Skip to main content
Skip to main content
EV Charge Routes — Home

Privacy Policy

Last updated: 17 May 2026

EV Charge Routes ("we", "us") operates evchargeroutes.com (the "Service"). This policy explains what personal data we collect, how we use it, who we share it with, and your rights under the UK GDPR, EU GDPR, the Australian Privacy Act and California's CCPA/CPRA.

Want a copy of your data, or want it deleted?

1. Data we collect

  • Account data — email, first/last name, country and (optionally) phone when you sign up.
  • Lead data — name, email, phone, country and stated interest when you submit a contact, investor or landing-page form.
  • Usage data — pages viewed, scroll depth, engagement time, searches, tool inputs, A/B-test variant exposure and click events. Tied to an anonymous session id, only when you have accepted Analytics cookies.
  • Device & network — IP address, user-agent, approximate country derived from IP, and device type (mobile/tablet/desktop).
  • Consent records — the categories you accepted, when, and from which page (legal evidence of consent).
  • Cookies and local storage — see our Cookie Policy.

2. How we use it

  • To deliver the EV charging map, route planning, vehicle compatibility and calculator tools.
  • To respond to enquiries and, where you submitted an investor lead form, to pass your details to the broker partner you signed up to hear from.
  • To measure and improve the product through aggregated analytics (only with consent).
  • To run A/B tests on copy, layout and CTAs to find what helps users most.
  • To send service emails and, where you have explicitly opted in, marketing emails.
  • To prevent abuse, fraud and bot traffic, and to comply with legal obligations.

3. Legal bases

  • Consent — marketing communications, non-essential cookies, investor-lead forwarding to partner brokers.
  • Contract — operating your account and the tools you use.
  • Legitimate interests — fraud prevention, security logging, aggregated product analytics where you have not opted out.
  • Legal obligation — tax, accounting, lawful information requests.

4. Who we share data with

We work with the following processors and partners, each under a data processing agreement:

  • Cloudflare — edge delivery, DDoS and bot protection.
  • Supabase (via Lovable Cloud) — authentication, database, file storage. Hosted in the EU.
  • Trackbox (universal-lead-proxy) — receives leads submitted on investor landing pages so a regulated broker partner can contact you about EV-sector investment products. Only triggered when you submit such a form.
  • Open Charge Map, Mapillary, Google Places, Wikimedia Commons — provide station and vehicle imagery; we cache approved images on our own storage.
  • Lovable AI Gateway — used for occasional content-assist features; no personally identifying data is sent.

We do not sell personal data. We do not share data with ad networks.

5. International transfers

Data may be processed in the UK, EU, US and Australia. Transfers outside the UK/EU rely on the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA).

6. Retention

  • Account data — as long as your account is active, plus 30 days after closure.
  • Lead data — up to 24 months from submission.
  • Analytics events — up to 26 months, aggregated thereafter.
  • Consent records — up to 3 years (legal evidence requirement).
  • Data-request audit log — up to 3 years.

7. Your rights

Under the UK and EU GDPR you have the right to:

  • Access a copy of the personal data we hold about you.
  • Have it corrected or completed.
  • Have it deleted ("right to be forgotten").
  • Restrict or object to processing, including profiling.
  • Receive your data in a portable, machine-readable format.
  • Withdraw consent at any time without affecting prior lawful processing.
  • Lodge a complaint with a supervisory authority (e.g. the UK ICO).

The fastest way to exercise these rights is the Request Your Data page — you can download an export or permanently delete your records in two clicks. You can also email privacy@evchargeroutes.com.

8. Cookies and consent

See our Cookie Policy for the full list of cookies and storage keys, and the three consent categories (Necessary, Analytics, Marketing). You can change your choices at any time from the "Cookie settings" link in the footer.

9. Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access to production data is restricted to named operators with multi-factor authentication. Row-Level Security policies prevent one user from reading another's records.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We will post material changes on this page and update the "Last updated" date. Substantial changes will be communicated by email to active account holders.

12. Contact

Data controller: EV Charge Routes.
Email: privacy@evchargeroutes.com
For UK residents: you may also contact the Information Commissioner's Office.