Privacy Policy

Effective Date: March 17, 2025

At AddaVolt, we are committed to protecting the privacy and security of our users’ personal data. This Data Privacy & Compliance Policy explains how we collect, use, store, and protect your information when you access and use our website and related services, in accordance with the European Union’s General Data Protection Regulation (GDPR) and the Philippine Data Privacy Act of 2012.

1. Introduction

AddaVolt Energy Corp. (“AddaVolt,” “we,” “our,” or “us”), a corporation duly organized and existing under the laws of the Republic of the Philippines, values the confidentiality of personal data and is fully committed to ensuring compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and all issuances of the National Privacy Commission (“NPC”).

This Privacy Policy sets forth the manner by which AddaVolt collects, processes, shares, stores, and protects personal data, as well as the rights of data subjects in relation thereto. By accessing our website, downloading or using our mobile application, availing of our charging services, or entering into agreements with us as an SME host or partner, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data in accordance with this Privacy Policy.

This Policy applies to all users of the AddaVolt website and services. By using our Site, you consent to the collection and use of your personal data as described in this Policy.

2. Personal Data Collected

AddaVolt collects personal data directly from data subjects, from transactions conducted through our application or charging stations, and from authorized third parties. Such personal data may include, but is not limited to: identification data such as name, contact information, and address; transaction and account data such as charging sessions, timestamps, payment references, and receipts; device and usage data such as IP address, device identifiers, browser type, application version, and geolocation; SME host data such as business information, tax identification, and banking details; and records of communications, complaints, or support inquiries. AddaVolt may also obtain information from publicly available sources or affiliates and partners in order to fulfill contractual or legal obligations.

3. Purposes of Processing

The personal data collected shall be processed solely for legitimate, declared, and specific purposes. These purposes include the provision of charging and related services; the administration of user accounts; the processing of payments and collections; the fulfillment of contractual obligations to SME hosts and partners; customer support and dispute resolution; compliance with regulatory and tax obligations; the performance of analytics, profiling, and segmentation designed to enhance user experience; the conduct of marketing campaigns and promotional activities subject to the data subject’s consent; and the implementation of security and fraud detection measures across our network.

4. Sharing and Disclosure of Data

AddaVolt may disclose personal data to third parties when necessary for the fulfillment of the foregoing purposes. These third parties may include service providers such as cloud hosting platforms, payment processors, communications partners, and analytics providers; SME hosts, with respect to aggregated transaction data relevant to revenue-sharing; and government agencies as required under law.

AddaVolt may likewise disclose personal data within its corporate group, including affiliates and subsidiaries under ASDF Groupe for purposes consistent with this Privacy Policy. In the event of a merger, acquisition, or other corporate restructuring, personal data may form part of the transferred assets, subject to confidentiality safeguards.

AddaVolt does not sell personal data. Where transfers outside the Philippines are necessary, AddaVolt shall ensure that appropriate contractual, organizational, and technical safeguards are in place.

5. Data Retention

Personal data shall be retained only for as long as is necessary to fulfill the declared and legitimate purposes for which it was collected, or as required by applicable laws and regulations. User account information shall be retained for five years from account closure. Transaction and payment data shall be preserved for ten years in compliance with revenue regulations. Charging session logs shall be maintained for twenty-four months and thereafter anonymized. Marketing consents and opt-out records shall be stored for five years from the date of withdrawal. SME host contracts and related payment records shall be preserved for ten years.

AddaVolt reserves the right to retain data for longer periods when required by law, in the exercise or defense of legal claims, or when necessary for regulatory audits. Upon expiration of the retention period, data shall be securely deleted, anonymized, or otherwise disposed of in a manner consistent with industry standards and NPC regulations.

6. Data Subject Rights

Data subjects are entitled under the Data Privacy Act to the rights to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to damages. Requests for access to or copies of personal data may be subject to a reasonable administrative fee, particularly in cases of repetitive or manifestly excessive requests. All requests shall be acted upon within thirty calendar days from receipt, extendible for another fifteen days upon notice to the data subject in cases of complexity or volume. Requests must be accompanied by sufficient proof of identity and may be submitted through the contact details of our Data Protection Officer.

7. Security Measures

8. Cookies and Online Tracking

AddaVolt’s website and mobile application utilize cookies and similar technologies to enable functionality, collect analytics, and improve user experience. Data subjects may manage preferences through the cookie consent banner. Rejection of non-essential cookies may limit the functionality of certain features, such as station mapping or personalized recommendations.

9. Children’s Data

AddaVolt’s services are not directed toward children under eighteen (18) years of age. If personal data of a minor has been inadvertently collected, the parent or legal guardian may request its deletion by contacting our Data Protection Officer.

10. Data Protection Officer

For any questions, concerns, or requests relating to the processing of personal data, or to exercise your rights under the Data Privacy Act, you may contact our Data Protection Officer through the following details:

Email: [email protected]
Address: Right Wing, Unit 9, Lower Ground Floor, Goshen Land Towers, Upper General Luna, Baguio City Philippines 2600
Phone: +63 961-565-9289

11. Policy Updates

This Privacy Policy may be revised or updated from time to time to reflect changes in the law, regulatory guidance, or AddaVolt’s internal policies and practices. Any material changes shall be published on our website and indicated with a revised effective date. Continued use of the services after such publication shall constitute acceptance of the updated policy.