Updated July 2026

Privacy Policy

1. Introduction

At ev.energy, our mission is to provide simpler, more affordable, and greener energy for everyone. We achieve this by intelligently managing your car, charger and other energy devices to optimize charging times, reducing both costs and carbon emissions while respecting the limitations of the grid.

To deliver these services, we need to collect certain personal information. Rest assured, we are committed to collecting only the minimum necessary data required to provide our services and assist you effectively. Your personal data will be treated with the highest standards of care, ensuring it remains secure. We will retain it only for as long as necessary and share it only with your knowledge and consent, or when legally required. We rely on your consent to access and use your data. You may withdraw your consent at any time via your account settings or by contacting us.

This Privacy Policy outlines how we collect, use, and protect your information, as well as the rights you have under the relevant privacy laws. Please note that depending on your jurisdiction, the specifics of how we handle your data may differ.

EV DOT ENERGY LTD is a company registered in England under company number 11468310, with subsidiaries, including EV.ENERGY CORP located in the United States. Collectively, we refer to ourselves as ev.energy (or "we," "us," "our"). We are registered with the UK Information Commissioner’s Office (ICO) under registration number ZA464860. References in this Policy to the ICO include its successor body, the Information Commission, once that transition takes effect.

This Privacy Policy applies to all services provided by ev.energy, whether through our website, the ev.energy platform (branded "Eve" for our utility and business customers), the ev.energy app, available for download from the App Store and Google Play. Additionally, we provide our services through other companies under their branding. For simplicity, we refer to any service we offer, either directly or via a partner, as the “Service.”

As a company serving users across multiple jurisdictions, we are committed to complying with the relevant data protection laws in each region where we operate. Depending on your location, the way we process your data may be subject to specific legal requirements, including but not limited to:

• European Union (EU) and European Economic Area (EEA): If you are a resident of the EU or EEA, your personal data is protected under the General Data Protection Regulation (GDPR). This regulation grants you various rights regarding the processing of your personal data, including the right to access, correct, erase, or restrict its use.
• United Kingdom: If you are a located within the United Kingdom, your personal data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These regulations grant you various rights regarding the processing of your personal data, including the right to access, correct, erase, or to restrict its use.
• United States: If you are a resident of another US state with comprehensive consumer privacy legislation, your personal data may also be protected under that state's law, which typically provides rights including the right to access, correct, delete, and opt out of the sale or sharing of your personal information for targeted advertising, and of certain automated profiling.
• Other Jurisdictions: Users in other regions may be subject to different data protection laws, which may provide additional rights or impose different requirements regarding how your personal data is processed.

We ensure that our data practices align with the applicable laws for each jurisdiction. When necessary, we implement additional safeguards to ensure your privacy rights are respected, such as Standard Contractual Clauses for international data transfers. Also see our Cookie Notice.

Direct Users and Program Participants. ev.energy provides the Service in two ways: (i) directly to individuals who register with ev.energy directly ("Direct Users"), and (ii) to individuals who enrol via a utility, retailer, or other partner running a managed charging or demand-response program, including where the Service is offered under that partner's own branding ("Program Participants"). Your personal data belongs to you. Where you are a Direct User, ev.energy is the controller of your personal data for the purposes described in this Policy. Where you are a Program Participant, ev.energy may control and/or process your personal data both (a) as a controller, for our own service delivery, security, and service improvement purposes, and (b) as a processor acting on behalf of the relevant utility or program partner, for the purposes of operating the program you have joined (for example, verifying your eligibility and reporting on your participation). Where a utility or program partner acts as controller, it is responsible for providing you with its own privacy notice; this Policy explains ev.energy's role and practices.

2. What Information We Collect

To deliver our services, we will collect personal data from you, including but not limited to the following categories:

• Identity and Contact Data: This includes your name, email address, phone number, and other contact details necessary for communication.
• Your Location: Where privacy settings allow, we will collect location data, such as your current geographic location, to provide location-based services like finding nearby charging stations, optimizing routes for energy efficiency, and sending relevant alerts or notifications. This data is also used to improve our services and ensure the best user experience. You can opt out of location tracking at any time by adjusting your device settings, though you may not be able to continue with participation in Utility programs where you have enrolled or some application features may not be available to you.
• Profile and Consent Data: Information about your preferences (for marketing and notifications), feedback, survey responses, and partly anonymized usage data about how you interact with our app. We may also use this data to improve your user experience.
• Hardware Data: Information about your electric vehicle, battery, charger and other smart home devices, which allows us to optimize and manage smart charging and control charging times and energy flows based on your device and grid conditions. Where you participate in a bidirectional charging or vehicle-to-everything (V2X) program, this also includes information about power flowing from your vehicle or battery back to your home or the grid, which we use to manage and control that flow in the same way.
• Energy Data: Details such as your energy supplier, tariff, and meter reference number. This enables us to apply the correct tariff and grid information to your energy supply and, with your consent, share smart charging data with third parties.
• Third-Party Account Data: Information that allows us to link your ev.energy account with accounts for your electric vehicle, charger, battery or other connected energy device, or energy supplier.
• Technical Data: Information about the device you use to access our platform, including your device’s time zone, locale, and other technical data. This helps us ensure compatibility and tailor the user experience to your device.
• Transaction and Financial Data: Data about your energy usage and payments for any services purchased through the platform.
• Conversation and Support Data: Records of your interactions with us and with our AI-powered features. This includes messages, questions and prompts you submit to our in-app assistant or to the AI features of the ev.energy platform (branded "Eve"), the responses generated, and any feedback you give on them; and the content of your correspondence with our customer support team, including emails, in-app chat, support tickets, and call or chat notes. We use this data to answer your query, resolve faults, keep a record of what was agreed, and to review and improve the accuracy, safety, and helpfulness of our platform, our AI features, and our support. Any third-party provider that processes this data, whether to power our AI features or to support our customer service operations, does so solely as our sub-processor under contract, and is not permitted to use it to train or improve their own models. Please do not enter payment details, passwords, or other sensitive information into our AI features or support channels.
• Cookies and Tracking Data: Information we or our partners collect through cookies and similar tracking technologies, such as web beacons, pixels, and mobile identifiers, to enhance user experience and functionality. We use Cookiebot to manage and obtain consent for the use of cookies and tracking technologies. For more details on the types of cookies we use, their purposes, and how you can manage your cookie preferences, please refer to our Cookie Declaration.

The data we collect will be used and retained by us to provide the services outlined in this Privacy Policy. We will share this data with third parties only where necessary to deliver the services to you and as described in this policy. Your data will not be used to build advertising profiles about you or for automated, programmatic targeted advertising. This does not affect the opt-in marketing communications described in Section 3, which you can stop at any time as described there.

We may also collect, use, and share aggregated data. Aggregated data may be derived from your personal data, but it does not directly or indirectly identify you, and therefore, it is not considered personal data under applicable laws. For example, we may aggregate electric vehicle data to help utilities plan their charging networks or improve service offerings.

Please note that, depending on your jurisdiction, specific legal protections and regulations may apply to certain types of data (e.g., sensitive data, financial data).

3. How We Collect Your Data and How We Use Your Information

We collect information from multiple sources to provide our Services, including:

• Directly from you - information you provide when registering or using our app.
• From your vehicle - via your vehicle manufacturer or authorised integration partners, such as through manufacturer APIs.
• From charging infrastructure - including smart chargers, public charging networks, and third-party service providers.
• From energy and utility companies, and other energy service companies - to manage energy usage and facilitating reward payments where applicable.

At ev.energy, we use your personal data to deliver and enhance the Service, which helps optimize your electric vehicle charging by offering smarter, greener, and more cost-effective options.

The personal information we collect as part of our Service, enables ev.energy to:

• Deliver and Enhance the Service: We use your data to ensure the Service functions efficiently and to improve your user experience. For example, whenever you use our Service, we collect usage and log data to identify and fix errors. This helps us prevent similar issues in the future and improves the overall functionality of the app. This log data may include details such as the time, date, and configuration specific to your user account or profile, along with error-related information, as outlined under ‘Technical Data’ in Section 2.
• Control Your Charging and Energy Flows: We use your Hardware Data and Third-Party Account Data to send charging and, where applicable, discharging commands (including for bidirectional or V2X programs) to your vehicle, battery, or charger, directly or via the relevant manufacturer, so that your charging and energy flows follow your preferences, any program you have joined, and grid conditions.
• Participate in Energy and Flexibility Markets: As described in Section 13, we may use aggregated data derived from your energy usage to participate in wholesale electricity, flexibility, and Virtual Power Plant (VPP) trading activities, and to validate performance in those markets.
• Support Your Use of the Service: Understanding your preferences, energy consumption, online status, and device specifications allows us to provide tailored support for a seamless charging experience.
• Answer Your Questions and Improve Our Platform and AI Features: We use your Conversation and Support Data to respond to you, to diagnose and fix issues, and to review and improve the quality of our platform, our support, and our AI features, including the accuracy and helpfulness of AI-generated responses. This review may be carried out by trained ev.energy personnel as well as by automated tools. Wherever this work does not require information that identifies you, we use aggregated or de-identified data instead. We do not permit third-party AI providers to use your conversations to train or improve their own models. Our AI features are designed to assist you and our team; they are not used to make decisions that have a legal or similarly significant effect on you without human involvement.
• Collaborate with Energy Companies/Utilities, Regulators, System Operators, Energy Traders, Energy Retailers, and Distribution System Operators (DSOs): We may share necessary data with your energy company or DSOs, or related parties like energy traders or system operators to optimize your charging schedule according to grid capacity and pricing.
• Provide Enhanced Services and Rewards: In partnership with third parties, we may offer additional services or rewards, such as discounted energy rates, loyalty programs, or carbon offset opportunities, depending on your location and participation.
• Claim Carbon Credits: We may use your data for the purpose of claiming carbon credits related to the environmentally friendly aspects of your charging behavior. This may involve aggregating data to support carbon offset initiatives.
• Contacting You: We will let you know about demand response events which is where utilities or grid operators encourage customers to reduce or shift their electricity consumption during specific times to balance supply and demand, network outages and if you have asked us to, we will send general marketing information to you. The communication methods for this can be email, in-app messaging or SMS. You can stop receiving marketing communications at any time by using the unsubscribe link in the relevant email, replying STOP to a marketing text, adjusting your notification settings in the app, or contacting us. This does not affect service messages, such as those about demand response events or network outages, which are not marketing.

Before using the Service, ev.energy will seek your consent, where required, in compliance with applicable privacy laws. We are committed to collecting only the minimum necessary data to provide and support the Service.

We will only share your personal data with third parties when necessary to provide the Service, or when you have given explicit consent. In all cases, we will clearly explain the purpose of sharing your data, identify the third party involved, and inform you of how your data will be used. For a detailed list of the third parties with whom we share your data, and the specific purposes for sharing, please refer to Section 4.

4. Sharing Your Information

We may share your personal data with third parties to provide and improve our Service, comply with legal obligations, and deliver enhanced services. Below is how and when we share your data, with specific references to applicable laws depending on your jurisdiction:

4.1 Sharing Your Data to Deliver and Improve Our Service

To provide you with the Service, ev.energy works with selected third-party providers (sub-processors) who may need access to certain data. These providers are bound by strict confidentiality obligations and may only use your data as necessary to deliver the Service to you.

Where it is necessary to operate your vehicle, charger, or battery - for example, to send charging or discharging commands (including for bidirectional or vehicle-to-everything (V2X) programs), or to obtain your vehicle's or battery's state of charge - we share the necessary data with your EV, charger, or battery manufacturer as part of delivering the Service to you. Where such sharing is not necessary to deliver the Service, we will ask for your permission first.

4.2 Sharing Your Data to Support You as a Customer

If you require support, we may share your data with suppliers and subcontractors to resolve your issue. This data may include Identity and Contact Data, Technical Data, Conversation and Support Data and Hardware Data. We will only share data necessary for providing support.

4.3 Sharing Your Data to Provide Enhanced Services and Rewards

We may offer you rewards or enhanced services in partnership with third-party providers. For example, our smart charging rewards program may involve collaboration with energy networks and service companies to support the grid.

To verify eligibility, we may share Energy Data and/or Contact Data (such as your postcode, meter ID, and energy usage) with third-party providers, including:

• Electricity network companies
• Electricity market operators
• Energy service providers
• Carbon credit brokers for managing and claiming carbon credits.

You can opt-out of these services at any time by contacting our customer support team.

4.4 Sharing Your Personal Data with Your Energy Company or DSO

To optimize your charging experience, we may share your data with your energy company or Distribution System Operator (DSO), in line with your contractual relationship with them. Where you are a Program Participant, we share and process this data as a processor acting on behalf of your utility, retailer, or program partner, for the purposes of operating the program you have joined.

4.5 Sharing Your Data for Legal Reasons

While we typically share your data only with consent, we may be legally compelled to share it in certain circumstances, such as complying with court orders or responding to law enforcement requests. In jurisdictions like the EU, where GDPR applies, we will ensure that data sharing is necessary, proportionate, and lawful.

4.6 Sharing Your Data for Other Reasons

We may share anonymised data with third parties, including energy companies and DSOs, to help improve the service. Anonymised data will not include identifiable information about you and may include location data that is aggregated to ensure privacy.

If you consent, we may share your enquiry data with third-party suppliers to offer you products or services you may find of interest. These third-party suppliers will contact you directly based on your inquiry. This is a form of marketing, and you can withdraw your consent at any time as described in Section 3. We may also engage third-party companies to improve the Service. These companies will be contractually bound to protect your data and will only process it on our behalf, in accordance with applicable data protection laws.

4.7 Who Are These Third Parties?

Appendix A sets out the third parties we work with to build our software, maintain our software and provide the Services to you.

Appendix B sets out the utility companies and partners we work with who may need to access some of your data to help them monitor their energy management programs and/or hardware or software performance.

4.8 International Data Transfers

By using our Service, you consent to the transfer of your data to jurisdictions outside your own country, including to the United States or other countries that may not have data protection laws equivalent to those in your jurisdiction. Where necessary, we will ensure appropriate safeguards, such as Standard Contractual Clauses, are in place to protect your personal data.

5. User Rights and Choices

We will retain your data no longer than required, in accordance with applicable data protection laws.

Deletion

We will retain data related to your continued usage of our services and programs for as long as you remain a customer and for a period following cessation of use of the ev.energy service, unless you exercise your ‘right to erasure’ and we have no overriding legal obligations to retain your personal data.

You can initiate account deletion (i.e., exercising your right to erasure) through our app by going to ‘Settings’ -> ‘Account’ and selecting ‘Close my account.’ Please note that when you delete your account, your personal data is not fully erased but is anonymized. Anonymization allows us to retain the data for specific legitimate purposes, while removing any personal identifiers to ensure that it can no longer be linked to you.

We Anonymize Your Data

When you request deletion, we remove all personally identifiable information linked to you, your charger, or your vehicle. However, rather than destroying this data entirely, we anonymize it. Anonymization enables us to use your data in important ways, ensuring privacy is maintained, including:

• Utility Company Audits: We may be required to retain anonymized data for utility company audits, ensuring compliance with regulatory requirements and infrastructure development.
• Climate Impact: We assess and track our impact on climate goals using anonymized data, helping us improve our services and contribute to sustainability.
• Research and Development: Anonymized data may be used for R&D purposes to optimize charging patterns, improve products, and enhance user experience.
• Regulatory Compliance and Reporting: We may need to retain anonymized data for regulatory reporting, ensuring transparency and accountability to regulatory bodies.
• Partnerships and Collaborations: We may share anonymized data with research institutions, government agencies, or industry partners, provided it is used in ways that ensure privacy and does not link back to individuals.
• Business Intelligence and Analytics: Anonymized data helps us gain insights into energy usage, system performance, and user behavior, driving improvements and growth.
• Third-Party Audits and Verification: Anonymized data may be provided to third-party auditors or organizations to verify compliance with industry standards or certifications.

Retention Period and Legal Compliance

Occasionally, we will review and consider deleting data that is no longer necessary. However, there may be cases where we cannot delete certain personal data, such as when required by law for example, for participation in Flexible Grid Services projects or for regulatory compliance. The longest period that ev.energy will retain your personally identifiable information is seven (7) years from the date you last used our service to ensure compliance with applicable legal obligations. Retention periods may vary depending on jurisdictional legal requirements.

Right to Access

You have the right to request access to the personal data we hold about you. This right is specifically intended to allow you to verify that your personal data is being processed in accordance with applicable data protection laws and is accurate. To exercise this right, please submit your request using the contact details provided below, including a clear explanation of why you are making the request (e.g., for the purposes of ensuring that the data is being processed correctly). We will process your request within 30 days of receiving it, although this may be extended by an additional two months if the request is particularly complex. If an extension is necessary, we will inform you within the initial 30-day period and provide an explanation for the delay. We reserve the right to refuse or limit access requests that are unreasonable, excessive, or made for frivolous purposes. This includes requests that do not align with the intended purpose of verifying data processing. In these cases, we will explain why the request cannot be fulfilled. Additionally, access may be restricted if providing it could compromise the rights of other individuals or if there are legal reasons for withholding it.

Correction

You have the right to request the correction of any personal data we hold about you that is inaccurate, incomplete, or outdated. If you believe that any information we have about you is incorrect or requires updating, please contact us using the details provided below. We will take reasonable steps to verify your identity before making any corrections and will ensure that the data is amended promptly, in accordance with applicable data protection laws.

In some cases, we may request additional information or documentation to validate your request. If we are unable to correct your data, we will provide you with an explanation for the decision. You may also request that we restrict the processing of inaccurate data until the issue is resolved.

Right to Restrict Processing

If you are a resident of the UK, EU, or any region where similar data protection laws apply, you have the right to request that we restrict the processing of your personal data under certain circumstances. These include:

• Contesting the accuracy of your data.
• Objecting to processing based on legitimate interests.
• Requiring data for legal claims.
• Preferring restriction over deletion in cases of unlawful processing.

For residents of other regions, please consult local data protection laws for equivalent rights or contact us for specific inquiries.

Right to Complain

If you are unhappy with how we have handled your personal data, please contact our DPO in the first instance using the details in Section 15, so that we have the opportunity to resolve your concern directly. If you are in the UK, you are required to raise your complaint with us before the regulator will consider it. If you remain unsatisfied with our response, you can complain to the ICO (or its successor body, the Information Commission) at ico.org.uk, to the relevant supervisory authority if you are in the EU or EEA, or to the equivalent regulator in your jurisdiction.

6. Data Security

At ev.energy, we prioritize the protection of your personal data and are committed to ensuring its confidentiality, integrity, and availability. We implement robust technical and organizational measures to safeguard your information and prevent unauthorized access, loss, or misuse.

Data Storage Locations

EU Storage: The primary data storage for all user data is located within the European Union (EU), ensuring compliance with the General Data Protection Regulation (GDPR). Our data is stored in Ireland.

US Storage: We have a data storage facility located in Ohio, US.

Our data is hosted where it provides the most secure, environmentally friendly, and perfomant experience for our users.

Strict access controls are applied to ensure that only authorized personnel and third-party service providers (as detailed in Appendix A) can access your data.

Data Encryption

• At Rest: All personal, confidential, and financial data stored in our systems is encrypted using industry-standard methods.
• In Transit: We ensure all data exchanged between your device and our platform is transmitted securely via HTTPS and WSS protocols.

For third-party services (listed in Appendix A), we mandate encryption of sensitive data, including passwords and payment information.

Access Control

Access to your personal data is strictly limited to authorized employees and service providers who need the information to perform their duties. We enforce robust access controls and conduct regular audits to ensure compliance. All access to the ev.energy platform is logged for accountability and traceability.

SOC 2 Compliance

ev.energy undergoes an annual independent SOC 2 Type II examination of our security, availability, and confidentiality controls, conducted by an independent third-party auditor. Our most recent report covers the period 1 May 2025 to 28 February 2026. SOC 2 is an examination and opinion, not a certification, and the report, including any exceptions identified and our remediation of them, is available to eligible customers and partners on request, subject to a non-disclosure agreement.

International Data Transfers

Where it is necessary to transfer your data across borders, we will comply fully with all relevant data protection laws such as the GDPR and US data protection frameworks. For transfers outside the EU or US, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework (DPF), are in place to protect your data. Privacy Shield, which the DPF replaced in 2023, is no longer a valid transfer mechanism and is not relied on by ev.energy.

Data Breach Notification

In the event of a data breach that affects your personal data, we will notify you promptly in accordance with applicable laws, including GDPR and CCPA (California Consumer Privacy Act). We will provide information regarding the nature of the breach, the data affected, and the actions we are taking to mitigate risks.

User Responsibility

While we take every reasonable measure to protect your personal data, we also encourage you to protect your account by using a strong, unique password and keeping it confidential. You are responsible for ensuring the confidentiality of your login credentials. We will never ask you to share your password or sensitive information, such as bank account details, through unverified channels.

If you suspect any unauthorized access to your account, please contact us immediately.

Limitations of Internet Security

While we employ advanced security measures to protect your data, please understand that no method of data transmission or storage is completely secure. By using our services, you acknowledge the inherent risks associated with transmitting data over the internet, and we cannot guarantee the absolute security of data transmitted to and from our platform.

7. Children's Privacy

These Services are not intended for individuals under the age of 18. We do not knowingly collect, nor target, personally identifiable information from children under 18. If we become aware that a child under the age of 18 has provided us with personal information, we will promptly delete it from our systems. If you are a parent or guardian and believe that your child has shared personal information with us, please contact us so we can take appropriate action. Children's privacy obligations vary by jurisdiction and, within the United States, by state, and continue to evolve. Some US states impose additional design and default-privacy obligations on services that are reasonably likely to be accessed by minors under 18, regardless of whether the service is intended for them, while federal law and other states apply a lower age threshold of 13. Because we do not knowingly permit anyone under the age of 18 to hold an active account, our practice already exceeds the baseline age threshold used in most of these laws, and we keep our practices under review as this area of law develops.

8. Third-party websites and links to other sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. We do not operate these external sites and we therefore strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Representation for data subjects in the EU

We value your privacy and your rights as a data subject and have appointed Prighter as our privacy representative and your point of contact if you are based outside of the UK. Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/14389734305

10. Employee and Job Applicants’ Privacy

Employee Data Privacy

If you are an employee or contractor of ev.energy, please refer to our separate Employee Data Privacy Policy, which provides detailed information about how we process and protect your personal information in the employment context.

Job Applicants

Information we collect about you

In order to process your application, we ask you to provide certain personal data, also referred to as personally identifiable information (PII). The legal basis for processing your PII is by consent and therefore providing it is voluntary, however, some are required for us to properly consider your application. If you were not successful in your application, we will keep a copy of it for a period of 6 months from the closing date of the role you have applied for.

We may collect, store, and use the following categories of information about you during the application phase:

• Personally Identifiable Information: We collect your personal contact details such as name, address, email address and telephone number. We also collect contact information for your references during the onboarding process; it is your responsibility to obtain consent from your references before providing their personal information to the ev.energy.
• Sensitive Data: We ask you not to disclose any sensitive personal data during the application phase as we do not feel this required.
• Internet or Other Electronic Network Activity Information: Our website uses cookies, which you can read more in our Cookie Declaration.

Application subprocessors

We use third party service providers to assist with our application procedure and only share data where appropriate measures are in place to protect the security of your data. This list isn’t designed to be exhaustive, but is indicative of the types of services we engage to assist us in hiring new talent:

• Application Management Systems: Ashby

11. Third-party Integration Responsibility

There may be occasions when a third-party, who has not agreed to our terms of use or Privacy Policy, interacts with our service. This could occur through an integrated vehicle, charger, or other devices that connect to our platform. In these cases, it is the responsibility of the account holder to ensure that any third parties are made aware of the integration prior to interacting with our service. It is also important that account holders inform third parties about the potential data collection and sharing that may occur as part of these integrations. While we provide privacy protections for data processed through our platform, we are not responsible for third parties who have not agreed to our terms or Privacy Policy, nor can we control how they handle personal data. By ensuring that third parties are properly informed, the account holder helps ensure that they understand the privacy implications and can take the necessary steps to manage consent and data sharing in line with applicable data protection laws.

12. User Research

At ev.energy, user feedback is a crucial part of our mission to drive meaningful change in the fight against climate change. By participating in our research and surveys, you play an essential role in shaping the future of green technology solutions. Your insights help us improve our platform and services, ensuring we deliver smarter, greener, and more cost-effective electric vehicle charging solutions.

We regularly engage in user research to guide the development of our platform. The data we collect will only be used for research purposes.

We record user interviews to enable thorough post-reviews, and these recordings will be deleted once they are no longer relevant, or after a period of three years, whichever comes first. If we transcribe your interview, we will retain the transcription for up to three years, at which point it will be anonymized to remove any personally identifiable information. Throughout this process, we ensure that all research materials are securely stored and handled with the utmost care.

Your involvement directly contributes to our efforts to reduce carbon emissions and create a cleaner, more sustainable future for all.

13. Participation in Energy Markets

From time to time, ev.energy may participate in energy and flexibility markets (such as wholesale electricity trading) to support grid services and deliver value to our users. To enable this, we may access aggregated half-hourly consumption data known as Supplier Volume Allocation (SVA) data, which is derived from smart meter readings. We take part in these markets together with a partner who's licensed to trade on our behalf. Usually, the aggregated data described above is all that's needed. But sometimes that's not enough to prove how much flexibility you actually provided, for example, whether your vehicle, battery, or charger was charging, discharging, or available at a given time. In those cases, we may share that more specific data with our route-to-market partner too.

This data is:

• Aggregated by electricity supplier and grid supply point area, and anonymised so it does not directly identify you, where SVA data is used; where identifiable data about your vehicle, battery, or charger is shared for settlement purposes as described above, it is not anonymised;
• Used to validate performance in market participation and to attribute the value of specific flexibility actions;
• May be shared with our route-to-market partner for wholesale and balancing markets, and with the relevant market operators (such as the market settlement body) as required for participation in these markets.

This data continues to belong to ev.energy. Our route-to-market partner may only use it to the extent strictly necessary to provide these market access and trading services, and its right to do so ends automatically when our arrangement with them ends.

14. Responsible AI Principles

At ev.energy, we recognize the growing role of Artificial Intelligence (AI) in delivering innovative and efficient services to our users. We are committed to the responsible development and deployment of AI systems in a manner that respects individuals' rights and aligns with our core values.

We have adopted the following Responsible AI Principles, which guide our approach to AI across all systems and use cases:

• Accountable - We maintain robust governance over our AI systems, including clear lines of responsibility, continuous monitoring, and oversight. We also expect our partners and suppliers to uphold similar standards of accountability in the AI technologies they provide.
• Safe and Secure - We take appropriate measures to safeguard our AI systems from unintended use, unauthorized access, and potential harm to individuals or systems.
• Valid and Reliable - We strive to ensure our AI technologies deliver accurate, consistent, and dependable outcomes, with appropriate controls to minimize errors and disruptions.
• Fair and Equitable - We are committed to designing and implementing AI that treats individuals fairly, actively identifying and addressing algorithmic bias wherever feasible.
• Privacy and Intellectual Property - We protect personal data in accordance with applicable privacy laws and principles of individual autonomy, while respecting intellectual property rights and data ownership of both ev.energy and third parties.
• Transparent and Explainable - We promote transparency in how our AI systems are designed and used, and aim to make AI-driven decisions understandable to affected individuals when appropriate.
• Sustainable - We are mindful of the environmental and social impacts of our technologies and aim to use AI in a way that contributes to a more sustainable future.

We expect our suppliers and partners to align with these principles when providing AI-based technologies or services to ev.energy.

15. Change Log

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes to the way we collect, use, or share your personal data, we will notify you by posting a notice on our website or sending you an email, as appropriate. Please review the policy periodically to stay informed about how we protect your data. The effective date of the most recent update will always be noted at the top of the Privacy Policy.

16. Contact us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact our DPO by email: privacy@ev.energy. You can write to our DPO at the address listed on our ICO registration marked for the attention of “ev.energy DPO”. If you are within the EU, you can also contact us via our representative Prighter here: https://prighter.com/q/14389734305.

Appendix A — Subprocessors

Sub-processors under GDPR definition:

Appendix B — Partners and customer organisations

Energy suppliers and utility partners

Companies across Australia, the Netherlands, the USA (multiple states), the Republic of Ireland, Germany, the UK, Portugal, Canada, Austria, and France — including AGL Energy, ANWB, Alabama Power, Avangrid, Avista, Clean Power Alliance, Con Edison, Duke Energy, ESB Ireland, E.ON UK, Hawaiian Electric, National Grid, PG&E, Southern Company, and others.

Distribution system operators and network partners

UK-focused: National Grid, Scottish and Southern Electricity Networks, SP Energy Networks, UK Power Networks, Western Power Distribution, Electricity North West, Northern Power Grid, Flexitricity, Piclo, NODES, ELEXON, UKPN, Lightspeed.

International: AusNet (Australia), MP2 Energy and Leap Energy (USA Texas), NIEN (Northern Ireland), Electricity Supply Board (Ireland).

CPO, solar and charger partners

WaEV-charge, Wallbox, Rolec, Brixcell, Indra, Luceco, SyncEV, Maxeon, Schneider, Osprey.

Government agencies and credit partners

BEIS IDSR (UK), California Energy Commission, Innovate UK, Connecticut Green Bank.

OEMs

Tesla (USA California), Volkswagen (Germany), Skoda (Germany), Porsche (Germany), Jeep (USA Ohio), Scania (Sweden).