PRIVACY POLICY: MACKVOLT

Effective Date: December 24, 2024 Version: 2.0

1. Introduction

Welcome to Mackvolt, a premier brand of Macksons Power and Energy (Pvt) Ltd, a subsidiary of Macksons Holdings. We are committed to protecting the privacy of our users (“User”, “you”, or “your”) who interact with our EV charging stations, our mobile application (“App”), and our website.

This Privacy Policy describes how we collect, use, process, and disclose your personal data in compliance with the Sri Lanka Personal Data Protection Act, No. 9 of 2022 (PDPA). By using our services, you consent to the practices described in this policy.


2. Information We Collect

We collect information that identifies you or can be used to identify you. This includes:

A. Information You Provide to Us

  • Registration Data: Your full name, NIC number (optional but recommended for verified accounts), mobile number, email address, and mailing address.

  • Vehicle Information: Vehicle make, model, year, and license plate number to ensure compatibility with our charging ports.

  • Payment Information: While we use secure third-party payment gateways (e.g., PayHere, Genie, or IPG providers), we may store “tokens” that represent your card to facilitate faster future payments.

B. Information Collected Automatically

  • Location Data: To show you the nearest Mackvolt stations, we collect precise GPS data from your mobile device. You can disable this in your OS settings, but the App functionality will be limited.

  • Charging Session Data: We log the unique ID of the charging station used, start/end times, energy consumed (kWh), and the total cost in LKR.

  • Device Information: IP address, device model, operating system, and App version for troubleshooting and security.


3. Legal Basis for Processing

In accordance with the PDPA of Sri Lanka, we process your data based on:

  1. Contractual Necessity: To provide the EV charging services you requested.

  2. Consent: When you opt-in to marketing or share your location.

  3. Legal Obligation: To comply with Sri Lankan tax laws and financial reporting.

  4. Legitimate Interest: To prevent fraud and improve the safety of our charging network.


4. How We Use Your Information

  • Service Delivery: Managing your charging sessions, processing payments, and providing real-time station availability.

  • Customer Support: Responding to inquiries or troubleshooting issues at a specific charging station.

  • Safety and Maintenance: Monitoring our physical infrastructure to prevent misuse or damage.

  • Marketing (With Consent): Sending you updates on new Mackvolt station launches, Macksons Holdings promotional offers, or loyalty rewards.

  • Government Compliance: Reporting to the Public Utilities Commission of Sri Lanka (PUCSL) or other regulatory bodies if required.


5. Data Sharing and Disclosure

We do not sell your personal data. We only share information with:

  • Macksons Holdings Entities: We may share data with our parent company for centralized administrative and reporting purposes.

  • Third-Party Service Providers: Cloud hosting (e.g., AWS or Google Cloud), SMS gateway providers for OTPs, and payment processors.

  • Maintenance Partners: Technical teams who may need session logs to fix a malfunctioning charger.

  • Law Enforcement: When required by a court order or to comply with the laws of the Democratic Socialist Republic of Sri Lanka.


6. Data Security and Retention

  • Security: We implement industry-standard encryption (SSL/TLS) for data in transit and at rest.

  • Retention: We retain your data for as long as you have an active Mackvolt account. If you close your account, we may retain certain data for up to 7 years to comply with Sri Lankan tax and audit regulations.


7. Your Rights (Under Sri Lanka PDPA)

As a data subject in Sri Lanka, you have the right to:

  1. Access: Request a copy of the personal data we hold about you.

  2. Correction: Request that we update any inaccurate or incomplete information.

  3. Withdrawal of Consent: Withdraw your consent for marketing at any time.

  4. Erasure: Request the deletion of your account (subject to legal retention requirements).

  5. Complaint: Lodge a complaint with the Data Protection Authority of Sri Lanka if you believe your rights have been violated.


8. Cross-Border Data Transfer

While we primarily process data within Sri Lanka, some technical data (like App analytics) may be stored on servers located outside the country. We ensure that these service providers offer a level of protection equivalent to Sri Lankan law.


9. Changes to This Policy

We may update this policy periodically to reflect changes in our services or local laws. We will notify you of any significant changes via the App or email.


10. Contact Our Data Protection Officer

If you have questions about your privacy or wish to exercise your rights, please contact our DPO:

Attn: Data Protection Officer Macksons Power and Energy (Pvt) Ltd ,No 443, 5th floor, Galle Road, Colombo 03  Email:  privacy@mackvolt.lk Phone: 070 1977 100