Privacy Policy
Source EV UK Ltd is the controller responsible for the App in the UK.
Our full details are:
Full name of legal entity: Source EV UK Ltd
Email address: dataprotection@source-ev.com
Postal address: 19th Floor 10 Upper Bank Street, London, England, E14 5BF
The data will be processed in accordance with applicable legislation.
1. The personal data we collect about you
- Identity and Contact data: full name, your email address, postal address and phone number;
- Profile data: password
- Transaction data: credit/debit card number, expiry date, history of your payments and details of any refunds;
- Device data (collected anonymously): the type of device you use, mobile network information and IP address;
- Usage data (collected anonymously): connection logs, analytics, and any error or debugging information;
- Security data (collected anonymously): information we collect about your use of the App or our Services in order to ensure your and our other users' safety and security, Usage data, Cookies data and the information provided to us by our payment processing provider;
- Cookies data: the information collected through the cookies and similar technologies listed in the “Cookie management” section set out below;
- Direct Marketing data: your direct marketing preferences, consents for receiving direct marketing from us or our third parties and the history of the direct marketing communications we have sent to you;
- Personalisation data: Cookies data, Transaction data, Usage data, Location data, and the preferences we have inferred you have and use to personalise the App and Services, being the preferences noted on your account;
2. How we collect your personal data
- Registration: when you register your account with us;
- Communications: when you communicate with us via email or telephone, or if you contact us through the App;
- Information you generate when using our App and/or our Services: please see the “Cookie management” section below for further details
- Information we collect through monitoring the use of our App and/or our Services
- Additional information: we otherwise collect through our App and/or our Services where we have your consent to do so, where you change preferences or where you interact with our App and/or our Services in other ways
3. Purpose of processing, legal basis, storage period and types of data collected
- Performance of a contract with you: where we need to perform the contract, we are about to enter into or have entered into with you;
- Legitimate interests: where necessary for our legitimate interests or those of a third party to whom we may provide your personal data in connection with operating the App or our Services provided such interests are not overridden by your own rights and interests;
- Legal obligation: where necessary for compliance with an obligation that applies to us by applicable law
- Consent: we rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose.
3.1 Data processed for a Visitor (anonymous Pay As You Go User
Purpose | Personal data categories | Lawful basis |
---|---|---|
Payment for the charging service | Transaction data | Performance of the contract |
To respond to your requests to exercise your rights under this policy | As relevant to your request | Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR) |
To comply with our other legal obligations, including compliance with tax legislation, judicial, law enforcement and government authorities' requests | All personal data under this policy | Legal obligation (to comply with our legal requirements) |
To administer, monitor and improve our business, Services and this App including troubleshooting, data analysis and system testing, and deploying security measures | Identity and Contact data | To administer, monitor and improve our business, Services and this App including troubleshooting, data analysis and system testing, and deploying security measures |
Applying security measures to our processing of your personal data, including processing in connection with the App | All personal data under this policy | Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR) |
Enforce our terms and conditions including to collect money owed to us | Transaction Data | Enforce our terms and conditions including to collect money owed to us |
To deploy and process personal data collected via cookies that are strictly necessary, as set out in the “Cookies management” section below | Cookies data | Legitimate interests (delivering and securing the App and our Services) |
To deploy and process personal data collected via cookies that are not strictly necessary, as set out in the “Cookies management” section below | Cookies data | Consent |
Personal data categories
Transaction data
Lawful basis
Performance of the contract
Personal data categories
As relevant to your request
Lawful basis
Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR)
Personal data categories
All personal data under this policy
Lawful basis
Legal obligation (to comply with our legal requirements)
Personal data categories
Identity and Contact data
Lawful basis
To administer, monitor and improve our business, Services and this App including troubleshooting, data analysis and system testing, and deploying security measures
Personal data categories
All personal data under this policy
Lawful basis
Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR)
Personal data categories
Transaction Data
Lawful basis
Enforce our terms and conditions including to collect money owed to us
Personal data categories
Cookies data
Lawful basis
Legitimate interests (delivering and securing the App and our Services)
Personal data categories
Cookies data
Lawful basis
Consent
3.2 Data processed for a Pay-As-You-Go (PAYG) User (with or without an account)
Purpose | Personal data categories | Lawful basis |
---|---|---|
Access to the service(this will only apply to PAYG users without an account) | Identity and Contact data | Performance of the contract |
Creating a customer account(this will only apply to PAYG users with an account) | Identity and Contact data Profile data | Performance of the contract |
Payment for the charging service | Transaction data | Performance of the contract |
Sending of a charging session identifier code | Identity and Contact data | Performance of the contract |
Processing of various requests: technical support, monitoring of charge status, complaints, and incidents | Identity and Contact data Device data Profile data | Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles) |
To provide you with your account holder benefits(this will only apply to PAYG users with an account) | Identity and Contact data Profile data Transaction data | Performance of the contract |
To comply with our other legal obligations, including compliance with tax legislation, judicial, law enforcement and government authorities' requests | All personal data under this policy | Legal obligation (to comply with our legal requirements) |
Enforce our terms and conditions, including to collect money owed to us | Identity and Contact data Transaction data Location data | Legitimate interests (to ensure that the terms and conditions are being followed by our customers) |
To send you direct marketing communications via email or push notification(this will only apply to PAYG users with an account) | Identity and Contact data Direct Marketing data | Consent |
To analyse patterns, create business insights and improve our advertising through aggregated and anonymised personal data | Identity and Contact data Profile data Transaction Data | Legitimate interests (to improve our products and services and grow our customer base) |
To administer, monitor and improve our business, Services and App, including troubleshooting, data analysis and system testing, and deploying security measures | Identity and Contact data Device data Usage data Security data | Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our App or Services, providing a secure service to users and preventing fraudulent and other misuse of our App) |
Applying security measures to our processing of your personal data, including processing in connection with the App | All personal data under this privacy notice | Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR) |
To notify you of changes to the App or our Services (this will only apply to PAYG users with an account) | Identity and Contact data | Legitimate interests (in servicing current and prospective customers) |
To notify you of updates to this privacy notice (this will only apply to PAYG users with an account) | Identity and Contact data Transaction data | Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR) |
To respond to your requests to exercise your rights under this notice | As relevant to your request | Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR) |
To deploy and process personal data collected via cookies that are strictly necessary, as set out in the “Cookies management” section below | Cookies data | Legitimate interests (delivering and securing the App and our Services) |
To deploy and process personal data collected via cookies that are not strictly necessary, as set out in the “Cookies management” section below | Cookies data | Consent |
To develop and improve our products and services and inform our marketing strategy, including through the use of aggregated and anonymised data | Identity and Contact data Profile data Transaction data Usage data Location Data Cookies data (all data will be aggregated and anonymised) | Legitimate Interests (to improve our products and services and grow our customer base) |
Personal data categories
Identity and Contact data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Profile data
Lawful basis
Performance of the contract
Personal data categories
Transaction data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Device data
Profile data
Lawful basis
Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles)
Personal data categories
Identity and Contact data
Profile data
Transaction data
Lawful basis
Performance of the contract
Personal data categories
All personal data under this policy
Lawful basis
Legal obligation (to comply with our legal requirements)
Personal data categories
Identity and Contact data
Transaction data
Location data
Lawful basis
Legitimate interests (to ensure that the terms and conditions are being followed by our customers)
Personal data categories
Identity and Contact data
Direct Marketing data
Lawful basis
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction Data
Lawful basis
Legitimate interests (to improve our products and services and grow our customer base)
Personal data categories
Identity and Contact data
Device data
Usage data
Security data
Lawful basis
Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our App or Services, providing a secure service to users and preventing fraudulent and other misuse of our App)
Personal data categories
All personal data under this privacy notice
Lawful basis
Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR)
(this will only apply to PAYG users with an account)
Personal data categories
Identity and Contact data
Lawful basis
Legitimate interests (in servicing current and prospective customers)
(this will only apply to PAYG users with an account)
Personal data categories
Identity and Contact data
Transaction data
Lawful basis
Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR)
Personal data categories
As relevant to your request
Lawful basis
Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR)
Personal data categories
Cookies data
Lawful basis
Legitimate interests (delivering and securing the App and our Services)
Personal data categories
Cookies data
Lawful basis
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location Data
Cookies data
(all data will be aggregated and anonymised)
Lawful basis
Legitimate Interests (to improve our products and services and grow our customer base)
3.3 Data processed for a Member (Subscribed User)
Purpose | Personal data categories | Lawful basis |
---|---|---|
Creating a customer account | Identity and Contact data Profile data | Performance of the contract |
Payment for the charging service | Transaction data | Performance of the contract |
To provide you with your membership benefits, fulfilling promotional offers | Identity and Contact data Profile data Transaction data | Performance of the contract |
Sending of a charging session identifier code | Identity and Contact data | Performance of the contract |
Processing of various requests: technical support, monitoring of charge status, complaints and incidents | Identity and Contact data Device data Profile data Vehicle data | Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles) |
To comply with our other legal obligations, including compliance with tax legislation, judicial, law enforcement and government authorities' requests | All personal data under this privacy notice | Legal obligation (to comply with our legal requirements) |
Enforcing our terms and conditions including to collect money owed to us | Identity and Contact data Transaction data Location data | Legitimate interests (to ensure that the terms and conditions are being followed by our customers and to recover debts due to us) |
To send you direct marketing communications via email or push notifications | Identity and Contact data Direct Marketing data | Consent |
To analyse patterns, create business insights and improve our advertising through aggregated and anonymised personal data | Identity and Contact data Profile data Transaction data Location data | Legitimate interests (to improve our products and services and grow our customer base) |
To administer, monitor and improve our business, Services and this App including troubleshooting, data analysis and system testing, and deploying security measures | Identity and Contact data Device data Usage data Security data | Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our App or Services, providing a secure service to users, and preventing fraudulent and other misuse of our App) |
Applying security measures to our processing of your personal data, including processing in connection with the App | All personal data under this privacy notice | Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR) |
To notify you of changes to the App or our Services | Identity and Contact data | Legitimate interests (in servicing current and prospective customers) |
To notify you of updates to this privacy notice | Identity and Contact data Transaction data | Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR) |
To respond to your requests to exercise your rights under this notice | As relevant to your request | Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR) |
To deploy and process personal data collected via cookies that are strictly necessary, as set out in the “Cookies management” section below | Cookies data | Legitimate interests (delivering and securing the App and our Services) |
To deploy and process personal data collected via cookies that are not strictly necessary, as set out in the “Cookies management” section below | Cookies data | Consent |
To develop and improve our products and services and inform our marketing strategy, including through the use of aggregated and anonymised data | Identity and Contact data Profile data Transaction data Usage data Location Data Cookies data (all data will be aggregated and anonymised) | Legitimate Interests (to improve our products and services and grow our customer base) |
Personal data categories
Identity and Contact data
Profile data
Lawful basis
Performance of the contract
Personal data categories
Transaction data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Profile data
Transaction data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Device data
Profile data
Vehicle data
Lawful basis
Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles)
Personal data categories
All personal data under this privacy notice
Lawful basis
Legal obligation (to comply with our legal requirements)
Personal data categories
Identity and Contact data
Transaction data
Location data
Lawful basis
Legitimate interests (to ensure that the terms and conditions are being followed by our customers and to recover debts due to us)
Personal data categories
Identity and Contact data
Direct Marketing data
Lawful basis
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Location data
Lawful basis
Legitimate interests (to improve our products and services and grow our customer base)
Personal data categories
Identity and Contact data
Device data
Usage data
Security data
Lawful basis
Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our App or Services, providing a secure service to users, and preventing fraudulent and other misuse of our App)
Personal data categories
All personal data under this privacy notice
Lawful basis
Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR)
Personal data categories
Identity and Contact data
Lawful basis
Legitimate interests (in servicing current and prospective customers)
Personal data categories
Identity and Contact data
Transaction data
Lawful basis
Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR)
Personal data categories
As relevant to your request
Lawful basis
Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR)
Personal data categories
Cookies data
Lawful basis
Legitimate interests (delivering and securing the App and our Services)
Personal data categories
Cookies data
Lawful basis
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location Data
Cookies data
(all data will be aggregated and anonymised)
Lawful basis
Legitimate Interests (to improve our products and services and grow our customer base)
4. Data retention
5. Data recipient
6. Data transfers
- If there are UK adequacy regulations in respect of that country (please see the list of countries here), we will rely on those to undertake our transfer.
- In the case of transfers of personal data to a third party in the United States, we may rely on that third party’s certification to the EU-US Data Privacy Framework and the UK extension to the Framework to transfer your personal data.
7. Data security and privacy
8. Failure to provide personal data
9. Cookie management
- Strictly necessary cookies. These are cookies that are required for the operation of our App. These essential cookies are always enabled because our App won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our App or make use of e-billing services. You can switch off these cookies in your settings, but you may then not be able to access all or parts of our App.
- Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our App when they are using it. This helps us to improve the way our App work, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our App. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Cookie type | Cookie name | Purpose of the cookie | Supplier | Storage period |
---|---|---|---|---|
Technical cookie: authentication | AUTH_LEGACY_SESSION | This information is necessary to enable the authentication | TotalEnergies charging services | Session duration |
Geolocation Cookie | SPK MapBox | Users may decide to enable the application to collect their location to enable the application to indicate the closest charging stations. (subject to their consent) | MapBox | Session duration |
Geolocation Cookie | Website browser interface | Users may decide to share their location in order to improve their experience with the application (subject to their consent) | User's browser | Session duration |
Technical and functional cookies | utag_main, utag_main_, tealium_segment, utag_env_ | Enables the customer to manage its preferences for the cookies | Tealium | 13 months |
Statistical cookies | atuserid | Customer-side visitor identification cookie (replaces server-side) | AT Internet | 6 months |
Statistical cookies | Atauthority | Cookie for storing/logging visitor consent | AT Internet | 6 months |
Statistical cookies | Idirxvr | Visitor identifier history (server-side visitor identifier storage cookie) | AT Internet | 13 months |
Statistical cookies | Atidx | Secure visitor identification (server-side visitor identifier cookie storage) | AT Internet | 13 months |
Statistical cookies | Atid | Primary visitor identifier (server-side visitor identifier storage cookie) | AT Internet | 13 months |
Statistical cookies | Atreman | Used to keep a prior attribution campaign in memory | AT Internet | 30 days |
Statistical cookies | Atsession | Used to record the list of new campaigns encountered during a visit, in order to avoid measuring the same campaign several times | AT Internet | 30 days |
Cookie name
AUTH_LEGACY_SESSION
Purpose of the cookie
This information is necessary to enable the authentication
Supplier
TotalEnergies charging services
Storage period
Session duration
Cookie name
SPK MapBox
Purpose of the cookie
Users may decide to enable the application to collect their location to enable the application to indicate the closest charging stations. (subject to their consent)
Supplier
MapBox
Storage period
Session duration
Cookie name
Website browser interface
Purpose of the cookie
Users may decide to share their location in order to improve their experience with the application (subject to their consent)
Supplier
User's browser
Storage period
Session duration
Cookie name
utag_main, utag_main_, tealium_segment, utag_env_
Purpose of the cookie
Enables the customer to manage its preferences for the cookies
Supplier
Tealium
Storage period
13 months
Cookie name
atuserid
Purpose of the cookie
Customer-side visitor identification cookie (replaces server-side)
Supplier
AT Internet
Storage period
6 months
Cookie name
Atauthority
Purpose of the cookie
Cookie for storing/logging visitor consent
Supplier
AT Internet
Storage period
6 months
Cookie name
Idirxvr
Purpose of the cookie
Visitor identifier history (server-side visitor identifier storage cookie)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atidx
Purpose of the cookie
Secure visitor identification (server-side visitor identifier cookie storage)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atid
Purpose of the cookie
Primary visitor identifier (server-side visitor identifier storage cookie)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atreman
Purpose of the cookie
Used to keep a prior attribution campaign in memory
Supplier
AT Internet
Storage period
30 days
Cookie name
Atsession
Purpose of the cookie
Used to record the list of new campaigns encountered during a visit, in order to avoid measuring the same campaign several times
Supplier
AT Internet
Storage period
30 days