Privacy Policy

Welcome to Chargefull Ltd (“Chargefull”). This Privacy Policy is designed to inform you about our practices regarding the collection, use and disclosure of personal information we receive from users of our website and App. At Chargefull, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.

As part of our operations, we provide mobile power bank rental services for Android and iOS devices that you can access exclusively through our App. Payments for these services are facilitated solely through the App using Zettle by PayPal, ensuring a secure and streamlined transaction process.

Please read this document carefully to understand our policies and practices regarding your information and how we will treat it. By using or accessing our services, you agree to the collection, use, and sharing of your information in accordance with this policy. If you do not agree with this you must not use our services.

If you have any questions regarding this policy, please contact us at customersupport@chargefull.co.uk.

Types of Data Collected

The personal data we collect, use, and store depends on the service you register for and/or the nature of your interaction with our Website and App. Such data may include

Personal Identification Information

- Full name, phone number(s), email address
- Credit/debit card details for processing payments
- Location data, including the location, date, and time a power bank is rented and returned
- Login and account information, such as mobile number and unique user ID

Device and Technical Information

- Device type, unique device identifier (e.g., IMEI number, MAC address)
- Mobile network information, mobile operating system, mobile browser type
- IP address, time zone setting

Usage and Profile Data

- Your communication and marketing preferences
- Interests, preferences, feedback, survey responses
- Other personal data submitted to us, such as during registration for email alerts or correspondence

Publicly Available Data

- Publicly available personal data that you have shared via public platforms (e.g., social media feeds)

Methods of Data Collection

We collect this information through:

Direct interactions with you (e.g., account creation, service use, correspondence)
Automated technologies (e.g., cookies, analytics)
Third parties or publicly available sources (as permitted by law)

Children

Our services, including our website and App, are not intended for children under the age of 16 who are not permitted to register for our services. We do not knowingly collect personal data from children under this age. Minors aged between 16 to 18 must seek parental permission before providing any personal information to us. Parents who are concerned about their children's privacy can contact us about any personal information provided by their child.

Sensitive Personal Data

We do not collect any sensitive personal data about you, which includes details about your race, ethnicity, religious beliefs, sexual orientation, political opinions, health, genetic, or biometric data, nor do we collect information about criminal convictions and offences

Use of Data

Your personal data may be processed based on more than one lawful ground. We do not use automated decision-making processes, including profiling, in handling your personal data.

We process your personal data to provide, optimise, and secure our services, as follows:

Service Provision and Account Management

- Purpose: We utilise your information to execute and manage the agreements you enter into with us. This includes facilitating power bank rentals, handling payments, and administering your account. Essential communications about the effective use of our service and App updates may also be sent to you.
- Legal Basis: Performance of a contract with you.

Location Optimisation

- Purpose: To enhance the efficiency of our service, we track the locations where power banks are picked up and returned. This helps in directing you to the nearest available units and ensures optimal placement of our resources.
- Legal Basis: Performance of a contract; necessary for our legitimate interests in managing our assets efficiently.

Customer Relationship Management

- Purpose: To update you on changes to our service terms, privacy policy, and to gather your input through reviews and surveys, which help improve our offerings.
- Legal Basis: Performance of a contract; compliance with legal obligations; necessary for our legitimate interests in enhancing service quality.

Enhancement of Services

- Purpose: We analyse usage patterns to improve our platform's responsiveness and to personalise the user experience, ensuring that our service meets your needs and preferences.
- Legal Basis: Necessary for our legitimate interests in optimising our service delivery and in in improving and expanding our business.

Support Services

- Purpose: When you reach out for support, we use your information to address your needs effectively, ensuring that any issues are promptly resolved.
- Legal Basis: Necessary for our legitimate interests in providing responsive customer support and maintaining user satisfaction.

Historical Record Keeping

- Purpose: We maintain records of your transactions and interactions with us, in order to provide tailored services and resolve any enquiries or disputes.
- Legal Basis: Necessary for our legitimate interests in maintaining accurate and detailed customer records.

Security Measures

- Purpose: To safeguard our services from fraud and unauthorised access, we may verify identities and monitor transactions for irregularities.
- Legal Basis: Compliance with legal obligations; necessary for our legitimate interests in protecting our operations and customers.

Data Storage and Security

Data Storage

We store all collected data on secure servers provided by leading cloud service providers, including Amazon Web Services (AWS). In this way we ensure high protective standards of data integrity and accessibility. Additionally, our services are delivered via secure 4G networks of reputable providers such as Vodafone. This allows for secure and reliable data transmission between devices and our servers.

Security Measures

Our commitment to data security is paramount. We employ a range of industry-standard security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

Encryption: All data sent to and from our service is encrypted in transit using Secure Socket Layer (SSL)/Transport Layer Security (TLS) technology

Access Controls: We implement strict access controls, ensuring that only authorised personnel have access to your personal data. Our staff are trained on the importance of maintaining the confidentiality and security of your information

Regular Audits and Updates: Our systems are regularly audited and updated to adhere to the latest cybersecurity protocols and best practices, ensuring that we are equipped to defend against emerging threats

Third-Party Service Providers

We utilise third-party service providers to enhance the efficiency and security of our data storage and processing. These providers are carefully selected and reviewed to ensure they meet our high standards for data protection. We have contracts in place that require them to keep your personal data secure and not use it for their own purposes.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this policy and applicable data protection laws. The DPO is also responsible for addressing any enquiries related to our data security practices and can be contacted at dpo@chargefull.co.uk

Incident Response

In the unlikely event of a data breach, we have a robust incident response plan designed to promptly address security breaches to mitigate any potential impact on your data and our services.

Data Sharing and Disclosure

We are committed to protecting the your privacy. However, there may be circumstances under which we may need to share your personal data with third parties. Below are the conditions under which such sharing might occur:

Compliance with Laws

We may disclose your data where required by law or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service

Service Provision

To facilitate our Service, we may share your data with third-party providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service and marketing assistance.

Business Transfers

If we are involved in a merger, acquisition or asset sale, your personal data may be transferred. We will provide you with notice before your personal data is transferred and becomes subject to a different privacy policy

Protection of Rights

We may share personal information if we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person or as evidence in litigation in which we are involved.

Third Parties with Whom Data May Be Shared:

Cloud Storage Providers: We use third-party cloud storage providers such as Amazon Web Services (AWS) to store and manage our data securely
Analytics Providers: We partner with third-party analytics providers who help us understand the usage of our service, such as Google Analytics
Payment Processors: Our service integrates third-party payment processors like Zettle by PayPal to facilitate secure transaction processing
Marketing and Communication Service Providers: We work with marketing platforms that assist us in managing email campaigns or other marketing initiatives

Safeguards

All third-party service providers with whom we share your data are obliged to provide a level of data protection that is at least comparable to ours. We ensure this through contractual agreements that prioritise confidentiality and data security provisions.

Transparency and Control

We aim to maintain transparency about the data we collect and the purposes for which we use it. It is not our policy share your personal information with third parties for marketing purposes.

User Rights

We recognise and support the following rights regarding your personal data under applicable data protection laws:

Right to Access

You have the right to request access to the personal information we hold about you. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it

Right to Correction

You have the right to ask us to correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the ‘right to be forgotten’

Right to Restrict Processing

You have the right to request that we restrict or suspend the processing of your personal data, under certain conditions. This means you can request us to suspend the processing of your personal data

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, especially if you feel the processing impacts on your fundamental rights and freedoms

Right to Data Portability

You have the right to request under certain conditions that we transfer the data that we have collected to another organisation, or directly to you

Right to Withdraw Consent

Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

How to Exercise Your Rights

To exercise any of these rights, please contact us at [insert contact details]. We will respond to your request in accordance with applicable data protection laws. Typically, there is no charge for such requests, however, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request under certain circumstances.

We will need specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed inappropriately

International Data Transfers

We operate globally, which means personal data we collect may be processed and stored in a country other than where you reside. We may transfer data to our cloud service providers or other third parties across international borders. Here are the key aspects of our approach to international data transfers:

Transfer Mechanisms

Data transfers to countries outside of the European Economic Area (EEA) are conducted through secured means, ensuring that the recipient country ensures an adequate level of data protection, as determined by the European Commission, or through specific agreements using standard contractual clauses approved by the European Commission which give personal data the same protection it has in Europe

Safeguards

We implement strong contractual protections, data transfer agreements and additional security measures to ensure that your data receives an adequate level of protection irrespective of the location to which it is transferred. This includes adhering to the EU-U.S. Privacy Shield Framework, ensuring that any U.S. based third parties involved in data handling comply with this framework, thus providing a mechanism to obtain redress in the case of a dispute

Compliance with Local Laws

Prior to any data transfer, we assess the legal and privacy risks associated with such transfers. We ensure compliance with local laws and regulations and apply stringent data protection and privacy controls that meet or exceed those local requirements

Your Rights Regarding International Transfers

You have the right to be informed of any international transfer of your data, the recipients and the specific safeguards in place. Should you wish to obtain more information or have any concerns about international data transfers, please contact our Data Protection Officer dpo@chargefull.co.uk

Cookies and Similar Technologies

We are committed to protecting your privacy. This Privacy Policy explains how we use cookies and similar technologies on our website, how we process data collected through these technologies, and your rights regarding such data.

1. What Are Cookies and Why We Use Them

Cookies are small text files of letters and numbers stored on your device when you visit a website. Whenever you visit the same website again, the information stored in the cookie can be retrieved to notify the website of your previous activity. Cookies help us:

Facilitate website navigation
Maintain the quality of online services
Provide additional security
Customise your access to the website
Remember you when you return

A cookie cannot give us access to your computer or to information beyond what you provide. We don’t store personally identifiable information such as your name or address in cookies we create. However, we use encrypted information gathered from them to help improve your experience on the website. If you don’t wish to enable cookies, you will still be able to browse the website and use it for research purposes.

2. Types of Data Collected

Cookies may collect the following types of data:

IP address and device information
Browser type and version
Referring website URL
Pages viewed and time spent on the site
Preferences and settings

We ensure that any data collected through cookies is anonymised and does not identify you personally unless you voluntarily provide personal information.

3. How We Use Data Collected from Cookies

Data collected from cookies helps us:

Maintain website security and functionality
Analyse usage patterns to enhance website performance
Deliver relevant content and advertising based on browsing behaviour
Personalise user experience according to preferences

4. Third-Party Cookies

When you visit our website, you may notice some cookies that are not related to us. For example, embedded content (such as videos or social media links) may send you cookies from third-party websites. We have no control over these cookies and recommend you check the respective third-party websites for more information about their cookie policies and how to manage them.

5. Managing and Controlling Cookies

You can manage or delete cookies at any time through your browser settings. Most browsers allow you to:

Delete all cookies
Block third-party cookies
Block all cookies from specific websites
Receive alerts when cookies are being used

For detailed instructions, refer to:

Security of Your Data

We implement robust security measures and use our best endeavours to protect your data against unauthorised access, alteration, disclosure or destruction. However, no internet-based site can be 100% secure, so we cannot guarantee absolute security.

Links to Other Sites

Our services, including our website and App may contain links to external websites that are not operated by us. These links are provided for your convenience and to provide further information. As we have no control over the content or privacy practices of these sites we do not accept responsibility or liability in this regard.

Your Interaction with Other Sites

When you click on a link to an external site, you are leaving our service and are subject to that site’s privacy policies and terms & conditions, which may be different to ours, and we strongly advise you to review these before sharing any personal information or engaging in any transactions

External Site Content

The inclusion of any links does not necessarily imply a recommendation nor that we endorse any views expressed within them. Each site has its own privacy policy, which may differ from ours, and we encourage you to review these policies when visiting external sites

Changes to This Privacy Policy

Chargefull reserves the right to update or change our Privacy Policy at any time. Changes to this Privacy Policy are effective when they are posted on this page. We will notify you of any changes by posting the new Privacy Policy on our site. We may also choose to notify you via email or a prominent notice on our service, depending on the significance of the changes.

We encourage you to periodically review this Privacy Policy. Your continued use of our services after any amendment will constitute your acknowledgment and acceptance of the modifications to the Privacy Policy.

Contact Information

If you have any questions about our Privacy Policy or the practices of this site, or if you need to enquire about or manage the personal information we hold about you, please contact us in initially at: customerservices@chargefull.co.uk