Privacy policy

This policy explains how Zepi collects and uses personal data when you use this website, submit a host enquiry, or rent a power bank from a Zepi kiosk. We operate a shared charging network in Ghent, Belgium, and process personal data in line with the EU General Data Protection Regulation (GDPR).

Who is responsible

Zepi is the controller of the personal data described here. We run the kiosks, this website, and the rental service.

What we collect

Host enquiries. If you ask to host a kiosk, we collect your name, venue, email, city, and any note you send so we can follow up.

Rentals. When you rent a power bank, we process the records needed to run the service: kiosk location, time of rental and return, amount charged, and a payment confirmation. We do not store full card numbers on this website.

Website. Our hosting environment may process technical logs such as IP address, browser type, and time of visit, in order to operate and secure the site.

How we use data

• To respond to host enquiries and discuss placing a kiosk
• To provide the rental, take payment, confirm returns, and charge a replacement fee if a bank is not returned
• To keep records required for accounting and legal compliance
• To operate, secure, and improve this website

Legal bases

We process rental data to perform our contract with you. Host enquiries are processed as steps toward a possible agreement, or on the basis of our legitimate interest in growing the network. Technical logs and fraud prevention rest on legitimate interest in a secure service. Invoicing and tax records are processed where we have a legal obligation.

Payments

Card, Apple Pay, and Google Pay transactions are handled by a payment provider. Card details are processed by that provider, not stored by Zepi as full card numbers.

Sharing

We do not sell personal data. We share it only with service providers who help us operate (such as hosting and payment processing), when required by law, or at your direction.

How long we keep it

Host enquiries are kept for as long as needed to follow up, and for a reasonable period afterwards. Rental and payment records are kept for the period required by accounting and tax law, and as needed to handle returns, disputes, and replacement charges. Technical logs are kept only as long as needed for security and operations.

Your rights

Where the GDPR applies, you may request access to your personal data, correction, erasure, restriction of processing, objection, or portability. You may also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

Cookies

This website does not use advertising or analytics cookies. Essential technical storage required to run the site may be used by our hosting environment.

Security

We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure.

Changes

We may update this policy. The date at the top of this page is the latest version.

Contact

For privacy questions or to exercise your rights, use the Host a kiosk form and mention that your message is a privacy request.