---

1. Who We Are

Evly Pty Ltd (ABN: 54946179665) ("Evly", "we", "us", "our") is a technology company incorporated in Tasmania, Australia. We operate the Evly platform — a mobile application and website that connects EV owners with participating energy retailers to facilitate charging credits on monthly electricity bills.

---

2. Information We Collect

We collect the following categories of personal information:

Category	Information collected	Required?
Identity	Full name, date of birth	Yes
Contact	Email address, phone number	Yes
Vehicle	EV make, model, and year	Yes
Energy account	Energy retailer name, account reference (read-only access only)	Yes
Charging sessions	Session date, time, location, kWh consumed, charger type, session photo (if provided)	Yes
Location	GPS location when using the app to find supported chargers (only when app is in use)	Optional
Device	Device type, operating system, app version, unique device identifier	Automatic
Usage	App interactions, screens viewed, features used, session duration	Automatic
Communications	Messages sent through contact forms, support requests, feedback	When provided
Photos	Photos of charging sessions uploaded by the user	Optional

---

3. How We Collect Your Information

We collect your personal information through the following means:

3.1 Directly from you

• When you register for an Evly account
• When you link your energy retailer account
• When you log a charging session manually in the app
• When you upload a photo of a charging session
• When you complete the waitlist form on our website
• When you contact us via the contact form, email, or phone
• When you respond to surveys or provide feedback

3.2 Automatically

• When you use the Evly app — usage data and device information are collected automatically
• Location data is collected when you use the charger finder feature and have granted location permission
• Cookies and similar tracking technologies on our website (see Section 10)

3.3 From third parties

• From your participating energy retailer — to verify your account and confirm credit eligibility
• From charging network operators — to verify session data where applicable

---

4. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Information used	Legal basis
Creating and managing your account	Identity, contact	Contract performance
Connecting your energy retailer account	Energy account details	Contract performance / consent
Logging and verifying charging sessions	Charging session data, photos, location	Contract performance
Calculating and facilitating bill credits	Session data, energy account, vehicle	Contract performance
Sending you account and session notifications	Contact, session data	Contract performance
Improving the Evly platform	Usage data, feedback	Legitimate interest
Sending product updates and pilot news	Contact, preferences	Consent
Fraud detection and prevention	All data	Legitimate interest / legal obligation
Complying with legal obligations	All data as required	Legal obligation
Responding to your enquiries	Contact, communications	Contract performance / legitimate interest

We will not use your personal information for any purpose that is incompatible with the purposes listed above without your prior consent.

---

5. Sharing Your Information

5.1 Who we share with

We only share your personal information with third parties where necessary and in the circumstances described below:

• Participating energy retailers — to facilitate the calculation and application of credits to your electricity bill (see Section 6)
• Charging network operators — to verify eligible charging sessions where applicable
• Cloud hosting providers — to store and process data securely on our behalf
• Analytics providers — to help us understand how the app is used (anonymised or aggregated data only)
• Legal and regulatory authorities — where required by law, court order, or regulatory obligation
• Professional advisers — lawyers, accountants, and auditors under strict confidentiality obligations

5.2 What we never do

• We never sell your personal information to any third party
• We never share your information for third-party marketing purposes without your explicit consent
• We never provide your information to advertisers

---

6. Energy Retailer Data Sharing

To facilitate the Evly credit system, we share the following information with your participating energy retailer:

• Your name and account reference number
• Details of eligible charging sessions (date, time, location, kWh consumed)
• The calculated credit amount for each eligible session

This sharing is necessary for the core function of the Evly platform and is covered by your consent at the time of account setup. Your energy retailer's use of this information is governed by their own privacy policy and your energy retail agreement with them.

---

7. Data Storage and Security

7.1 Where we store your data

Your personal information is stored on secure cloud servers located in Australia. Where data is processed or stored outside Australia, we ensure equivalent privacy protections are in place in accordance with the Australian Privacy Principles.

7.2 How we protect your data

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest
• Access controls limiting who can access personal data internally
• Regular security reviews and testing
• Secure authentication including multi-factor authentication for internal systems

7.3 Data breaches

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme.

---

8. Data Retention

We retain your personal information for as long as necessary to provide the Evly service and comply with our legal obligations. Specific retention periods are as follows:

Data type	Retention period
Account information	Duration of your account + 2 years after closure
Charging session records	7 years (for financial and tax compliance)
Session photos	2 years from upload, or until account closure
Communications and support records	3 years from last contact
Usage and analytics data	2 years (anonymised after 12 months)
Waitlist data	Until you unsubscribe or 2 years from signup

When data is no longer required, we securely delete or anonymise it.

---

9. Your Rights and Choices

Under the Australian Privacy Principles, you have the following rights in relation to your personal information:

9.1 Access

You can request a copy of the personal information we hold about you at any time by contacting hello@evly.com.au. We will respond within 30 days.

9.2 Correction

If you believe any information we hold about you is inaccurate or out of date, you can request a correction. You can also update most information directly in the Evly app under your account settings.

9.3 Deletion

You can request deletion of your personal information by contacting us. We will delete your data unless we are required to retain it for legal or compliance purposes.

9.4 Opt-out of marketing

You can opt out of marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us directly. Opting out of marketing does not affect service-related communications.

9.5 Location data

You can withdraw location permission at any time through your device settings. The charger finder feature will not function without location access, but all other Evly features will remain available.

9.6 Account closure

You can close your Evly account at any time by contacting hello@evly.com.au. Upon closure, your data will be retained only as required by law and then securely deleted.

---

10. Cookies and Tracking

10.1 Website cookies

Our website uses cookies and similar technologies to improve your browsing experience and understand how our site is used. We use:

• Essential cookies — required for the site to function correctly
• Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

10.2 App analytics

The Evly app uses analytics tools to help us understand usage patterns and improve the app experience. Analytics data is aggregated and does not identify you personally where possible.

---

11. Children's Privacy

The Evly platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at hello@evly.com.au.

---

12. Third-Party Links and Services

The Evly app and website may contain links to third-party websites or services, including charging network operators and energy retailer portals. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

---

13. International Data Transfers

Some of our third-party service providers may be located outside Australia. Where personal information is transferred internationally, we take steps to ensure that the recipient provides equivalent privacy protections to those required under Australian law, including through contractual arrangements.

---

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. We will notify you of material changes by email or by a prominent notice in the Evly app at least 14 days before the changes take effect.

The current version of this Privacy Policy is always available at evly.com.au/privacy. The date at the top of this policy indicates when it was last updated.

---

15. Contact and Complaints

If you have any questions, concerns, or complaints about how we handle your personal information, please contact our Privacy Officer:

We will respond to all privacy enquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au