ChargePoint (“ChargePoint,” “we,” “our” or “us”) — defined as any entity directly or indirectly controlled by ChargePoint Inc., 240 East Hacienda Ave., Campbell, CA 95008 USA — provides this privacy policy (the “Policy”) to inform you on how we process your information, whether you are a visitor to our website, a user of the ChargePoint app, an operator of our electric vehicle (EV) charging stations, a user of EV charging stations on the ChargePoint network, a user of a ChargePoint account, an owner of a ChargePoint radio-frequency identification (RFID) card, a user of our EV monitoring solutions, a user of any other service offered by ChargePoint that includes a link to this Policy, or a visitor of our offices in Europe. Each of these services and applications are collectively defined as the “Service(s)”.
The “ChargePoint network” is defined as the network of electric vehicle charging stations and the vehicle charging and telematics applications that the network delivers, which is operated and maintained by ChargePoint. Please read this Policy carefully to understand our practices regarding your personal data and how we collect, process and transfer it. By using or otherwise accessing the Service, you acknowledge the applicability of this Policy. If you have any questions about this Policy or how we handle your personal data, please contact us as described below in Section 11.
We obtain information about you when you use or otherwise access the Services. Please note that we need certain types of information to provide the Services to you. If you do not provide us with such information or if you ask us to delete that information, you may no longer be able to access or use certain parts of our Services.
We collect information you provide directly to us. For example, you may provide us with information through:
The types of information we collect directly from you may include:
ChargePoint uses cookies and similar technologies including web beacons, embedded scripts and e-tags (together referred to as “cookies,” unless otherwise stated) to provide users an efficient user experience in using the website. A cookie is a small data file that is placed on your computer or mobile device by your web browser. It is a tool that stores information about website visits, recognizes you and your preferences each time you visit the website, optimizes website functionality, and enables us to provide our Service.
ChargePoint uses cookies for a variety of reasons, including to provide you the Service you have requested, enhance our website’s performance or analyze how people use our website.
The table below explains the categories of cookies that are used on our website. Depending on your location and corresponding jurisdiction, we request that visitors provide permission (opt-in) prior to ChargePoint using such technologies. Alternatively, we provide granular controls through our Consent Management Platform, which enables visitors to keep only their preferred cookie categories. The following table summarizes our cookie categories.
| Cookie type | Purpose |
|---|---|
| Strictly necessary |
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you.
Strictly necessary cookies provide you with functionalities such as:
|
| Functional | Functional cookies are not strictly necessary and can be disabled at any time. Their role is to provide the visitor with a better experience based on their preferences. |
| Performance | Performance cookies are also optional cookies, and they are used to help us understand if the website is working as expected. We also use such cookies to analyze and measure traffic, including load times, counting the number of visitors accessing our website and other analytics that help us determine how to improve our products and services. |
| Targeting |
ChargePoint, ChargePoint partners or ChargePoint vendors may set cookies that measure and collect data about visitors’ interaction with our website in order to provide advertising services.
Also, targeting cookies may be used for social media purposes to enable features such as content sharing from our website to different social media platforms. Targeting cookies are optional and can also be disabled at any time. |
ChargePoint may use the information we collect from or about you for a range of business or commercial purposes.
We may disclose any of the above categories of your information to third-party entities as follows:
In addition, we provide personal data to third parties such as government or regulatory authorities when we have a legal obligation to do so. We may also disclose certain information if we believe in good faith that doing so is necessary or appropriate to protect or defend ChargePoint or other parties, including to defend or enforce this Policy, our Terms of Use or any other contractual arrangement or to protect the rights, property or personal safety of ChargePoint, our agents and affiliates, our employees, users or the public.
We may disclose certain information if we believe in good faith that doing so is necessary or appropriate to comply with any law enforcement, legal or regulatory process, such as to respond to a warrant, subpoena, court order, or other applicable laws and regulations.
We may also disclose or make available some of your information with advertising and analytics partners to serve advertisements on our behalf across the internet and to provide analytics services. These entities may use cookies and tracking technologies to allow us to, among other things, track and analyze data, determine the popularity of certain content, deliver advertising and content targeted to your interests and better understand your online activity.
We may disclose certain information, in connection with or during negotiations or closing of any merger, sale of company assets, financing or acquisition of all or a portion of our business, to another company.
Except as stated above, we will not disclose your personal data to any third parties for any other purposes unless we have your consent or we otherwise have the legal basis or obligation to do so in an individual case.
With respect to our disclosure of information to service providers and third-party network providers, such parties may have limited access to certain features and data from the ChargePoint network to be able to provide the required services (such as billing and pricing). If you are a beneficiary of a charging arrangement with a provider, for example, when your employer or a leasing company has agreed to cover the cost of your charging session, the provider will have access to your session and, in some cases, to certain data within your account.
With regard to the processing of such data, ChargePoint and the provider are either individual (sole) controllers or joint controllers, depending on the contractual agreement. Please refer to the provider’s privacy policy to understand how they process, collect, use and disclose your data. If you would like a summary of the commitments between the parties where ChargePoint is a joint controller, please use the contact information provided in Section 11.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
ChargePoint has implemented administrative, physical and technical security measures to protect your information under our control.
While ChargePoint takes precautions against possible security breaches of its website and Service, no website or internet transmission is completely secure, and we cannot guarantee that unauthorized access, hacking, data loss or other breaches will never occur. We are unable to guarantee the security of your information while it is being transmitted to our website or stored in our systems, and any transmission is at your own risk.
You should take steps to keep your information safe (including your password) and log out of your account after use. Where we have provided or you have chosen a password that enables you to access certain parts of our website or an RFID card that provides access to charging stations, you are responsible for keeping your password and RFID card confidential. You must not share these with anyone or store them in a way that may allow a third party to access them. If that happens, you should report it immediately to the contact provided in Section 11. ChargePoint cannot be held and is not responsible for your failure to keep your password or RFID card secure.
You should update your password periodically to help reduce the risk of unauthorized access to your account with us. When you do, you should strengthen your password with the combination of uppercase and lowercase letters, numbers, punctuation and other symbols.
We generally retain information for as long as it may be relevant to the purposes above and in compliance with applicable law. To dispose of any personal data, we may anonymize it, delete it or take other appropriate steps. Information may persist in copies made for backup and business continuity purposes for an additional period of time.
This website may contain links to third-party sites. Access to any other websites linked from our website is at the user’s own risk, and ChargePoint is not responsible for the accuracy or reliability of any information, data, opinions, advice or statements made on those websites. ChargePoint provides these links merely as a convenience, and the inclusion of such links does not imply any kind of endorsement. If you provide any third party with your information, we recommend that you review their privacy policies as ChargePoint does not control how they collect, process and transfer your information.
The website and Service are intended for persons licensed to drive. In the United States, this typically means individuals over age 16 and, in Europe, age 17. ChargePoint does not knowingly collect any information from anyone under 16. If you are under 16 or 17, we request that you do not submit information to us. If we become aware that we have inadvertently collected “personal information” (as defined by the United States Children’s Online Privacy Protection Act) from children under the age of 13 without parental consent, we will take reasonable steps to delete it as soon as possible as required by applicable law.
We may change this Policy to reflect changes in the law, our information practices or the features of the Service. At the top of our Policy, we will indicate the date of the most recent update. If we make a material change to the Policy, you will be provided with appropriate notice in accordance with legal requirements, which may be by email. By continuing to use the Service, you are confirming that you have read and understood the latest version of this Policy.
Nevada consumers may opt out of the sale of “personally identifiable information” (as that term is defined by NRS 603A.040) for monetary consideration. We do not engage in such activity; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of any potential future sales under Nevada law by emailing privacy@chargepoint.com. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.
When you visit our website from Europe, indicate you are a European resident, when using our services in Europe or when you visit our European offices, the controller of any personal information processed is ChargePoint Network (Netherlands) B.V. (see contact in Section 11).
ChargePoint uses the following legal basis for processing your personal information:
We will not process any of your personal data without having a legal basis for doing so.
You have no statutory or contractual obligation to provide us with any personal data. However, depending on the activity, some of the information we may ask you to provide is identified as mandatory (because we need it in order to provide the requested Service). If you do not provide the mandatory data with respect to a particular Service, you will not be able to use that Service.
ChargePoint is a global company that operates its website and Service through servers located in several countries. If you select a country in Europe as your country of residence, your personal data is mainly hosted on servers within the European Union.
We may have to grant access to your personal data, such as account registration and charging network data, to ChargePoint affiliates in the United States and India (e.g., to provide you with support when receiving Services or to allow analysis of the data to develop and improve our products and services). Those purposes include usage patterns of the ChargePoint charging station network that help inform product development, safety features, sales strategy, support and maintenance.
Further, these ChargePoint entities may need to access information for billing and accounting purposes. Transfers to these ChargePoint entities are based on the appropriate standard contractual clauses approved by the European Commission. You may request further information about our transfer safeguards by sending an email to privacy.eu@chargepoint.com.
ChargePoint also complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) (collectively, the “DPF”) as set forth by the U.S. Department of Commerce, regarding the collection, use, and retention of Personal Information.
ChargePoint will ensure that all DPF principles are adhered to by any sub-processors used and shall remain liable if its sub-processor process Personal Information in a manner inconsistent with the DPF Principles, unless ChargePoint proves that it is not responsible for the event giving rise to the damage.
ChargePoint has certified to the U.S. Department of Commerce that it adheres to the DPF Principles with regard to Personal Information that is transferred from the European Union, the United Kingdom, and/or Switzerland to the United States. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern.
To learn more about the DPF program, please visit Data Privacy Framework website. Please see the Data Privacy Framework website or refer to this list of U.S. entities covered under ChargePoint’s DPF self-certification. With respect to Personal Information received or transferred pursuant to the DPF, the Federal Trade Commission has jurisdiction over ChargePoint’s compliance with the DPF.
In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), ChargePoint commits to resolve DPF Principles-related complaints about our collection and use of your personal information. Individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), should first contact us at privacy.eu@chargepoint.com.
ChargePoint has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, operated by JAMS (https://www.jamsadr.com). If you are not satisfied with the way your privacy request has been handled directly through ChargePoint, you can always submit a complaint by accessing https://www.jamsadr.com/DPF-Dispute-Resolution. If your DPF complaint cannot be resolved through the above channels, under certain conditions specified on the DPF website, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms.
European privacy laws grant you the following rights as a data subject:
As also described above in Section 6, we generally retain information for as long as it may be relevant to the purposes above and in compliance with applicable law. To dispose of any personal data, we may anonymize it, delete it or take other appropriate steps. Information may persist in copies made for backup and business continuity purposes for an additional period of time.
The following table summarizes our retention times for your personal data:
| Data category | Data retention schedule |
|---|---|
|
3 years |
|
5-10 years, depending on the country in scope |
|
For the duration of the contract |
|
For the duration of the contract |
|
1 year |
|
|
The California Consumer Privacy Act (CCPA) requires us to disclose information regarding the categories of personal information and sensitive personal information that we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes (as those terms are defined by applicable law) for which the information was collected, and the categories of parties to whom we disclose personal information.
Throughout this Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information and when we disclose it. Under the CCPA, we also have to provide you with the “categories” of personal information and sensitive personal information we collect and disclose for “business or commercial purposes” (as those terms are defined by applicable law). The categories of personal information are identifiers (such as name, address and email address), commercial information (such as transaction data), financial data (such as credit card and other financial account information), internet or other network or device activity (such as IP address), professional or employment-related information (such as your current employer), geolocation information, inference data about you, physical characteristics or description (such as when you voluntarily submit a photo), audio and visual information (such as when you call into customer service or visit our offices) and other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password or other credentials allowing access to your account and precise geolocation.
ChargePoint and our service providers collect and disclose the above categories of personal information for the purposes described in our Policy. This includes the following business and commercial purposes (as those terms are defined in applicable law):
We collect the categories of personal information identified above directly from you, through your use of the Service, from our affiliates and from third parties such as site hosts, other users and social networks.
We describe our information-sharing practices in the Policy above. In the previous 12 months, we may have disclosed certain categories of personal information with unaffiliated parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose your information with providers when you connect with a ChargePoint station operated by that provider, or site host. You may also intentionally direct us to disclose your information with utility companies or their vendors. The information we disclose with providers and utility companies may include account registration data (identifiers) and charging network data (commercial information).
If you are a California resident, you may have certain rights. California law may permit you to request that we:
You may have the right to receive information about the financial incentives that we offer to you, if any. You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Service to you. If you ask us to delete it, you may no longer be able to access or use the Service.
If you would like to exercise any of these rights, please submit a request through one of our available channels:
You will be required to verify your identity before we fulfill your request. To do so, you will need to provide the information identified in the webform or as otherwise directed by us. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You will still need to verify your identity directly with us.
The CCPA requires businesses that sell personal information, as the term “sell” is defined under the CCPA, to provide an opt-out from such sales. Some people have taken the position that when a website uses third-party cookies or similar technology for its own analytics or advertising purposes, the website is engaged in a “sale” under the CCPA if the third parties have some ability to use, disclose or retain the data to improve their service or to take steps beyond the most narrowly drawn bounds of merely providing their service to the website or app. Some take this position even when the website pays the third party (not vice versa) and, in most cases, merely provides the third party with an opportunity to collect data directly, instead of providing personal information to the third party. These analytics and advertising services technologies may access identifiers (such as IP addresses), internet or other electronic network activity information (such as information regarding an individual’s browsing interactions on a ChargePoint website) and commercial information (such as the fact that a browser visited a page directed to people who are considering an electric vehicle) to those sorts of companies. While ChargePoint does not believe these are “sales” as that term is defined under the CCPA, you can opt out of this activity by changing your “privacy choices” on our website (when accessing the ChargePoint website, you will be presented with a privacy preference center which will enable your choices).
The CCPA also requires businesses that share personal information to provide an opt-out from such sharing. Under the CCPA, sharing is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites. We share information for these purposes to provide more relevant and tailored advertising to you regarding our Services. As part of this advertising, we may share identifiers (such as IP addresses and email addresses), internet or other electronic network activity information (such as information regarding an individual’s browsing interactions on a ChargePoint website), and commercial information (such as the fact that a browser visited a page directed to people who are considering an electric vehicle) with advertising platforms and advertising networks. To opt out of such sharing, please change your “privacy choices” online, on our website (when accessing the ChargePoint website, you will be presented with a privacy preference center which will enable your choices).
Please note that we also respond to and abide by opt-out preference signals sent through the Global Privacy Control. Any opt-out preferences you have indicated through these methods will only apply to the specific device or browser on which you made them. For more information on how to use the Global Privacy Control, please visit www.globalprivacycontrol.org.
We do not knowingly sell or share the personal information of children under 16.
The CCPA also allows you to limit the use or disclosure of your sensitive personal information (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.
The retention schedule of your personal information is further detailed above, in Section 6, Retention, deletion and storage.
California Do Not Track setting. We do not respond to browser-initiated Do Not Track signals, as the internet industry is currently still working on Do Not Track standards, implementations and solutions. Please note that Do Not Track is a different privacy mechanism than the Global Privacy Control browser choice referenced above.
Depending on where you live, you may have certain rights. Where applicable, the state law may permit you to request that we:
Certain information may be exempt from such requests under applicable law. We need certain types of information so we can provide the Service to you. If you ask us to delete it, you may no longer be able to access or use the Service.
If would like to exercise any of these rights, please submit a request at privacy@chargepoint.com or visit https://na.chargepoint.com/guest/chargepoint_help. You will be required to verify your identity before we fulfill your request. To do so, you will need to provide the information identified in the webform or as otherwise directed by us.
ChargePoint may use your personal information to send you targeted advertising (as that term is defined in certain state privacy laws). To opt out of targeted advertising, please change your privacy choices online (when accessing the ChargePoint website, you will be presented with a privacy preference center which will enable your preferences).
Depending on where you live, if we deny your request to exercise any of the rights above, you may have the right to appeal that denial by contacting us at privacy@chargepoint.com with the subject “Data privacy request appeal” and providing us with information about why you are appealing the decision.
If you are a Canadian resident or if your personal data is processed by ChargePoint’s Canadian Legal Entity, you have the right to access your personal information. To exercise that right, please submit a request at privacy@chargepoint.com or visit https://na.chargepoint.com/guest/chargepoint_help. You will be required to verify your identity before we fulfill your request. To do so, you will need to provide the information identified in the webform or as otherwise directed by us. Certain information may be exempt from such requests under applicable law.
ChargePoint is a global company that operates its website and Service through servers located in several countries. We may grant access to your personal data (such as account registration and charging network data) to ChargePoint affiliates in the United States and India, where that data may be accessible to law enforcement and national security authorities under certain circumstances.
This Supplemental Privacy Notice supplements the information in our Privacy Policy, and except as provided herein, applies solely to data subjects in Mexico. It applies to personal information we collect on or through the Service and through other means (such as information collected offline, in person, and over the telephone).
For individuals in Mexico, Charge Point, Inc., with address at 240 East Hacienda Ave, Campbell, California 95008 and ChargePoint Mexico, S. de R.L. de C.V., with address at Avenida de las Américas No. 1536, Piso 5 B-2, Col. Country Club, 44610 Guadalajara, Jalisco shall be considered as the data controllers for the processing of personal data.
Access, Rectification, Cancellation and Opposition (“ARCO”) Rights
Subject to certain exceptions detailed in the Mexican law, you have the right to: (i) request access to your Mexican information; (ii) request deletion of the Mexican information we collected from you; (iii) request correction of inaccurate Mexican information; and (iv) oppose to particular processing activities, unless those are necessary for the maintenance of the legal relationship with us. We will not discriminate against you for exercising such rights. You also have the right to revoke any consent previously granted.
To request such rights, or for any questions, please email privacy@chargepoint.com and in the subject line of your email, please indicate “Mexico Privacy Rights Request ARCO RIGHTS: (Insert Your Name)”). In addition, please confirm: (i) name of the data subject and email address or means to communicate the respective response; (ii) documents proving your identity, or the identity of legal representative; (iii) clear and precise description of the personal data in respect of which you seek to exercise any of your ARCO Rights; and (iv) documents or information that facilitates the location of the respective personal data.
To the extent that you elect to designate an authorized agent to make a request on your behalf, they must provide appropriate documentation including written signed permission from you, proof of your identity, and verification of their identity; or a valid, designated power of attorney as defined under the Mexican Civil Code.