Template notice: Replace the bracketed placeholders with your company details and have this policy reviewed by a qualified lawyer for the countries where you operate before publishing.
This privacy policy explains how [Company legal name] ("PlugEV", "we", "us") collects, uses, shares and protects personal data when you visit our website, use the PlugEV mobile app, charge at a PlugEV charger, buy a charger from us, or apply to host chargers at your site (together, our "Services").
1. Who we are
PlugEV operates a network of AC electric vehicle (EV) chargers, sells and installs EV charging equipment, and partners with businesses and landowners to host chargers. For the purposes of applicable data protection law, we are the data controller of the personal data described in this policy.
Registered office: [Registered address]. Company registration number: [Number]. Email: hello@plugev.example.
2. Personal data we collect
Data you give us
- Account data: name, email address, phone number, password (stored as a secure hash) and account preferences.
- Vehicle data: vehicle make, model and, if you choose to provide it, registration number, used to show compatible chargers and support features such as Plug & Charge.
- Enquiry and quote data: details you submit through our forms, such as company name, site address, site type, number of parking spaces, charger requirements and messages.
- Host and customer data: business details, billing and payout details, and contract information for hosts and charger buyers.
- Support communications: messages, call recordings (where permitted and notified) and feedback.
Data collected when you use our Services
- Charging session data: charger ID and location, start and end times, energy delivered (kWh), charging power, session cost, and the identifier used to authorise the session (app account, QR payment reference or RFID card number).
- Payment data: payment amount, method type, last four digits of the card and transaction references. Full card details are collected and processed by our PCI-DSS certified payment provider; we never store full card numbers.
- Location data: with your permission, your device's precise location to show nearby chargers and directions. You can turn this off in your device settings at any time.
- Device and usage data: IP address, device type, operating system, app version, crash logs, pages and features used, and referring website.
Data from third parties
- Payment confirmations and fraud-prevention signals from our payment providers.
- Roaming partners, if you start a session on our network using another provider's app or card.
- Publicly available business information when we research potential host sites.
3. How we use personal data
- To create and manage your account and provide the app, including the charger map, live availability and notifications.
- To authorise, operate, monitor and bill charging sessions, and to send receipts.
- To provide quotes, supply and install chargers, and deliver warranty and maintenance services.
- To evaluate host applications, carry out site assessments, manage host agreements and pay revenue shares.
- To provide customer and driver support, including remote diagnostics of chargers.
- To keep our network safe, including preventing fraud, misuse and unauthorised access.
- To improve our Services, for example by analysing aggregated charger usage to decide where to build new chargers.
- To send service messages and, where you've agreed or where permitted by law, marketing about our products. You can opt out at any time.
- To comply with legal, tax, accounting and regulatory obligations.
4. Legal bases for processing
Where the law requires a legal basis, we rely on:
| Basis | Examples |
|---|---|
| Performance of a contract | Providing your account, charging sessions, charger purchases and host agreements |
| Legitimate interests | Network security, fraud prevention, service improvement, responding to business enquiries |
| Consent | Precise location, marketing messages, non-essential cookies. You may withdraw consent at any time. |
| Legal obligation | Tax records, invoicing, responding to lawful requests from authorities |
5. How we share personal data
We do not sell your personal data. We share it only with:
- Service providers who process data on our behalf under contract, such as cloud hosting, charger management software (OCPP back-end), payment processing, SMS and email delivery, analytics and customer support tools.
- Installation and maintenance partners who need your contact details and site address to carry out work you've requested.
- Site hosts, who receive aggregated or anonymised usage and revenue reports. Where a host provides free or private charging (for example, to staff or residents), they may see session data for users they authorised.
- Roaming partners, where you charge across networks, to the extent needed to authorise and bill the session.
- Professional advisers and authorities, where required by law or to protect our rights, users or the public.
- A buyer or successor in the event of a merger, acquisition or sale of assets, subject to this policy.
6. International transfers
Some of our service providers may process data outside your country. Where this happens, we use appropriate safeguards required by applicable law, such as standard contractual clauses, and assess that your data receives an adequate level of protection.
7. How long we keep data
- Account data: for as long as your account is active, and up to 24 months after closure to resolve disputes, unless you ask us to delete it sooner.
- Charging session and payment records: for the period required by tax and accounting law (typically [5–7] years).
- Enquiry, quote and host application data: up to 24 months after our last contact if no agreement results.
- Device and analytics logs: up to 14 months.
After these periods we delete or anonymise the data.
8. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encrypted storage for sensitive data, tokenised payments, role-based access controls, logging and regular security reviews of our charger network and software. No system is completely secure. If a personal data breach affects you, we'll notify you and the relevant regulator where the law requires it.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- delete your data (you can also delete your account in the app);
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing; and
- lodge a complaint with your local data protection authority.
To exercise these rights, email hello@plugev.example. We may need to verify your identity, and we'll respond within the time required by law.
10. Cookies and similar technologies
Our website uses a small number of cookies and similar technologies:
- Strictly necessary: required for security and core site functions. These cannot be switched off.
- Analytics (optional): help us understand how visitors use the site so we can improve it. We only set these with your consent where the law requires it.
You can control cookies in your browser settings. Blocking some cookies may affect how the site works.
11. Children
Our Services are not directed to children under 16, and we don't knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we'll delete it.
12. Changes to this policy
We may update this policy from time to time. We'll post the new version on this page with a new "Last updated" date and, for significant changes, notify you in the app or by email.
13. Contact us
Questions or requests about this policy or your personal data:
[Company legal name], [Registered address]
Email: hello@plugev.example
Data protection officer (if appointed): [Name / email]