Privacy Policy
Last updated: 1st June 2026
1. Who we are
Vespr Charge is operated by GridUnlock Limited, a company registered in England and Wales, company number 16421946, registered office 71-75 Shelton Street Covent Garden London WC2H 9JQ.
Contact: privacy@vespr.cloud
2. Who controls your data
Your Vespr Charge account is usually created for you by the organisation that manages the charge points you use — your employer, landlord, fleet operator or charge point installer. We call them “the operator”.
- The operator decides which charge points you can use and why your charging is recorded. For that information, the operator is the data controller and Vespr processes it on their behalf.
- Vespr is the controller for your app account itself: your sign-in details, the contact details and vehicle information you enter, and your notification preferences.
If you are unsure who your operator is, the app shows their contact details: open a charge point and tap Support.
3. What we collect
Information you give us
| Data | Why |
|---|---|
| Name | Identifying you in the app and to your operator |
| Email address | Signing in, and sending you service messages |
| Phone number (optional) | Contacting you about a charging issue |
| Postal address (optional) | Billing, where your operator charges you for energy |
| Vehicle make, model and registration (optional) | Identifying your vehicle at a charge point, improving energy and carbon reporting, and enabling Plug & Charge on compatible hardware |
| Notification and marketing preferences | Respecting your choices |
Information created when you charge
| Data | Why |
|---|---|
| Which charge point you used, and when | Operating the service, billing |
| Energy delivered, session start and stop times | Billing, energy reconciliation, carbon reporting |
| Charging status and faults | Diagnosing problems, supporting you |
Information collected automatically
| Data | Why |
|---|---|
| Account identifier | Linking your activity to your account |
| Push notification token | Sending charging notifications, if you allow them |
4. What we do not collect
- We do not collect your location. The app does not request location access and does not track where you or your vehicle are.
- We do not store photographs. The app uses your camera only to read a QR code on a charge point. The image is processed on your device and is never saved or sent to us.
- We do not use advertising or third-party analytics. There are no advertising identifiers and no tracking SDKs in this app.
- We do not sell your personal data.
5. Why we are allowed to use your data
| Purpose | Lawful basis |
|---|---|
| Providing the app and charging service | Performance of a contract, or legitimate interests where your contract is with your operator |
| Billing and record keeping | Legal obligation, and legitimate interests |
| Keeping the service secure and diagnosing faults | Legitimate interests |
| Marketing emails or texts | Consent — you opt in, and can withdraw at any time |
| Anonymised usage analysis | Consent |
Where we rely on consent, you can withdraw it at any time in the app under Account → Notifications and preferences. Withdrawing consent does not affect anything we did lawfully before you withdrew it, and it will not affect your ability to charge.
6. Who we share it with
- Your operator — the organisation managing your charge points, so they can administer access and bill for energy.
- Amazon Web Services — our hosting provider. Data is stored in the AWS London region (eu-west-2).
- Expo — delivers push notifications to your device, where enabled.
- Authorities or professional advisers — only where we are legally required to, or need to establish or defend a legal claim.
We do not share your data with anyone else, and we do not transfer it outside the UK or European Economic Area except as described above.
7. How long we keep it
| Data | Retention |
|---|---|
| Account and profile data | While your account is active, then deleted on request or 2 months after the account is closed |
| Charging session records | 6 years, then anonymised or deleted — see the deletion page |
| Invoiced and financial records | 6 years from the end of the relevant accounting period, as required by UK tax law |
| Push tokens | Until you sign out or disable notifications |
8. Keeping it secure
Data is encrypted in transit using HTTPS. Sign-in is handled by Amazon Cognito and we never see or store your password. Access to charge points is restricted so you can only see and control those you have been given access to.
No system is completely secure. If a breach affects your rights we will tell you and the ICO as the law requires.
9. Your rights
You have the right to be told what we hold, get a copy of it, correct it, have it deleted, restrict or object to how we use it, ask for it in a portable format, and withdraw consent.
Exercise any of these by emailing privacy@vespr.cloud, or delete your account at https://vespr.cloud/delete-account. We respond within one month.
Because your operator may be the controller for your charging data, we may need to pass your request to them, or ask you to contact them directly. We will tell you if so.
10. Children
Vespr Charge is not intended for anyone under 18 and we do not knowingly collect data about children.
11. Changes
We will post changes here and update the date above. Significant changes will be notified in the app or by email.
12. Complaints
Contact us first at privacy@vespr.cloud. If you remain unhappy you can complain to the Information Commissioner’s Office — ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.