Privacy policy

Last updated 4 August 2026

01Who we are

ZAPT Powerbanks ("ZAPT", "we", "us") operates zaptpowerbanks.co.uk and places powerbank rental kiosks in venues across the UK. This policy explains what personal information we collect through this site, how we use it, who we share it with, and the rights you have over it. ZAPT is the trading name of ZAPT POWER LTD, a company registered in England (company no. 17294406) with its registered office at 66 Paul Street, London, EC2A 4NA. For UK data protection law, ZAPT POWER LTD is the controller of the information described here.

This policy covers the website. Renting a powerbank at a kiosk runs through the on-kiosk flow, which has its own terms.

02Information you give us

Venue registration.When a venue signs up we collect the venue name, business address, a delivery address if different, the contact's name, email address and phone number, and marketing preferences.

Partner registration.When a venue completes full partner registration we also collect bank details (account holder name, sort code and account number) so we can pay the venue's revenue share.

Referral programme. When you join the referral programme we collect your name, email address, phone number and, where given, a company website. When you submit a venue lead, we collect the contact details you provide for that venue.

Contact and bookings. If you email, call or message us on WhatsApp, we receive what you send. If you book an introduction call, Calendly collects your name, email address and chosen time on our behalf.

03Information collected automatically

The site uses Vercel Analytics and Speed Insights. Both are cookieless and aggregate: they record page views, country-level location, device type and performance timings without building a profile of you or following you across other sites.

When you submit a form, our servers process your IP address to rate-limit repeat submissions; this runs in server memory and is discarded within an hour. Our hosting provider keeps standard server logs, which include IP addresses, for security and debugging.

The site sets no advertising or tracking cookies. After you submit a registration form, we store a timestamp in your browser's local storage to stop accidental duplicate submissions. The Calendly scheduler loads only when you choose to open it, and once loaded may set its own cookies under Calendly's privacy policy.

04How we use it

Each use rests on a lawful basis under UK GDPR:

Setting up and running a venue partnershipContract
Paying revenue share to partner bank accountsContract
Running the referral programme and paying referral feesContract
Responding to enquiries and booked callsLegitimate interest
Marketing updates you opted intoConsent, withdrawable any time
Rate limiting, security and abuse preventionLegitimate interest
Keeping business and tax recordsLegal obligation

05Who we share it with

A small number of service providers run the site with us:

SupabaseDatabase hosting for registration, partner and referral records
VercelSite hosting, analytics and server logs
CalendlyCall scheduling, when you book a call
WhatsApp (Meta)Only if you choose to message us there

We may also disclose information where the law requires it, and personal information may transfer as part of a business sale or restructure. We do not sell personal information, and we share none of it with advertising networks.

06How long we keep it

Venue and partner recordsDuration of the partnership, then the period UK tax law requires, typically six years
Bank detailsWhile revenue share payments run
Referral recordsWhile your referral membership is active
EnquiriesAs long as needed to resolve and follow up
AnalyticsAggregated; no personal record retained
Rate-limit IP dataUnder one hour

07Security

The site runs over HTTPS. Form submissions are validated and rate-limited, and records are held in an access-controlled database. Bank details are collected only at partner registration and are accessible only to the people who process payments.

08Your rights

Under UK GDPR (and the EU GDPR if you are in the EEA) you can ask us to access the personal information we hold about you, correct anything inaccurate, delete it, restrict or object to how we use it, or provide it to you in a machine-readable format. Where consent is the basis, you can withdraw it at any time.

Email info@zaptpowerbanks.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you are in the EEA.

09Other regions and children

The site is aimed at UK venues. If you visit from elsewhere, we handle your information as this policy describes. For California residents: we do not sell or share personal information as defined by the CCPA.

The site and our partner services are for businesses and are not directed at children. If you believe a child has given us personal information, contact us and we will delete it.

10International transfers

Our database is hosted in London, so registration, partner and referral records stay in the UK. Some service providers process data outside the UK: our hosting and scheduling providers operate in the United States. Where data leaves the UK, transfers rest on recognised safeguards: UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses.

11Changes and contact

When this policy changes we will post the new version here and update the date at the top. For material changes affecting venue partners, we will tell partners directly.

Questions about this policy or your data: info@zaptpowerbanks.co.uk or +44 20 8050 7880, or by post to ZAPT POWER LTD, 66 Paul Street, London, EC2A 4NA.

ZAPT POWER LTD · Company No. 17294406 · Registered in England