Privacy & Data Use Notice

This Privacy & Data Use Notice explains how Destination Charge collects, uses, stores and shares personal information when you use our website, charging services, QR code charging flow, payment services, support channels or related systems.

In this notice, Destination Charge, we, us or our means Destination Charge Limited, a New Zealand business operating Destination Charge in New Zealand.

This notice applies to:

• drivers and other users who use, or attempt to use, Destination Charge charging services;
• site owners, accommodation providers, hosts, managers and staff who work with us or enquire about working with us;
• people who visit our website or contact us; and
• any other person whose personal information we collect in connection with our services.

We handle personal information in accordance with the Privacy Act 2020.

Nothing in this notice limits any rights you may have under the Consumer Guarantees Act 1993 or the Fair Trading Act 1986.

1. Personal information we collect

We may collect personal information including:

• your name;
• email address;
• phone number;
• account, login or authentication details;
• vehicle charging session details;
• charging location, outlet and site information connected with a session;
• session start time, end time, duration, energy delivered, power readings and charging status;
• payment references, transaction records, receipts, refund records and billing history;
• support messages, enquiries, complaints and correspondence;
• information about the device, browser or system you use to access our website or charging flow;
• website usage, analytics, cookies and similar technical information;
• information provided by a site partner, accommodation provider, property manager or other third party in connection with a charging session or support issue; and
• any other information you choose to provide to us.

We do not intend to collect sensitive personal information unless it is necessary for a specific issue, support request, legal obligation or safety matter.

Where providing personal information to us is optional, you can choose not to provide it. However, some information is required for us to provide charging services, process payments or respond to support requests. We will tell you at the point of collection if providing information is required or voluntary, where this is reasonably practicable.

2. How we collect personal information

We may collect personal information when you:

• visit our website;
• scan a Destination Charge QR code;
• start, monitor or stop a charging session;
• create or use an account;
• make a payment;
• request a receipt, refund or billing correction;
• contact us for support;
• enquire about becoming a Destination Charge site partner;
• complete a form or provide information through our website;
• communicate with us by email, phone, form, message or other channel;
• interact with a participating site in a way that relates to a Destination Charge outlet or session; or
• otherwise use our services.

We may also collect information from service providers, payment processors, authentication providers, site partners, electricians, contractors and technical systems where reasonably necessary to provide, support, secure or improve the services.

3. Why we collect and use personal information

We collect and use personal information for the following purposes:

• to provide access to Destination Charge charging services;
• to identify the charging outlet, site and session being used;
• to start, monitor, manage and stop charging sessions;
• to calculate session charges, including energy use, session duration, applicable rates and any applicable fees;
• to process payments, refunds, adjustments and receipts;
• to provide customer support and respond to enquiries;
• to investigate faults, failed sessions, safety issues, billing issues, misuse or suspected tampering;
• to communicate with drivers, site partners and other relevant people;
• to manage our relationship with site partners;
• to reimburse site partners for electricity use where applicable;
• to maintain, repair, replace and improve our equipment and systems;
• to monitor service performance, reliability and usage;
• to protect the security and integrity of our website, charging flow, payment systems and equipment;
• to prevent fraud, misuse, unauthorised access or unlawful activity;
• to meet legal, tax, accounting, regulatory and compliance obligations, including those under the Companies Act 1993 and the Tax Administration Act 1994;
• to enforce our terms and agreements;
• to improve our website, services, pricing, support and user experience; and
• for any other purpose that is directly related to the purposes above or that you authorise.

4. Payment information

Destination Charge uses third party payment providers to process payments. Where a third party payment provider is used, your card details or payment credentials are collected and processed directly by that provider.

Destination Charge does not store your full card number or full payment credentials. We may receive and store payment references, transaction identifiers, payment status, payment method summaries, receipt details and related billing records.

Your use of a third party payment provider may also be subject to that provider's own terms and privacy notice.

5. Charging session and location information

When you use a Destination Charge outlet, we may collect and store technical and session information, including:

• the site and outlet used;
• session start and end times;
• energy delivered;
• power readings and charging status;
• session duration;
• payment and billing status;
• error, fault or interruption information;
• QR code, device or system identifiers; and
• information needed to verify, support or resolve the session.

This information is necessary to provide the charging service, calculate charges, reimburse site partners where applicable, support users, maintain equipment and protect against misuse.

6. Information shared with site partners

Where a charging outlet is located at a participating property, accommodation site, parking area or other host location, we may share limited information with that site partner where reasonably necessary.

This may include:

• the date and time of a charging session;
• the outlet or bay used;
• session duration;
• energy delivered;
• session status;
• reimbursement information;
• information needed to investigate a fault, access issue, parking issue, support issue, safety matter or misuse; and
• aggregated or de-identified usage information.

We do not share more personal information with a site partner than is reasonably necessary for the relevant purpose.

7. Service providers and third parties

We may share personal information with trusted third parties where reasonably necessary for the operation of our business and services, including:

• payment processors;
• cloud hosting and IT providers;
• authentication and account providers;
• email, support and communication providers;
• analytics and website service providers;
• electricians, installers, maintenance contractors and technical support providers;
• professional advisers, including lawyers, accountants and insurers;
• debt recovery or fraud prevention providers where required;
• site partners where the information relates to their site or outlet; and
• government, regulatory, law enforcement or dispute resolution bodies where required or permitted by law.

We require service providers to handle personal information appropriately and only for authorised purposes.

8. Overseas storage and processing

Some of our systems and service providers may store or process information outside New Zealand. This may include cloud hosting, payment processing, authentication, email, analytics or support systems.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the recipient is subject to privacy protections that are comparable to those required by the Privacy Act 2020 - for example, by using contractual clauses, data processing agreements, or by relying on recipients located in countries with comparable privacy frameworks. Where another permitted exception under the Privacy Act applies, we may rely on that instead.

9. Cookies, analytics and website information

Our website and related systems may use cookies, analytics tools and similar technologies to:

• operate the website and charging flow;
• remember preferences or session information;
• improve website performance;
• understand how people use the website;
• detect errors or security issues;
• support login, payment and charging functions; and
• improve our services.

You may be able to disable cookies in your browser, but some website, account, payment or charging functions may not work properly if you do so.

10. Communications

We may contact you about:

• charging sessions;
• payments, receipts, refunds and billing;
• support issues;
• safety notices;
• changes to our services or terms;
• site partner enquiries or arrangements;
• service updates; and
• other matters directly related to your use of Destination Charge.

We may also send marketing or promotional communications where you have consented to receive them and where permitted by law, including the Unsolicited Electronic Messages Act 2007. You can withdraw your consent and unsubscribe from marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us using the details in section 16.

We may still send you non-marketing service, safety, billing or legal communications even if you have unsubscribed from marketing communications.

11. Security

We take reasonable steps to protect personal information from loss, unauthorised access, misuse, disclosure, alteration or destruction.

These steps may include technical, administrative and physical safeguards, such as access controls, secure systems, monitoring, encryption where appropriate, staff or contractor access controls and secure service providers.

No website, payment system, cloud service or connected charging system can be guaranteed to be completely secure. You are responsible for keeping your own account, device and login information secure.

12. Retention

We keep personal information for as long as reasonably required for the purposes for which it was collected, including to:

• provide and support services;
• keep billing, tax and accounting records (typically seven years, in line with IRD requirements);
• resolve disputes (typically until any dispute is resolved or the applicable limitation period expires);
• investigate faults, safety issues, misuse or complaints;
• meet legal and regulatory obligations;
• enforce our rights and agreements; and
• maintain business records.

When personal information is no longer required, we will take reasonable steps to delete it, de-identify it or securely archive it, unless we are legally permitted or required to retain it.

13. Accessing and correcting your information

You have rights under the Privacy Act 2020 to request access to personal information we hold about you and to ask us to correct it.

To make a request, contact us using the details in section 16. We may need to verify your identity before responding. In some circumstances, the Privacy Act may allow us to refuse or limit a request. If we do so, we will explain the reason where required.

14. Accuracy of information

Please ensure the information you provide to us is accurate, current and complete. This is particularly important for payment, receipt, support and site partner information.

If your information changes, or if you believe information we hold is incorrect, please contact us so we can update it where appropriate.

15. Children and young people

Destination Charge services are intended to be used by people who are legally able to enter into payment and service arrangements. If a young person uses our services, their parent or guardian may be responsible for that use, including any charges incurred, to the extent permitted by law.

16. Privacy complaints

If you have a privacy concern or complaint, please contact us first. We will acknowledge your complaint promptly and aim to respond within 20 working days.

Privacy contact:

Destination Charge Limited

Email: support@destinationcharge.com

Address: 4 Ashwood Grove, Omokoroa, BOP 3114, New Zealand

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909.

17. Changes to this notice

We may update this Privacy & Data Use Notice from time to time. The updated version will be posted on our website with the updated date.

If a change is material, we will notify affected users by email (where we hold your email address) and display a prominent notice on our website for a reasonable period before the change takes effect. Continuing to use our services after a material change takes effect constitutes acceptance of the updated notice.

Destination Charge Limited · support@destinationcharge.com · 4 Ashwood Grove, Omokoroa, BOP 3114, New Zealand