Evata Privacy Policy

This policy explains what personal information Evata collects, why, who we share it with, how long we keep it, and your rights.

This policy is Evata UK Limited’s (“Evata”, “we”, “us”), and we are responsible for the personal information it describes. We are a company registered in Scotland, company number SC688260, with our registered office at c/o Global Accountancy Practice, 10 Allison Street, Glasgow G42 8NN. We are registered with the Information Commissioner’s Office, registration number ZB903947.

It covers our website www.evata.co.uk; the Evata app, which drivers use to charge; Evata DRIVE, for self-employed drivers who pay for their own charging; and business accounts at app.evata.co.uk. If the business you work or drive for uses Evata PLAN with its vehicles’ journey data, see our Customer Privacy Notice.

If you have a question about this policy, contact us through our contact page.

WHEN YOU CONTACT US

When you send one of our forms, chat with us, phone or email us, we keep what you tell us: your name and email address, your company and phone number if you give them, the topics you choose and your message.

We use it to reply to you and deal with your enquiry. Our legal basis is our legitimate interest in replying to people who contact us, or taking steps you ask for before entering a contract with us. We don’t use it to send you marketing, and we never sell it.

What you send through our forms is kept in our own database on Google Cloud in London, which only our team can read, for 12 months, then deleted. If you would rather we didn’t keep your details, or don’t want us to discuss your enquiry with anyone else in your organisation, tell us through our contact page.

VISITING OUR WEBSITE

Our website is hosted on Google Cloud in London. Its servers record each visitor’s IP address, the time, the page requested and the browser. We use these records to keep the site secure and working; our legal basis is our legitimate interest in doing so. They are deleted after 30 days.

We use cookies, but analytics cookies only if you accept them, and no advertising cookies. Our cookie policy lists each one and how to change your choice at any time.

SERVICES THAT RECEIVE DATA FROM OUR WEBSITE

• Google Analytics, only if you accept analytics cookies, counts visits and shows which pages are used and how people found the site. It sees the pages you visit, your device and browser and your approximate location, but not your IP address, your name or anything you type. Legal basis: your consent. Kept for 14 months. See how Google uses this information.
• Mouseflow, only if you accept analytics cookies, records how you move around our pages (clicks, scrolling and mouse movement) so we can see where the site is hard to use. It doesn’t record what you type. Legal basis: your consent. Recordings are kept for 3 months. See Mouseflow’s privacy policy.
• Crisp, only if you open the chat, runs our chat. It receives your messages, anything you tell us such as your name or email address, and the details the chat needs to work, including your IP address. Legal basis: our legitimate interest in replying to you. We keep conversations for 12 months; Crisp also keeps its own connection records for up to a year, as French law requires. See Crisp’s privacy policy.
• Google reCAPTCHA, on pages with a form, checks that the form is being sent by a person rather than a program, using details such as your IP address, your browser and how you use the page. Legal basis: our legitimate interest in protecting our forms from abuse. See Google’s Privacy Policy and Terms of Service.

THE EVATA APP

The Evata app is how drivers find, book and charge at the depots open to them. It is one app for every driver, whether a business set them up or they signed up for Evata DRIVE. We collect:

• Signing in: your mobile number or email address, to send you a one-time code. The app doesn’t use passwords.
• Your details: your name and email address, if you created your account yourself rather than being set up by a business.
• Your vehicles: registration, make, model and battery details. When you add a vehicle by its registration, we look it up in DVLA and DVSA records.
• Bookings and charging: what you book and cancel, the charges you start and stop, the vehicle you use, the site rules you confirm and the site videos you watch, and the energy, time and cost of each charge.
• Paying for yourself: your card details go straight to Stripe, our payment provider, not to us. We keep a reference to the card, your top-ups and your balance.
• Location: used on your phone, while the app is open, to show depots near you. It isn’t sent to us.
• The map and how the app runs: Google provides the map and measures how well the app works, and receives details of your device and your IP address to do so.

The app shows no advertising. We use this information to run your charging and keep the app working; our legal basis is our legitimate interest in doing so or, if you use Evata DRIVE, our contract with you. We share it with the companies that provide our sign-in, emails, payments and maps; with the business you drive for, when it pays for your charging; and with the operators of the chargers you use, who receive the record of each charge.

DELETING YOUR ACCOUNT

You delete your account by closing it. In the app: go to Profile, then Close account, and type CLOSE to confirm.

Without the app: send a request through our contact page, choosing “General enquiry”, and include the mobile number or email address you sign in with. We’ll check it’s your account before we close it.

Closing your account signs you out and cancels any charging you have booked.

• What we delete: your sign-in and profile, your vehicles and any connection to your car maker, and any saved payment card and wallet.
• What we remove your name from: your bookings and charging history.
• What we have to keep: invoices and payment records, for six years, because HM Revenue and Customs requires it; and charging records already shared with the charge point operators you charged with. We tell them you have closed your account, but their own records are theirs to keep.

Deleting everything else can take up to 30 days.

EVATA DRIVE

Evata DRIVE lets self-employed drivers who work through an operator or app that uses Evata charge at the depots open to them, and pay from their own Evata balance. You sign up on drive.evata.co.uk, then charge with the Evata app. As well as what the app collects, we collect:

• Signing up: your name and mobile number. We text you a code to confirm the number.
• Your email address: confirmed with a code, and used for your top-up receipts.
• Confirming you drive for an operator: through the operator’s own sign-in, a code the operator gave you, or your mobile number matching the operator’s list of drivers. The operator confirms whether you are one of its current drivers.
• Paying: your card details go straight to Stripe. We keep a reference to the card, your top-ups, any automatic top-up you switch on, and your balance.

We use this to provide Evata DRIVE to you; our legal basis is our contract with you. We share it with the companies that provide our sign-in, emails and payments; with the operator you drive for, only to confirm you are one of its drivers; and with the operators of the chargers you use. To close your account and get back what is left on your balance, see Deleting your account.

BUSINESS ACCOUNTS

Businesses use their account at app.evata.co.uk to manage Evata SHARE, CHARGE and PLAN. We collect:

• Your account: your name, email address, the businesses you have access to and your role. You sign in with a one-time code we email you.
• Invitations: when a colleague adds you, we email you to say so.
• Checking your business: its name, number, status and registered office from Companies House, and its VAT number, checked with HM Revenue and Customs.
• Charging and invoices: the charges your drivers make, by app or with an Evata card, the cards you assign to them, and your monthly invoices.
• Evata PLAN: vehicle journey data your business uploads. See our Customer Privacy Notice.

We use this to provide the service your business has with us; our legal basis is our contract with your business and our legitimate interest in running the service for its users. We share it with the companies that provide our sign-in and emails, and with Companies House and HM Revenue and Customs for the checks above. If your business closes its Evata account, we delete its users’ accounts and its PLAN data, and keep invoices and the charging records behind them for six years, because HM Revenue and Customs requires it.

WHO WE SHARE YOUR INFORMATION WITH

We never sell your information, and we don’t use it for advertising. We share it only as this policy describes:

• with companies that provide services to us: hosting and databases, sign-in, emails, payments, maps, reading uploaded files, website analytics and chat;
• with the businesses and charge point operators involved in your charging, as described above;
• with Companies House and HM Revenue and Customs, to check a business; and
• where the law requires it, or to protect our rights, our users or anyone’s safety.

Our website links to other sites, such as LinkedIn and Google Play. Their own privacy policies apply there.

YOUR RIGHTS

You have the right to:

• ask for a copy of the information we hold about you, free of charge;
• have it corrected if it is wrong or incomplete;
• have it deleted, or its use restricted, in some circumstances;
• object to our using it on the basis of our legitimate interests;
• receive the information you gave us in a form you can take to another organisation;
• withdraw your consent at any time where we rely on it, which for analytics cookies you can do in Cookie settings; and
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.

To use any of these rights, contact us through our contact page.

HOW WE PROTECT YOUR INFORMATION

Our website, the app and our systems use encrypted connections, and access to the information we hold is limited to our team. Card details go straight to Stripe; we never see or store them.

TRANSFERS OUTSIDE THE UK

We only transfer personal information outside the UK where the UK recognises the country as giving adequate protection, where the UK’s approved contract terms are in place, or where UK data protection law otherwise allows it. Our sign-in provider stores your sign-in details in the UK.

• In the US, under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as giving adequate protection: Google (Analytics and reCAPTCHA), the service that texts sign-in codes, and our payment provider.
• In the US, under the UK’s approved contract terms: the AI service that reads unfamiliar file layouts in Evata PLAN, which may process a small sample of an uploaded file.
• In the EU, which the UK recognises as giving adequate protection: Mouseflow, Crisp, the service that sends our emails, and the database service that holds Evata PLAN’s stopping places.

CHANGES TO THIS POLICY

If we change this policy, we will post the changes on this page and update the date at the end.

CONTACTING US

For data protection questions, including about your personal information, contact us through our contact page or write to us at:

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.

This policy was last modified on 4 October 2026.

Customer Privacy Notice

Vehicle journey data in Evata PLAN

When a business uploads its vehicles’ journeys to Evata PLAN, to plan a move to electric vehicles, that business is responsible for the data. Evata processes it on the business’s behalf, only to provide Evata PLAN to it. If you drive for that business, its own privacy notice explains how it uses your information.

The data is each vehicle’s registration and journeys: times, start and end locations, distance and fuel used. From it, we work out where each vehicle stops regularly and where it is parked overnight, which can be a driver’s home. We keep it on Google Cloud in London. The stopping places we work out are also held in a database service in the EU, so they can be looked up quickly. When we don’t recognise the layout of an uploaded file, we send its column headings and a small sample of its rows to an AI service, which may process them in the US, to work out how to read the file. We don’t share the data with other businesses. We delete it when the business closes its Evata account, or sooner if the business asks us to.

If you contact us about this data through our contact page, we’ll tell the business that uploaded it, which is responsible for answering you. You can also complain to the Information Commissioner’s Office at ico.org.uk.

This notice was last modified on 4 October 2026.