EO Charging Website Data Protection Notice
Effective Date: 12 February 2024
Version number: 4.0
1. Introduction
Juuce Limited trading as EO Charging (referred to as “we” “our” and “us”) is a company registered in England and Wales under company number 09314212 and is committed to protecting the privacy and security of your personal data. We have developed this privacy notice to inform you of the personal data we collect, what we do with your personal data, what we do to keep it secure as well as the Rights you have over your personal data.
Throughout this notice we refer to data protection legislation which includes the UK GDPR and other applicable laws including (but not limited to) the EU GDPR 2016, the Privacy Electronic Communication (EC Directive) Regulations (“PECR”) 2003 and the e-privacy Directive. This also includes any new or replacement legislation which may come into effect from time to time.
EO Charging is a data controller as we have determined the purposes of why personal data should be collected and processed.
As we are based and headquartered in the United Kingdom (UK) we are registered with the Information Commissioners Office (the ICO) with registration number ZA787899. We also have registered offices in Italy, Australia, New Zealand and the USA.
You can contact our head office using the following details:
Post:
Tomo House
Tomo Road
Stowmarket
IP14 5AY
United Kingdom
Phone: +44 (0)333 77 20383
Email: hello@eocharging.com
We have a Data Protection Officer (DPO) who can be contacted via DPO@EOCharging.com if you would like to raise or discuss any data protection matters, complaints and/or concerns directly to them.
2. Lawful Basis for Data Processing
Data protection legislation requires EO Charging to identify an appropriate lawful bases to process personal data. The lawful basis we rely on as a data controller are detailed below with brief examples for when they may apply:
Consent, to register and use our chargers and products (non-commercial customers).
Contractual Obligation, to take the necessary steps to enter into and conclude contracts of employment.
Legal Obligation, where needed for tax reasons such as UK HMRC purposes.
Vital Interests, where needed in case of emergency disclosures and the individual cannot give their consent.
Legitimate Interests, to help answer any questions or concerns that may be sent to us from individuals who we may have no prior existing relationship with.
There may be instances of where we may need to process certain categories of data referred to as Special Category Personal Data. These may include personal data related to health, race and ethnicity as examples, but where identified and needed, we will ensure the relevant special conditions are applied and documented where needed.
3. Data Subjects
Due to the different services we offer and our business activities, we may process personal data of the following individuals (“data subjects”):
Customers
Commercial clients (including prospective clients)
Enquirers/complainants
Job applicants
Employees
Vendor/Suppliers
The above list is representative and non-exhaustive.
4. Personal Data Collection
We collect personal data through different means such as:
When you send us an enquiry
Register as a customer
Contact us via telephone, email or letter
Download and use our Apps
When you apply for one of our job vacancies
Through marketing lists
Contact us on social media
Through our vendors/suppliers
The above list is representative and non-exhaustive.
5. Personal Data Processed
We may process the following sets of personal data:
Name
Postal address
Email address
Phone number
Job details
Recruitment data (including CVs and cover letters)
IP address
Product data (e.g. product serial number, charge times, profile data, metadata etc)
The above list is representative and non-exhaustive.
6. How We Use Personal Data
We may use personal data for various activities (i.e. purposes) which can include the following activities:
To process orders and answer any product enquires
Charger installation enquiries and support
Cloud/App services support
To send any marketing communications
Process job applications
Onboarding of new employees
Process payments and other financial activities
To monitor website usage
Action any data subject right requests
Seek your views or comments on the services we provide
Notify you of changes to our services
Handle an enquiry or complaint you have made
The above list is representative and non-exhaustive.
For more information to how we process personal data you can contact us as detailed above.
7. EO Charging Mobile Apps
We have available on the Apple Store and Google Market mobile phone apps (which can also be used on tablet devices) to help our customers manage their chargers remotely and help create profiles linked to chargers that are purchased.
Our Apps are made by us and not with or by any external third parties and collect very minimal personal data to what is needed. The apps all require a user’s consent in line with the UK PECR/EU e-Privacy Directive and will not function without a user’s consent.
App data is hosted within our network which is based in the EU.
We have ensured users have control and access to their app data at all times, and if a user decides to delete their profile, our apps will not retain the data and a new account will need to be created. Please note in line with our data retention practices, we only retain data of accounts once deleted for 14 days, after which it is permanently deleted and not recoverable.
Our mobile apps may also send push notifications to inform and alert users if their chargers may be experiencing and faults or to send any important alerts which do not rely on a user’s consent (e.g. new app versions ready to be installed).
For more information you can contact us using our details above.
8. EO Cloud
We offer an online cloud solution to our customers to help optimise their charging experience. Our cloud solution is hosted in the UK and holds personal data of our users which can include:
Names
Contact information (email address and telephone number)
Charger information (e.g. charger model, serial number)
Charging and usage information (charge days, times etc)
Our cloud solutions will not process and store any special category personal data at any time.
Our software and production teams within the UK regularly review our cloud solutions to ensure they are accessible and the safety and security of personal data is not compromised.
More information to our cloud offerings can be found via our website or you can contact us using our details above.
9. Call Recordings
Calls into our telephone lines are recorded and held for 90 days and automatically deleted at the end of the retention period. We record calls for training and monitoring purposes. For more information you can contact us using our details above.
10. Recruitment and Criminal Data Processing
We have a separate recruitment privacy notice on our website which details how we process personal data in line with our recruitment activities. We also use recruitment agencies in the UK only to help best place people within our organisation. More information to our use of agencies can be found in our recruitment privacy notice and you can contact us using our details above.
We do not process any criminal conviction or offences data as part of our recruitment selection process, but will carry out a background screening check via a third party.
For more information you can contact us using our details above and view our Recruitment Privacy Notice on our website.
11. Children’s Personal Data
Our services are not designed for children of any age. If we do become aware of any children’s data being processed, we will take all reasonable steps and efforts to remove their personal data where identified.
12. Data Sharing
We do not sell, rent, or lease personal data pertaining to our customers or clients (including prospective’s) at any time.
Due to the nature of our business, there may be times we are required to share data with other departments or members of our organisation. Examples of this can include (but not limited to):
Customer requests/concerns/complaints
Recruitment purposes
Service issues/support including cloud/charger issues
We may also share data with our third-party vendors/suppliers as and when needed to help fulfil some of our business activities, such as recruitment as mentioned above.
Please note there may also be instances where we may need to share personal data with a competent law enforcement body, regulatory body, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation or (ii) to exercise, establish or defend our legal rights.
13. International Data Transfers
Due to the global nature of our organisation, there may be instances where we may need to transfer and share your data with other EO Charging employees or other organisations (e.g. vendors, service suppliers, law enforcement bodies etc.) who are in the European Economic Area (The EU member states, Norway, Iceland, and Liechtenstein), in an adequate listed country or in other third countries who may not have robust or similar data protection laws to the UK/EEA. If we need to transfer your information globally where required, we will take steps to ensure that appropriate safeguards are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this notice.
14. Marketing Communications
We would like to send you marketing news and updates regarding our company, products and services should you like to receive them. You can always change your preferences (i.e. opt out) by clicking on the relevant unsubscribe link at the bottom of the email. You can opt out by contacting us directly using our details mentioned above.
15. Social Media
We use social media sites such as Facebook, X (formerly Twitter), LinkedIn and Instagram to share news, updates and for promotional activities as a few examples. Our use of social media enables us to interact with customers (including potential customers), reach new audiences and showcase our products and services as a few examples. When you interact with us on social media through means such as “likes”, “shares” or leaving comments this enables us to see certain social media details (e.g. names, social media handles and photos). We don’t record or copy any social media profiles or details, but you should be aware when interacting with us on social media, other users or viewers can view your profile and any comments/feedback and it is your responsibility to ensure you have set up suitable and appropriate privacy settings for your use of social media.
16. Website Links
This website contains links to other websites, which are clearly marked as such. Please note that we have no control over external websites and are not responsible for the protection and privacy of any information which you may provide to them. Please refer to a website’s privacy notice when using it.
17. Cookies
We use cookies on our website. More information to cookies can be found in our cookie notice, and you can also change your consent via our website too.
18. Automated Decision-Making
We do not carry out any automated decision-making within our organisation. If this was to change, we will be sure to update this notice and provide details to when this would apply.
19. Data Retention
As a data controller we will retain personal data to provide our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
We will retain personal data for as long as necessary in line with various requirements, such as for example, best practice recommendations (e.g. ICO recommendations), relevant guidelines (e.g. ACAS guidance) or for as long as mandated under specific legislation (e.g. HMRC requirements). We will also determine appropriate retention periods based on our legitimate interests where identified.
At the end of the retention period personal data will be securely deleted or anonymised.
20. What Happens If Our Business Changes Hands?
We may from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will be permitted to use that data only for the purposes for which it was originally collected by us.
21. Data Security
As mentioned above we take security of personal data seriously, and we have certifications to various data security frameworks such as Cyber Essentials, Cyber Essentials Plus and ISO 27001, and we review our certifications annually.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
If we become aware of any loss, misuse, alteration of personal data we will work closely with our IT team and other parties as necessary to investigate the incident at hand. We have put into place the relevant procedure and policies in place to investigate, mitigate and report (when needed to relevant parties) such instances.
22. Data Protection Rights
If you are based in the UK/EEA you have several Rights to how an organisation processes your personal data. The Rights are as follows:
Right to be informed
Right to access data
Right to rectification
Right to erasure
Right to restrict processing
Right to objection
Right to portability
Right not to subject to automated decision making and profiling
If you would like to exercise any of the above Rights you can do so by sending us a written request using our details mentioned above.
Please note we may ask for ID (e.g. passport scan, drivers license etc) to verify identity where needed. Upon successful verification we will delete and remove all copies of ID received.
Should we also require extension of time to help fulfil any Right requests, we will be sure to contact requestors as soon as possible with reason(s) why an extension is needed and when Right requests can be fully carried out and completed.
23. Concerns and Complaints
We understand you may have concerns and complaints to this notice and any aspects to how we process personal data. If you would like to contact us directly to talk to us about a concern or to raise a complaint, you can do so by using our contact details above.
You can also submit a complaint directly to the Information Commissioners Office (the ICO), the UK supervisory authority for data protection in the UK, via this link.
If you are based anywhere within the EEA a list of supervisory authorities can be found via this link.
24. Review and Updates
We will review this notice and make changes to it from time to time. We recommend that you check this notice to see where changes have been made and to ensure you are able to review updated information at all times.