Privacy Policy
Last updated: 18 March 2026 · Version 1.0
1. Who we are
WayEV (“we”, “us”, “our”) is the data controller for personal data collected through the WayEV website and application. If you have questions about how we handle your data, please contact us at privacy@wayev.co.uk.
2. What personal data we collect
| Category | Data | When collected |
|---|---|---|
| Account | Name, email address, hashed password | Registration |
| Home location | Postcode-level latitude & longitude | When you optionally set a home location |
| Journey data | Origin & destination coordinates, route geometry | Each route plan |
| Live tracking | Current position only (not stored historically) | During live journey — ephemeral, overwritten each update |
| Payment | Managed by Stripe — we store only your Stripe customer ID | Subscription purchase |
| Usage | Routes planned, replans used per month | Ongoing |
| Charger activity | Favourite chargers, charger condition reports | When you use these features |
| Feedback | Your message, and the page, window size, time zone and browser you sent it from | Only when you send us feedback |
3. Why we process your data and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Provide the route planning service | Performance of contract — Art 6(1)(b) |
| Process subscription payments via Stripe | Performance of contract — Art 6(1)(b) |
| Live journey (current position only, not stored) | Performance of contract — Art 6(1)(b) |
| Store your home location | Consent — Art 6(1)(a) |
| Enforce subscription tier limits | Legitimate interest — Art 6(1)(f) |
| Charger reports & favourites | Performance of contract — Art 6(1)(b) |
| Answer your feedback and fix what you report | Legitimate interest — Art 6(1)(f) |
4. Who we share your data with
We share personal data with the following third-party processors, solely to deliver the service:
| Processor | Data shared | Purpose |
|---|---|---|
| Mapbox (USA) | Route coordinates | Directions, geocoding, map display |
| Stripe (USA) | Email, payment details | Subscription billing |
| Met Office (UK) | Route coordinates | Weather forecasts for consumption model |
| Open-Meteo (EU) | Route coordinates | Elevation data |
Where data is transferred to the USA (Mapbox, Stripe), we rely on Standard Contractual Clauses or the processor’s participation in recognised data protection frameworks. We do not sell your personal data to anyone.
5. How long we keep your data
| Data | Retention period |
|---|---|
| Account data (name, email) | Until you delete your account |
| Live journey position | Ephemeral — not stored beyond the active session |
| Journey plans | 12 months |
| Charger reports | 24 months |
| Feedback you send us | Deleted when you delete your account |
| Usage counters | 24 months (rolling) |
| Payment records | Per Stripe’s retention policy |
6. Your rights
Under UK GDPR, you have the right to:
- Access your personal data — download a copy from your Account settings.
- Rectify inaccurate data — update your name and home location in Account settings.
- Erase your data — delete your entire account and all associated data from Account settings.
- Data portability — export your data in machine-readable JSON format from Account settings.
- Withdraw consent — for home location storage at any time, without affecting the lawfulness of prior processing.
- Object to processing based on legitimate interest.
- Restrict processing in certain circumstances.
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
To exercise any right, email privacy@wayev.co.uk or use the self-service options in your Account settings. We will respond within 30 days.
7. Cookies and local storage
WayEV does not use tracking cookies or third-party analytics. We store authentication tokens (JWT) in your browser’s localStorage to keep you signed in. Mapbox GL JS may use essential performance cookies to render maps. See our Cookie Policy for full details.
8. Automated decision-making
Our route planning engine uses algorithms to calculate energy consumption and suggest charging stops. This is a functional feature of the service, not automated individual decision-making under Article 22 of UK GDPR. No decisions with legal or similarly significant effects are made about you automatically.
9. Children
WayEV is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at privacy@wayev.co.uk.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the email address associated with your account. The “last updated” date at the top of this page indicates the most recent revision.
11. Contact us
For any data protection queries, contact our data protection lead:
Email: privacy@wayev.co.uk