Privacy Policy
Version 2026-3, effective 2026-10-30.
We are Volt Time B.V., also trading as Plugchoice (KvK 77488873, De Entree 99, 1101 HE Amsterdam, the Netherlands, support@plugchoice.com), the controller for the processing in this policy: on the Plugchoice platform, apps, portal, API and websites, including partner-branded versions, and in our sales to businesses. Where we process data only for another company's own purposes, such as your employer's reimbursement, that company is the controller and its privacy notice applies.
1. What we collect
| Data | What | Source |
|---|---|---|
| Account | Name, email, phone number, language, teams | You, whoever invites you, or another company's app through Link |
| Location | Address and setup, such as fuse size and meter | You, your installer or the location's manager, or an app through Link |
| Charger and session | Identity, make, model, status, OCPP logs, meter values, sessions, energy, faults, firmware | Your charger, or your charger brand's account through Link |
| Meter | Readings, identifiers, status and the address its supplier links to it | The meter or its supplier |
| Energy profile | Solar panels, home battery and whether you want them, energy contract type, supplier and prices, and what we derive about these, such as a likely dynamic contract | You, in the app; our analysis of it and, with your consent, of your charging and meter data |
| Charge card | Identifiers of cards used at a connected charger, also of people without an account | The charger |
| Connectivity | For a charger on our SIM, network data showing its approximate location | Our SIM provider |
| Payment | Payment status and invoices, never full card numbers | Our payment provider |
| Support | Your chats and emails with us | You |
| App and device | Device type, operating system, app version, notification token, crash reports and, with your consent, your advertising identifier | Your device |
| Use of the app and portal | Actions, settings and screens you view, with their time, app version and platform | Our servers, from what you do in the app and portal; your device, with your consent |
| Offers | Which offers we showed you, when, and what you did with them | App, portal, our emails |
| Website | Pages visited and how, the company behind a visit from its IP address, and chat messages, as our Cookie Policy sets out | Your browser and our website tools |
| Business contact | Name, job title, business email and phone number, company, visits to our websites | Public sources and data providers, such as Apollo.io |
We need account and charger data to provide the platform, and other data only for the function that uses it. Tax law requires invoicing data. Our Data Act information is at plugchoice.com/legal/data-act.
2. Why and on what legal basis
We may process personal data for the purposes below, on the legal basis next to each.
| Purpose | Legal basis |
|---|---|
| Operating the platform, your account and your chargers, including smart charging from your meter and energy profile, and showing your use, costs and savings | Contract; for a charger someone else manages, our and their legitimate interest |
| Sharing what a function you switch on needs with another company, such as an energy credit company, a meter supplier, a roaming platform or a payment provider, and passing its steering to your charger within a programme you chose there | Contract (your instruction); for a charger someone else manages, as above |
| Making charger data available under the EU Data Act to a company chosen by you, or by the charger's owner or another user | Legal obligation; personal data of someone other than the person who asks, only where the GDPR allows it |
| Billing, payouts and invoices | Contract; legal obligation |
| Giving people and companies access to a location and its chargers as the account holder decides, and to the installer or service company that transferred a charger to its account holder, for managing and servicing it (section 4) | Contract, including the account holder's choice to keep a party's access when accepting a transfer. Where a transfer has no acceptance step, our and that party's legitimate interest in keeping the charger working and safe. For a charger brand that works with us and for a charger someone else manages, our and their legitimate interest in the same. |
| Handling a claim to move a charger to its owner or occupant, including the evidence and what the new account holder sees under section 4 | Our and the owner's legitimate interest in handling the claim and protecting the owner's rights |
| Support, including answers from an AI assistant, and signing in to your account or accessing your setup when you ask us for help or to keep the platform secure | Contract; legitimate interest in a secure platform |
| Security, preventing abuse, logging | Legitimate interest |
| Recording actions, settings and views in the app and portal, also of business users and partners, for support, solving problems, improving the platform and asking for feedback at a good moment | Legitimate interest in helping you and improving the platform; what we store on or read from your device for this and do not strictly need, only with your consent |
| Asking for a review after a purchase or a support conversation, by email or in the app, also through a review platform that sends the invitation for us and is controller of any review you write there | Legitimate interest in an honest public rating; by email as for our own offers by email and, where the law of your country requires it, only with your consent. |
| Statistics, research, developing our products and data services for others, including AI models | Legitimate interest, only with anonymized data, which we may use for any purpose |
| Load profiles, forecasts and other data per charger or location | Contract, for the functions you use; legitimate interest, to improve them. Shared only at your request, with your consent or anonymized. |
| Our own offers, of Plugchoice and Volt Time, in the app and portal, chosen and timed from your account, chargers, modules, location and energy profile | Legitimate interest in selling our products |
| Our own offers by email | Your consent or, if we got your email address when you signed up or bought from us, our legitimate interest in offering similar products of our own, unless you refused |
| Offers by push message, and offers chosen from your charging and meter data ("Tailored offers") | Your consent |
| Offers of other companies, such as energy suppliers, solar or battery installers and car lease companies | In the app, the same for everyone in your country: legitimate interest; tailored, by email or by push: your consent. They only learn how many people saw or used their offer, unless you request it; we then pass on the data shown with your request. |
| Our ads on other websites and apps, also to people like you, through Meta, Google or LinkedIn, using a cookie, a hashed email address or your advertising identifier | Your consent (cookie banner, app consent screen, Apple's tracking prompt) |
| Website analytics and company recognition | Your consent |
| Finding and contacting businesses and their staff for our sales | Legitimate interest |
| Recording, transcribing and summarizing our meetings, video calls and phone calls, also on mobile phones, and keeping emails, as a record, for quality and as evidence, where the law allows | Legitimate interest |
We take no decision about you based solely on automated processing with legal or similarly significant effects (article 22 GDPR), except where our contract with you needs it, such as automatically pausing, limiting or ending a service, SIM or charge card on a security risk, misuse, missing payment or an ended budget. Choosing which offers we show you, and when, is profiling but not such a decision.
3. Companies you connect
A company that receives data under this section or section 4 is controller of its own use of it; where it and we decide together, each of us answers for its own part.
When you connect a service, such as a charging operator, a company that claims energy credits for you, a meter supplier or an app through our API or Link, we send it what you approve, on your instruction. Outside the EEA we send it under an adequacy decision or Standard Contractual Clauses or, where neither applies, because the service you asked for needs it (article 49(1)(b) GDPR). If you set up a charger through Link in another company's app, that company may give us your email address, its reference for you and the charger's address; we use access to your charger brand's account only for the setup and importing the charger's history. You see and end every connection in the platform.
4. Partners, teams and new owners
The account holder decides who has access to a location and its chargers, at three levels. Basic shows a charger's status, live values, address, configuration and operation, except starting a charging session, and its sessions and logs, with times for the last 14 days and after that only month and year, and charge card numbers and names always masked; it also includes personal data and may be used only for service. Sensitive adds starting a charging session, firmware, the charger's history, charts, charge cards and proxy settings. Full adds changing the server address, credentials, certificates or security profile in the charger, moving or removing it, its ownership and connected apps. The energy profile is visible only to members of the account holder's own team with Full access. Anyone who joins with a charger's access code, or whom someone other than the account holder invites, gets Basic access unless the account holder gives more. When a charger or location gets a new account holder, other than by a claim under our terms, every party with access keeps its access, at most Sensitive, to manage and service it, without an end date, until the account holder switches this off; when it accepts, it sees per party with Sensitive access a box to keep that access, ticked in advance, with an explanation, and if it unticks the box, that party keeps Basic access. A charger brand that works with us can have Sensitive access by default to chargers that report its brand; we rely on what the charger reports. We have access as far as needed for our service, security and the law; the platform shows this as a box that cannot be switched off, and our staff use it only where needed. Anyone with such access may use the data only for that charger or as the account holder agreed with them, never for their own marketing without your consent. The account holder can see who has access and end any access in one step, except our own access behind the box that cannot be switched off, and you can object to it (section 8). For access through such a company, you can contact us; we pass on what concerns that company. We may record when access was given and ended, log access to personal data by partners and installers for security, and remind the account holder who has access.
If someone shows us that they own a charger in your account, or rent or live where it is installed, we may move it to their account as our terms describe. Until the platform separates them, they can see the charger's earlier charging sessions, and we keep the evidence until the request and any dispute end.
5. Processors and other recipients
Our processors are on our Subprocessor List, and our website and app tools in our Cookie Policy. For collecting and passing on data through the providers our Cookie Policy marks as joint controllers, we and that provider are joint controllers; send your requests to us.
Outside the EEA we rely on an EU adequacy decision, including the EU-US Data Privacy Framework, or on Standard Contractual Clauses; email us for a copy.
We give data to authorities, courts and others where the law requires it, or allows it and we have a legitimate interest, such as reporting fraud. If our business, or the part that runs the platform, is transferred, also in a bankruptcy, your data passes to the new owner on our legitimate interest, for use as this policy describes until it tells you otherwise.
6. Charge cards of people without an account
Chargers report the identifier of every card used. We use it to authorize charging and to show the charger's owner its transactions, on our and the owner's legitimate interest; for a business that decides why, we do this as its processor.
7. How long we keep data
| Data | How long |
|---|---|
| Meter and session data more detailed than per day | While needed for the service, your history and support, then monthly totals; in an invoice, reimbursement statement or energy credit claim, as long as the law or the scheme requires |
| Invoicing data | 7 years |
| Other charger and session data | While your account and the charger's connection are active and after that as long as a claim about it can arise, at most 5 years per record, or longer where a partner arrangement requires it |
| Energy profile | While the location is in your account |
| Offer data and review invitations | While relevant for offers and reviews, at most 24 months |
| Use of the app and portal | While needed to help you and improve the platform, then only totals |
| Who had access to a location or charger, and logs of access to personal data | While the access lasts and after that as long as needed for security and questions about it, at most 24 months |
| Data given to an ad platform | Until you withdraw your consent; we then remove you from our audiences there |
| Website visit data | As set with each provider, no longer than needed |
| Business contact data | Until you object or it no longer matters for our sales |
| Recordings, transcripts and summaries of calls, and emails | While relevant for the relationship or as evidence, as long as a claim about it can arise |
| Proof that you accepted our terms, and of notices we sent you | While your account exists and after that as long as a claim about it can arise, at most 7 years |
| Your data after you delete your account | 30 days, except what the law requires us to keep and what this section lets us keep longer |
| A charger that stays connected without an account | Only what operating and securing it needs; its sessions, linked to no one, at most 90 days, so a new owner can add it |
| An account without sign-in for 24 months and without a connected charger | We may close it after an email warning |
As far as articles 17(3) and 21(1) GDPR allow, we keep data longer, also after a request to delete it, only for: settling costs, until the claims are time-barred; an energy credit claim, until the scheme's authority can no longer check or reclaim it; a specific security incident or misuse, at most 24 months; a legal obligation; and a legal claim that has arisen or can reasonably be expected, until settled or time-barred.
8. Your rights
You can object at any time, on grounds relating to your situation, to processing based on legitimate interest.
You can access, correct, receive, restrict, object to or delete your data, and withdraw a consent at any time without affecting earlier processing. You can object at any time to direct marketing and the profiling for it; we then stop. Write to support@plugchoice.com; you can also stop push messages in your phone's settings, manage tracking in the app settings where the app offers this, and stop offer emails through the link in each one. You can complain to the data protection authority in your country or to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
9. Security
Report a vulnerability under our Responsible Disclosure policy.
10. Children
The platform is for people of 16 and older.
11. Changes to this policy
We may update this policy; the version line shows when this text took effect.
Previous versions: Privacy Policy 2026-2, superseded on 30 October 2026