Skip to content

Legal

Privacy Policy

Last updated: [Pending legal review]

DRAFT — pending legal review

This document is a structured template. Section bodies below describe the intended content and are not final legal terms. Nothing on this page is legally binding until it has been reviewed and published as final.

This policy will explain what personal data Slotwatt processes, why, and the rights people have over it. The structure below shows what the final document will cover.

  1. [Placeholder] This section will list the categories of personal data collected: account and profile details, host identity and business verification data, location data used for charger search, charging session records, payment references, and support communications.

    [Placeholder] It will make explicit that Slotwatt does not store full payment card numbers or bank credentials — payment details are handled by the payment processor.

  2. [Placeholder] This section will explain why each category of data is processed — providing the service, securing payments, preventing fraud and abuse, meeting legal obligations, and improving the product — and the legal basis relied on for each purpose.

  3. [Placeholder] This section will name the infrastructure providers that process data on Slotwatt’s behalf — including Supabase (database and authentication infrastructure) and Stripe (payment processing and host payouts) — together with the safeguards applied to each.

    [Placeholder] It will describe any international data transfers and the mechanisms used to protect them.

  4. [Placeholder] This section will set out how long each category of data is kept, including the longer retention that applies to financial and transaction records under accounting and tax law, and what happens to data when an account is closed.

  5. [Placeholder] This section will describe the rights available under the GDPR and applicable law: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.

    [Placeholder] It will explain how to exercise each right and the timeframes for a response.

  6. [Placeholder] This section will provide the contact details for privacy matters, including the data controller’s identity and, where required, the contact point for data protection queries.