EVUNITY runs a prepaid wallet. When you top up or pay for a session, our payment partners process the transaction and may collect the information they need to do so under their own privacy terms. We retain transaction records (amounts, dates, energy delivered and receipts) for billing, support and legal compliance, but we do not store full card numbers on our systems.

Wallet top ups, payments and charging sessions are final and non-refundable except where a refund is required by applicable law, as set out in our Terms of Service. Because we generally do not issue refunds, we do not routinely process refund transactions or hold the data associated with them.

6. Cookies & tracking

Our website and app use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services and measure performance. In markets that require it, optional cookies and analytics load only after you give consent through our cookie banner. You can manage your choices at any time in your browser or device settings.

7. International data transfers

EVUNITY operates across several markets, so your information may be processed in a country other than the one you live in. Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or another lawful transfer mechanism to protect your information.

8. Data retention

We keep personal information only for as long as we need it for the purposes set out in this policy, including providing the Services, resolving disputes and meeting legal, tax and accounting obligations. When information is no longer needed, we delete it or anonymise it so it can no longer be linked to you.

9. Your rights & choices

Depending on where you live, you have some or all of the following rights over your personal information:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data, subject to legal retention requirements.
• Restriction & objection: limit or object to certain processing, including direct marketing.
• Portability: receive your data in a portable format or have it sent to another provider.
• Withdraw consent: withdraw consent at any time where we rely on it, without affecting earlier processing.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls and secure infrastructure, to protect your information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, but we work continuously to safeguard your data and will notify you and the relevant authorities of a breach where required by law.

11. Children's privacy

The Services are intended for adults and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology or the law. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised policy.