Who we are
Our website address is: https://charge-station.co.uk. Chargestation is a trading style of NSS Trading Group Ltd. Registered in England and Wales with company number 13148640. Registered office: Regency House 33 Wood Street, Barnet, London, United Kingdom, EN5 4BE.
Maintaining Data Privacy and Data Protection is a priority for Chargestation. Prior to submitting any business or personal data to Chargestation you will be required to read and accept the terms of this privacy statement. Please read this privacy statement carefully to understand our arrangements regarding your personal data and how we capture, store, and process it. We recommend that you visit our website from time to time, to stay up to date with any changes.
Personal data we may collect
Through your use of this website and/or your purchase of products or services offered by Chargestation we may collect, store and process the following data about you:
- Contact and Identity Information: details of how to contact you, e.g. title, name, address, email address, telephone numbers, any other information you choose to divulge as part of a query.
- Property Information: details of a property / location, e.g. address, availability of off-street parking.
- Vehicle Information: details of a vehicle, e.g. make, model, registration mark, year of manufacture.
- Marketing Preference Information: details of your consent for us to send marketing materials, preferred channels.
- Payment Information: details of payment card, e.g. card number, expiry, CVC, cardholder and details of payments to and from you and other details of products and services you have purchased from us.
- Cookies Information: information about website visits, interactions.
- Customer Services Information: recording/reporting of faults, issues with the charging network.
- Usage Data: details of electric usage from a charging unit.
Scope and Consent
Chargestation and our supply partners recognise our moral, legal, and ethical duty to manage business and personal information in line with contractual agreements (e.g. Non-disclosure agreements and terms and conditions, etc.), our own Data Protection Policy, and the law. We will not make your business or personal information available to any third party not bound by subcontract agreements.
This Privacy Statement sets out our collection, use, storage, disclosure, retention, manipulation, and protection of your business or personal information. It applies to our website where the Privacy Statement appears at the bottom of the page, and to any other Chargestation application, software, service, or tool (collectively “Services”), where this Privacy Statement is referred to, regardless of how you access or use them, including through mobile devices. By using our services, and or making business enquiries with us, you are required to accept the terms of this Privacy Statement and provide consent to our collection, use, disclosure, retention, and protection of your personal information as outlined in this Privacy Statement.
Once you submit your business or personal data, Chargestation becomes the data controller for that information, as per the General Data Protection Regulation (GDPR) (EU) 2016/679 (hereafter “GDPR”), Article 5(2), “the controller shall be responsible for, and be able to demonstrate compliance with the GDPR principles.”
How long do we keep your information?
Chargestation operates a clear retention policy to ensure personal data is kept only for so long as is necessary for the purpose for which such information is collected, after which we make it non-identifiable or delete it.
The actual length of time data is retained will depend on the purpose for which it was collected. In the case of Contact Information relating to an enquiry not resulting in any further agreement between us we will delete personal data six (6) months after the date of our last contact. For web shop purchases, we do not retain payment card details after completion of the payment transaction.
You have certain rights to request deletion of your personal data at any time under rights described below (in the Your rights relating to personal data section below).
Who do we share your personal data with?
We may share your personal data with third parties to the extent necessary for the purposes set out in this Customer Privacy Notice including in the circumstances more particularly described below.
We contract with third parties to host the servers supporting our websites and other aspects of our operations and it may be necessary to share your personal data with these third parties in connection with the purposes set out in this Customer Privacy Notice. These servers are installed in secure datacentres located within the EEA.
For web shop sales, we share payment card details with our payment card processor.
We may disclose your personal data to any member of our group, which means our subsidiaries, strategic partner(s) or strategic sponsor(s), our ultimate holding company and its subsidiaries as defined in section 1159 of the UK Companies Act 2006 in connection with the purposes set out in this Customer Privacy Notice.
As part of our GDPR compliance obligations, we are duty bound to check when personal data may be shared with third parties to ensure that they apply the same or greater controls in terms of data protection. The use of non-disclosure agreements forms part of our third-party data sharing controls.
We may also disclose your personal data to third parties:
- in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; or
- if we or substantially all of our assets are acquired by a third party, in which case personal data held by it about our customers will be one of the transferred assets; or
- if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or in order to enforce or apply other agreements; or
Your personal data may be sent to your local distribution network operator to ensure that your charging unit can be fitted at your property without causing issues with the local electrical supply. This is passed on as part of the contract if you are purchasing a charging unit.
Your personal data may be sent to the National Inspection Council for Electrical Installation Contracting (NICEIC) to confirm that the installation of your charging unit meets the correct installation requirements and is recorded as part of the standard NICEIC requirements. This information is passed on as part of the contract if you are purchasing a charging unit.
Your personal data may be sent to the Office for Low Emission Vehicles (OLEV) and other relevant third parties to enable us to apply for a government Electric Vehicle Homecharge Scheme grant on your behalf. This information is passed on as part of the contract if you are purchasing a home charging unit.
Will we use your personal data for any other purpose?
Chargestation will only use your data for the purpose(s) that you have agreed.
Changes to our Customer Privacy Notice
We may make minor changes to this Customer Privacy Notice in the future and will post these to this page on our website. If we make any significant changes, we will take additional steps to inform you.
Your rights relating to personal data
You have certain rights in relation to your personal data which we aim to uphold as follows. Please note that rights are not absolute and are subject to certain qualification and exceptions.
- Right to be informed: You have the right to receive clear, transparent and understandable information about how we process your personal data. Our Customer Privacy Notices, including this one, aim to meet this need.
- Right to access: You can ask us for a copy of personal data we hold about you.
- Right to rectification: You can ask us to correct any error you identify in personal data we hold about you.
- Right to erasure: You can ask us to delete data we hold about you. We will do so unless we have a compelling reason to retain (e.g. legal requirement, prevention of fraud).
- Right to restrict processing: You can ask us to stop using your personal data.
- Right to data portability: You can ask us to provide your personal data in a form suitable for use by another organisation.
- Right to object: You can object to our processing of your personal data where we are doing so under the legal basis of legitimate interest.
- Right not to be subject to automated decision-making including profiling: we don’t do this so this right has no relevance in this context.
If you would like to contact us in connection with exercising any of these rights, please do by email to firstname.lastname@example.org or by phone or letter to our Customer Services team. Customer Service contact details are provided on our website and written communications. We aim to respond to any requests you make within seven (7) working days.
How can you submit a complaint or enquire about the data that is held about you?
Simply send an email to email@example.com and title your email “GDPR Complaint/Enquiry.”
- Object to the processing of your personal information.
- Ask for your data to be transferred.
- Provide permissions for someone to act on your behalf regarding your personal information.
- Request correction or access of personal information.
- Request the removal of personal information in relation to a living or deceased person.
Note: Please allow up to 30 days for the processing of your enquiry, request, or complaint.
No personal data is obtained following visits to the Chargestation website.
Contacting Chargestation By Telephone, Mobile, Email or Fax
When you make contact with Chargestation your permission will be sought to collect your personal data and/or send you marketing communications. To ensure we are fulfilling the requirements of the GDPR, audit trail of consent will be sought.
Chargestation protects your information using security systems and measures to mitigate risks, unauthorised access, misuse, disclosure losses and alterations. Some of the current safeguards we employ are encryption, firewalls, anti-virus software and physical access controls.
Our information technology provision is:
PCI Certified Secure Zone v3.1.
SOC 1 Compliant.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Data Protection Audit and Review
Chargestation operates an audit function via its own Risk and Compliance Department. One of the objectives for this department is to provide a periodic and disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.
Training And Awareness
Chargestation’s in-house data protection training ensures staff members and those who handle personal data are equipped with the necessary skills and knowledge to comply effectively with GDPR regulation. The training focuses on accountability, whilst maintaining data quality principles and implementing appropriate measures to protect data.