Evata Privacy and Cookie Policy

Evata respects your privacy. All information you give us is held with the utmost care and security. The Evata privacy policy explains how we collect and use your personal information.

Please take time to review this privacy policy as it sets out our privacy practices for www.evata.co.uk and tells you how your personal information will be treated by us. This privacy policy relates to customer prospects (meaning here anyone who is considering purchasing products and services from Evata). If you are an Evata customer, please review our Customer Privacy Notice.

Any questions regarding Evata's privacy policy, please contact us through our contact page.

WHAT INFORMATION DO WE COLLECT?

Evata will collect personal information provided by you when you contact us, make an enquiry, request a brochure, request a demo, phone us, email us or visit our website.

We collect: name (first and second), company name, postal address, email address, phone number, any other contact details provided by you, details of website pages you visited, features and product usage you might be interested in.

Through surveys or when speaking to our staff over the phone or email, we may also ask you for other optional information such as what sort of equipment/device/software you use and what subjects related to vehicle tracking and telematics interest you. If you choose to give us this information, we will use it to help us to provide you with the best possible service that is personalized to your needs and preferences.

Although we do not make it compulsory to give us every item of information we ask for, the more information volunteered by our prospect customers (and the more accurate it is), the better we can match our services to your needs.

We also collect information from you if you choose to take part in any of our website surveys or promotions. We will use this information to administer the promotion, help us to plan other promotions and improve the services we provide.

DO WE RECORD PHONE CALLS?

Phone calls may be recorded for quality and training purposes.

WHAT DO WE USE YOUR INFORMATION FOR?

We hold the details you supply so that we can contact you to check on the information we've sent you or the progress of an enquiry or demo evaluation of our services. If you do not want us to hold your information or contact you, please let us know by completing the 'Contact Us' form and also mentioning this in the 'Comments Box'. Also, if you don't want us to speak to anyone else in your organisation about your enquiry (for reasons of confidentiality), let us know in the same way. Please note that in order to avoid contacting you again, we do hold your email address as a 'Do not email' record on a suppression list, which is the most effective and safest way to prevent you from receiving further emails.

Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested.

We (or our representatives) may use the personal information provided to us to:

process enquiries submitted by you;
customise the way we market the services we provide to you;
verify your identity; (e.g. if you participate in any promotions administered by us)
carry out market research and surveys and track sales data;
send you our newsletter, where this is requested by you;
track your engagement with us, including through our website, articles and newsletters;
understand how you use our website;
contact you by telephone and send you follow-up communications relating to your use of Evata's software promoted on our website; and
send you information about our other products and services.

DO WE LOG IP ADDRESSES?

Yes. Our website is hosted on Google Cloud, with our servers in London. For every request, they record the IP address, the time, the page requested and the browser. We use these logs to keep the site secure and running, and to fix problems. They are kept for 30 days, then deleted. Our legal basis is our legitimate interest in running a secure website.

DO WE USE COOKIES?

Cookies are small files a website stores in your browser. Some sites also use your browser’s local storage for the same job. This section covers both, and calls them all cookies.

We use only the cookies listed below. Essential cookies are always on, because the site needs them or because you asked for something, like opening a chat. Analytics cookies are only used if you accept them, and you can change your mind at any time in Cookie settings. We don’t use advertising cookies.

Essential (always on)

evata_consent (Evata, local storage): remembers your cookie choice. Kept for 12 months, then we ask again.
ev_feature_flags (Evata, local storage): remembers which parts of the site are switched on, so pages show correctly as they load. Kept until you clear your browser’s storage.
_GRECAPTCHA (Google reCAPTCHA): protects our forms from spam and abuse. Set only on pages with a form. 6 months.
crisp-client/* (Crisp): keeps your chat conversation going across pages and visits. Set only if you click “Chat with us”. 6 months.

Analytics (only if you accept)

_ga and _ga_CSG64WG10J (Google Analytics): count visits and show which pages are used and how people found the site. 2 years.
mf_[site id] (Mouseflow): identifies your current visit, so we can see clicks, scrolling and mouse movement on our pages. Deleted when your visit ends.
mf_user (Mouseflow): tells whether you have visited before. 90 days.

Mouseflow doesn’t record passwords, and we mask what you type into our forms.

SERVICES THAT RECEIVE DATA FROM OUR WEBSITE

Besides our own hosting, four services receive data when you use our website. Google Analytics and Mouseflow only run if you accept analytics cookies. Crisp only runs if you open the chat. Google reCAPTCHA only runs on pages with one of our forms.

Google Analytics (only if you accept analytics cookies)

What it collects: the pages you visit, how you arrived (for example from a search engine, a link or a campaign), how long you stay, when you send one of our forms or create an account, your device, browser and screen size, and your approximate location (city, region and country).
What it doesn’t collect: Google Analytics doesn’t log or store the IP addresses of UK visitors. It works out an approximate location and discards the address. We don’t send it your name, your email address or anything you type into our forms.
Returning visits: the _ga cookies hold a random ID, not your identity.
Advertising: we don’t use Google Analytics for advertising. Our site always refuses Google’s advertising and ad-personalisation storage.
Why, and our legal basis: to understand how our website is used so we can improve it. The legal basis is your consent.
How long we keep it: 14 months, then Google deletes it.
Where: on Google’s servers, which may be outside the UK, including in the US. Google is certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge).
More: Google’s privacy policy and how Google uses information from sites that use its services.

Mouseflow (only if you accept analytics cookies)

What it records: how you move through our pages, meaning mouse movement, clicks, taps and scrolling, the pages you visit and how long you stay, plus your device, browser, screen size and approximate location. We use it to replay visits and build heatmaps, so we can see where the site is hard to use.
What it doesn’t record: what you type. Keystroke recording is switched off for every visitor, our form fields are masked as well, and passwords are never recorded. Mouseflow anonymises IP addresses.
Why, and our legal basis: to find and fix problems with our website. The legal basis is your consent.
How long we keep it: recordings are kept for 3 months, then deleted.
Where: in Mouseflow’s EU data centre. Mouseflow processes this data for us, as our processor.
More: Mouseflow’s privacy policy.

Crisp chat (only if you open the chat)

What it collects: the messages you send, any name or email address you give us, and the technical details Crisp needs to run the chat (browser, device and IP address).
Why, and our legal basis: to answer you. The legal basis is our legitimate interest in replying to people who contact us, or taking steps you ask for before entering a contract with us.
How long we keep it: we keep chat conversations for 12 months, then delete them. Crisp keeps its own connection logs (IP address, browser and time) for up to 1 year, as French law requires.
Where: Crisp is a French company (Crisp IM SAS), and chat data is stored in the Netherlands.
More: Crisp’s privacy policy.

Google reCAPTCHA (pages with a form only)

What it does: checks that a form is being sent by a person rather than an automated program. To do that, Google collects information such as your IP address, your browser and device details, and how you interact with the page.
Why, and our legal basis: to protect our forms from spam and abuse. The legal basis is our legitimate interest in keeping the site secure.
More: reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

CHANGING YOUR MIND

Use Cookie settings (also at the foot of every page) to turn analytics cookies on or off. If you turn them off, we delete the analytics cookies our site has set.

You can also block or delete cookies in your browser’s settings; the site works without them. Google offers a browser add-on that stops Google Analytics on every site.

THE EVATA APP

This section covers the Evata app, which drivers use to find, book and charge at the depots their business has access to.

Signing in: your mobile number or email address, used to send you a one-time sign-in code. Sign-in is provided by Auth0, which sends text messages through Twilio. The app doesn’t use passwords.
Your account: an account identifier sent with each request, so we know it’s you. If you create your account in the app rather than being set up by a business, we also collect your first and last name and email address.
Your vehicles: registration, make, model and battery details. When you add a vehicle by its registration, we look its details up in DVLA and DVSA records.
What you do in the app: bookings and cancellations, the charges you start and stop, the vehicle you select, and the site rules you confirm and site videos you open, each recorded with the date and time.
Your charging: the energy, duration and cost of each charge, used to bill it.
Paying for yourself: if you top up an Evata balance, you enter your card details into Stripe’s payment form in the app, and they go to Stripe, our payment provider, not to us. We keep a reference to the card, your top-ups and your balance.
Location: the app uses your device’s location, while it’s open, to centre the map and show how far away a depot is. Your location stays on your device; the app doesn’t send it to us.
App performance: Google’s Firebase measures how quickly the app starts and responds, and lets us change app settings without an update. Firebase and Google Maps (which draws the map) send Google device details such as model and operating system, an installation identifier, crash information from the map, and your IP address.

The app shows no advertising and uses no advertising identifier. We use this data to run the charging service your business has arranged with us, and to keep the app working; our legal basis is our legitimate interest in doing both. It is shared with Auth0 and Twilio (sign-in), Stripe (card payments), Google (Firebase and Maps), the business you drive for when it pays for your charging (your bookings and charges, for invoicing) and the charge point operators whose chargers you use (the charging record). Data leaves the app encrypted.

DELETING YOUR EVATA APP ACCOUNT

In the app: go to Profile, then Close account, and type CLOSE to confirm.

Without the app: send a request through our contact page, choosing “General enquiry”, and include the mobile number or email address you sign in with. We’ll check it’s your account before we close it.

Closing your account signs you out and cancels any charging you have booked.

What we delete: your sign-in and profile, your vehicles and any connection to your car maker, and any saved payment card and wallet.
What we remove your name from: your bookings and charging history.
What we have to keep: invoices and payment records, for six years, because HM Revenue and Customs requires it; and charging records already shared with the charge point operators you charged with. We tell them you have closed your account, but their own records are theirs to keep.

Deleting everything else can take up to 30 days.

DO WE DISCLOSE ANY INFORMATION TO OUTSIDE THIRD PARTIES?

Certain Evata services, such as assisting with user evaluation of our products, are done in conjunction with our (third-party) business partners. In such cases, we may need to share your personal information with them in order to provide these services, however, we will ask for your permission first. We may also share information with our representatives to send you information or contact you by telephone about our services and offers that we deem would be of interest to you.

We choose our business partners carefully and ask them to comply with all data privacy policies, however, we are not responsible for their privacy policies and practices. Therefore, we recommend that you check the policy of each site you visit and ask anyone who contacts you if you have any concerns.

Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

In some cases, we may ask for anonymous feedback from you via a third party, in order to help us improve our service, we will fully respect your privacy and only if you waive your anonymity; we will be able to contact you about the feedback.

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or other's rights, property, or safety.

INFORMATION ABOUT OUR PRODUCTS AND SERVICES

If you use vehicle as part of your business, then we deem that you might be interested in vehicle tracking services as a way to improve your business operations and save costs.

We will send you information or may contact you by telephone to talk with you about our services and offers that we deem would be of interest to you.

If at any time you do not wish to continue to receive these details, then send us a message through our contact page. You can also unsubscribe from our emails by using the 'unsubscribe' option located at the bottom of each of our newsletter communications. All you need to do is to click on the 'Unsubscribe from our emails' link.

DATA SUBJECT RIGHTS

Individuals have a number of rights with regard to the data held about them, if you would like to exercise any of these rights please contact Evata support as detailed at here.

a. Right to be informed

b. Right of Access

More commonly known as Subject Access Requests or "SARs", Data Subjects have the right to request and obtain from information relating to, and to receive a copy of, their Personal Data.

c. Right to Rectification

Data Subjects have the right to obtain the rectification or completion of inaccurate or incomplete Personal Data concerning him or her. Please contact us to correct or complete any data we have about you.

d. Rights to Erasure, Restriction, Data Portability and to Object

In certain circumstances and, in some cases, subject to specific exceptions, Data Subjects have the right to:

Obtain the erasure of Personal Data concerning him or her;
Obtain the restriction of Processing of Personal Data concerning him or her;
Obtain the Personal Data concerning him or her, which he or she has provided to a data controller, to transmit to another data controller without hindrance to have us transfer the personal data directly to another data controller where technically feasible;
Object at any time to Processing carried out in our legitimate interests, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or carried out for direct marketing purposes.

e. Automated Decision Making

Data Subjects have the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal or similarly significantly affects concerning him or her.

KEEPING OUR RECORDS ACCURATE

We aim to keep our information about you as accurate as possible. If you would like to review or change the details you have supplied us with, please contact us through our contact page.

HOW DO WE PROTECT YOUR INFORMATION?

We have implemented technology and policies to safeguard your privacy from unauthorized access and improper use. For example, our website is encrypted. We will continue to monitor and update security measures as new technology and privacy regulations becomes available as appropriate to the website and any customer databases or CRM systems we use.

All supplied sensitive/credit card information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.

YOUR CONSENT

By using our website, or giving us your details at a trade events or exhibitions, you consent to the collection and use of this information by Evata so that we can process your enquiry. If we decide to change our privacy policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we would disclose it.

DATA TRANSFER OUTSIDE OF THE UK

Evata will only transfer ('transfer' means share data or make the data available to a remote location) Personal Data to countries outside the UK where:

The UK has found that the country (or international organisation) provides an adequate level of protection;
The UK’s International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, is in place with the recipient;
Binding corporate rules apply, or the transfer is otherwise permitted by UK data protection law.

For our website this means: Google (Analytics and reCAPTCHA) may process data in the US under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as adequate. Mouseflow and Crisp store data in the EU, which the UK also recognises as adequate. See Services that receive data from our website.

CONTACTING US

If at any time you would like to contact us with a query relating to your personal information, you can do so through our contact page or by contacting us at:

Evata UK Limited

10 Allison Street,

Glasgow,

G42 8NN

You are entitled to ask for a copy of the information we store about you (for which we may charge a small fee).

Any complaints should be raised with Evata at the email address above in the first instance. Data subjects can raise complaints to the supervisory authority in the UK. This is the Information Commissioners office – ico.org.uk.

Evata has appointed a Data Protection Officer in line with the requirements of the General Data Processing Regulation (GDPR) who can be contacted through our contact page.

This policy was last modified on 28 September 2026.

Customer Privacy Notice

Customer Notice on GPS Tracking and Privacy

This policy notice concerns customers who are using Evata's data analytics. If you have any questions about this information, please contact us through our contact page.

What information do we collect?

We collect data for the provision of data analytics to assist commercial fleets with transitioning to electric vehicles. This data includes personal data such as the below:

Name
Address(es) – home/ work/ other significant addresses
Telephone number(s)
Email Address(es)
Vehicle Location data from GPS with date and time from the tracking unit

When our services are procured by a customer, we may also process or model co-related information from the GPS data.

Additional data collected through our modelling from the tracking unit is:

Vehicle ignition state
Vehicle speed and, heading direction
Vehicle acceleration and braking data in 3 dimensions
Tracking Unit orientation, signal strength and GPS satellites in view data
Driver tag identification when fitted
Additional wired input when fitted, such as temperature monitoring, attached device state (tail-lift, pump, etc…), vehicle door open/closed or vehicle load state.

Data that is not from the tracking device is provided and maintained by the customer company that contracts our services. Vehicle location data is processed to determine an address for the location and may also provide driving style and driving time information for the customer company.

What do we use the information for?

We use your information to provide the services for which we have been contracted by the customer company that could be your employer, a company to which you are contracted. The customer company is the data controller for whom we are acting as a data processor, the data controller should inform data subjects of their lawful basis for processing and the purpose(s) of processing in the use of our services.

Services provided by Evata are as detailed on our website www.evata.co.uk.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information. Security credentials are required to access the tracking application with feature accessibility by user account determined by the customer company system administrator.

All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.

After a transaction, your private information (credit cards, financials, etc.) will not be kept on file for more than 60 days, unless the services procured are recurring, in which case such information shall solely be used for Evata requesting payment or as required by law.

Will we contact you?

We may contact you as part of the services we provide to the customer company, this includes sending reports, arranging appointments for installation of the vehicle tracking unit, to discuss issues with the data received from the vehicle tracking unit or to arrange service appointments to investigate issues with the vehicle tracking unit.

Do we record phone calls?

Phone calls may be recorded for quality and training purposes.

Do we use Cookies?

Our website’s cookies, and how to turn them on or off, are listed under Do we use cookies? above. What the Evata app collects is under The Evata app. We don’t use advertising cookies.

Do we disclose any information to outside third parties?

No, we will not pass your contact details to any outside third party. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or other's rights, property, or safety. However, non- personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Data subject rights

Individuals have a number of rights with regard to the data held about them, in the first instance requests should be made to the Customer company and any requests made directly to Evata will be referred to the customer company. Requests to Evata should be made to our support team who can be contacted through our contact page.

a. Right to be informed

Data subjects have the right to be informed of the personal data held about them, the processing of that personal data and of the lawful the basis of processing and purpose(s) of processing. This privacy notice provides details of the personal data held and processing of that personal data Evata carries out as a data processor on behalf of the customer company as a data controller that should provide the lawful the basis of processing and purpose(s) of processing.

b. Right of Access

More commonly known as Subject Access Requests or "SARs", Data Subjects have the right to request and obtain from information relating to, and to receive a copy of, their Personal Data.

c. Right to Rectification

Data Subjects have the right to obtain the rectification or completion of inaccurate or incomplete Personal Data concerning him or her. Most of the personal data in the Evata's system can be amended through the Evata web application by an administrative user of the customer company.

d. Rights to Erasure, Restriction, Data Portability and to Object

In certain circumstances and, in some cases, subject to specific exceptions, Data Subjects have the right to:

Obtain the erasure of Personal Data concerning him or her;
Obtain the restriction of Processing of Personal Data concerning him or her;
Obtain the Personal Data concerning him or her, which he or she has provided to a data controller, to transmit to another data controller without hindrance to have us transfer the personal data directly to another data controller where technically feasible;
Object at any time to Processing carried out in our legitimate interests, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or carried out for direct marketing purposes.

e. Automated Decision Making

Evata does not make decisions regarding Data Subjects based solely on automated Processing, including profiling, which produces legal or similarly significantly affects concerning him or her.

Transfer outside of the EU

Evata will only transfer ('transfer' includes making available remotely) Personal Data to countries outside of the EEA where:

The transfer is to a country (or an international organisation), that the European Commission has determined ensures an adequate level of protection;
Standard contractual clauses adopted by the European Commission have been put in place between Evata and the entity located outside the EEA;
binding corporate rules have been implemented, where applicable; or the transfer is otherwise permitted by the GDPR.

Data retention

The length of time Evata will retain tracking data can be set through the Evata web application by an administrative user from the customer company, the maximum retention period is 7 years and the minimum is 1 month. The data is available through the web application for up to 1 year with archive data available by request to the support team using our contact page.

Customers should consider the length of time it is necessary for the tracking data to be retained for their purpose(s) of processing and an administrative user should configure the retention appropriately.

California online privacy protection act compliance

Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent. As part of the California Online Privacy Protection Act, all users of our site may make any changes to their information at any time by logging into user account and going to the 'System Configuration' page.

Your consent

By using our website, or giving us your details at a trade events or exhibitions, you consent to the collection and use of this information by Evata. If we decide to change our privacy policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we would disclose it.

Contacting us

If there are any questions regarding this privacy policy you may contact us through our contact page.

Any complaints should be raised with Evata at the email address above in the first instance. Data subjects can raise complaints to the supervisory authority in the UK this is the Information Commissioners office – ico.org.uk.

Evata has appointed a Data Protection Officer in line with the requirements of the General Data Processing Regulation (GDPR) who can be contacted through our contact page.

This notice was last modified on 28 September 2026.