Privacy Policy
Involtz UK Ltd – Privacy Policy
Effective Date: 09 January 2025
This Privacy Policy explains how Involtz UK Ltd (“Company”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you (“User”, “you”, “your”) access our power bank rental services, mobile application, website, kiosks, and related services (“Services”).
We are committed to protecting your privacy and handling your data in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- The Privacy and Electronic Communications Regulations (PECR)
- All relevant UK data protection laws
- ICO (Information Commissioner’s Office) guidance
By using our Services, you consent to the practices outlined in this Privacy Policy.
1. Data Controller
The data controller responsible for your personal information is:
Involtz UK Ltd
📧 support@involtz.co
📞 +44 7448 590083
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
- Name
- Email address
- Phone number
- Payment information (processed securely via third-party payment providers; we do NOT store full card numbers)
- Account login details
- Profile information
2.2 Data Collected Automatically
When you use our Services, we automatically collect:
- Device information (model, OS version, device ID)
- IP address
- Log data and usage data
- Location of kiosk rental and return (not real-time tracking)
- Transaction timestamps
- App activity and interactions
2.3 Payment & Billing Data
Processed through third-party providers such as Stripe or similar processors:
- Partial card information
- Billing address (where applicable)
- Transaction history
We do not store or process full payment card numbers.
2.4 Communication Data
- Support requests
- Emails, messages, or inquiries sent to us
- WhatsApp or SMS interactions (if you contact support this way)
3. How We Use Your Personal Data
We use your data for the following lawful purposes under UK GDPR:
3.1 Contractual Necessity
To provide the Services you request:
- Account creation
- Renting and returning power banks
- Processing payments and fees
- Sending receipts and rental confirmations
- Updating you about your rental status
3.2 Legitimate Interests
We use data to:
- Improve kiosk performance and the app
- Prevent fraud, loss, or theft of devices
- Enforce Terms of Service
- Monitor system security
- Analyse rental behaviour to optimise device placement
We ensure these interests do not override your rights.
3.3 Legal Obligations
We may process data to comply with:
- UK tax laws
- Financial reporting requirements
- Law enforcement requests (when legally required)
3.4 Consent
Where applicable, we rely on your consent for:
- Marketing emails
- Promotional communications
- Optional data sharing
- Cookies (except strictly-necessary cookies)
You can withdraw consent at any time.
4. Sharing Your Data
We do NOT sell personal data.
We may share information with:
4.1 Service Providers
Such as:
- Payment processors (e.g., Stripe)
- Cloud hosting providers
- Security systems
- Customer support tools
- Analytics providers
All third parties are contractually obligated to handle data securely and comply with UK GDPR.
4.2 Legal Authorities
We may disclose data if required to:
- Comply with a legal obligation
- Assist law enforcement
- Protect our rights or prevent fraud
4.3 Business Transfers
If Involtz UK Ltd undergoes a merger, acquisition, or restructuring, your data may be transferred in compliance with UK law.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- Rental records: up to 6 years (legal/tax requirements)
- Account information: until you delete your account
- Payment data: according to payment processor policies
- Communication logs: up to 24 months
After retention periods expire, your data is securely deleted or anonymised.
6. Your Rights Under UK GDPR
You have the following rights:
✔ Right to Access
Request a copy of your personal data.
✔ Right to Rectification
Correct inaccurate or incomplete data.
✔ Right to Erasure (“Right to be Forgotten”)
Request deletion of your data in certain circumstances.
✔ Right to Restrict Processing
Limit how your data is used.
✔ Right to Data Portability
Obtain your data in a machine-readable format.
✔ Right to Object
Object to processing based on legitimate interests or direct marketing.
✔ Right to Withdraw Consent
Withdraw consent at any time.
✔ Right to Lodge a Complaint
You may contact the Information Commissioner’s Office (ICO):
https://www.ico.org.uk
To exercise any of these rights, contact support@involtz.co.
7. Data Security
We implement robust technical and organisational safeguards, including:
- Encrypted communication (HTTPS/SSL)
- Secure payment processing
- Access controls and authentication
- Data minimization practices
- Regular security audits
- Cybersecurity monitoring
While we take all reasonable measures, no system is 100% secure. Users also share responsibility for protecting their login details.
8. Children’s Privacy
Our Services are not intended for individuals under 16.
We do not knowingly collect personal data from minors.
If such data is discovered, it will be deleted promptly.
9. International Data Transfers
If data is transferred outside the UK, it will only be done under:
- UK Adequacy Regulations
- Standard Contractual Clauses (SCCs)
- Equivalent approved safeguards
Ensuring your data remains protected.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
We will notify Users via:
- App notifications
- Kiosk interface
- Website updates
Your continued use of the Services constitutes acceptance of any changes.
11. Contact Information
For support, questions, or rights requests:
Involtz UK Ltd
📧 support@involtz.co
📞 +44 7448 590083