Privacy Policy

GDPR Policy for GoEV Charging Limited

1. Purpose of This Policy

This policy outlines how GoEV Charging Limited complies with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. It ensures that personal data is handled lawfully, fairly, and transparently, and that the rights and freedoms of individuals who interact with us are protected.

2. Scope

This policy applies to:

• All employees, contractors, and third parties acting on behalf of GoEV Charging Limited
• All personal data processed by the company, whether digital, paper-based, or via our EV charging systems and related services

3. What Is Personal Data?

Personal data is any information relating to an identifiable individual. This may include, but is not limited to:

• Name
• Address
• Email address
• Telephone number
• Vehicle registration number
• Payment details
• IP address and device identifiers
• Employment records (for staff)
• Health information (special category data, where applicable)

4. GDPR Principles

GoEV Charging Limited processes personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality (security)
• Accountability

5. Lawful Bases for Processing

We only process personal data where at least one lawful basis applies, including:

• Consent (e.g. receiving marketing communications)
• Performance of a contract (e.g. providing EV charging services)
• Legal obligation (e.g. HMRC or regulatory requirements)
• Vital interests (e.g. emergency situations)
• Legitimate interests (e.g. business operations, service improvement, and fraud prevention)

6. How We Collect Data

We may collect personal data through:

• Use of our EV charging points and related services
• Online forms and website interactions
• Email, telephone, and written communications
• Customer onboarding and account creation processes
• CCTV at our sites (where applicable)

7. Data We Collect

Depending on the nature of the interaction, we may collect:

• Contact details (name, email address, telephone number)
• Payment and billing information
• Vehicle and charging session data
• IP addresses and cookie data from our website
• Employment and HR-related information
• Records of communications with customers, partners, and suppliers

8. Data Subject Rights

Under GDPR, individuals have the right to:

• Access their personal data
• Request correction of inaccurate or incomplete data
• Request erasure of their data (“right to be forgotten”)
• Request restriction of processing
• Request data portability
• Object to processing
• Withdraw consent at any time (where consent is the lawful basis)

Requests can be made by contacting:

Email: scott@goevcharging.co.uk
Telephone: 0800 999 1745

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Customer charging and usage records: retained only as long as required for service delivery, consent, or legal purposes
• Payment and financial records: retained in line with legal, accounting, and tax requirements
• Employment and HR records: retained in accordance with employment law and business needs
• Marketing and communications data: retained until consent is withdrawn or the data is no longer required

Once retention periods expire, data is securely deleted or anonymised.

10. Data Security

GoEV Charging Limited implements appropriate technical and organisational measures to protect personal data, including:

• Encryption of sensitive data and transactions
• Secure password policies and role-based access controls
• Regular system updates, monitoring, and security reviews
• Staff training and awareness of data protection responsibilities

In the event of a personal data breach, we will assess the risk and notify the Information Commissioner’s Office (ICO) and affected individuals where legally required.

11. Sharing Data with Third Parties

We may share personal data with trusted third parties, including:

• Payment processors and financial institutions
• EV charging platform providers and CRM systems
• IT service providers and hosting companies
• HR, payroll, and accounting service providers
• Legal, regulatory, or law enforcement authorities where required by law

All third parties are required to comply with GDPR and operate under appropriate data processing agreements.

12. International Data Transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations or EU adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other lawful transfer mechanisms recognised under GDPR

13. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance user experience, monitor performance, and provide relevant content. Further details are available in our Cookie Policy.

14. Data Protection Officer / Data Privacy Lead

The Data Protection Lead for GoEV Charging Limited is:

15. Policy Review

This policy is reviewed annually, or sooner if there are significant changes in data protection legislation, industry practices, or company operations.

Contact and Complaints

If you have any questions, concerns, or complaints regarding this policy or how your personal data is processed, please contact:

Email: scott@goevcharging.co.uk

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk