Privacy Statement

1. Introduction

Evro Mobility Solutions Inc. (“Evro”, “we”, “us”, or “our”)  is an e-Mobility Service Provider (eMSP)  with the capability to provide software, user interfaces, customer billing and support functions to enable electric vehicles (“EV”) users to locate, activate and pay for charging sessions for their EVs. We respect and value your right to data privacy and are committed to protecting your personal data in accordance with Republic Act No. 10173 or also known as the Data Privacy Act of 2012 (hereafter, the “Data Privacy Act” or “DPA”), its Implementing Rules and Regulations (“IRR”), and issuances of the National Privacy Commission (“NPC”) as well as other applicable data privacy laws (hereafter collectively referred to as, the “Applicable Privacy Law”).

This Privacy Statement explains, in general, what personal data we collect, how we use, store, share, protect, retain, and dispose of it, and the rights you have as a data subject. This statement is also in addition to specific privacy notices we provide data subjects whenever we collect personal data from them.

2. Personal Data We Collect

Depending on your interaction to EVRO, we may collect and/or process the following personal data:

2.1. Customer’s Name;

2.2. Email Address;

2.3. Mobile Number;  

2.4. Home or Billing Address;

2.5. Service and Warranty Records; and

2.6. Billing and Payment Information.

2.7. Inquiry and message contents

2.8. Vehicle or mobility interests  

2.9. Test-drive and event information

2.10. IP address, device, browser, log and cookie identifiers  

2.11. Website activity and referral information  

2.12. Location data, if collected  

2.13. Records uploaded through forms

3. Purpose of Processing

We collect the personal information of our customers for the following lawful purposes: 3.1. To communicate to you products, services, advisories, commercial and promotional alerts, advertisements, financial service offers, feedback and surveys relevant to the vehicle/service you inquired into;

3.2. To analyze market demand and trends in relation to how you respond to our Services including user retention and attrition in order to support business development such as new and/or improved products/services and effective marketing campaigns and programs;

3.3. Vehicle inquiry handling, sales, testing, inspection, warranty, and service fulfillment

3.4. Customer account creation and support

3.5. Product support and troubleshooting

3.6. Sustainability Reporting and Compliance – Personal Data may be collected and processed as part of sustainability-related data and supporting documentation for consolidation, validation, reporting, and compliance with applicable sustainability reporting and disclosure requirements. Such Personal Data may also be disclosed to or processed by authorized third-party service providers, including independent assurance providers, as necessary for verification, testing, audit, and assurance activities related to sustainability reporting.

When we collect personal data, we rely on the following criteria for lawful processing: consent, contractual necessity, legal obligation, or EVROs legitimate interests, as allowed under the Data Privacy Act. We also make sure that our data subjects are properly informed of the specific purposes for processing and the lawful criteria we rely on, other than consent, at the earliest possible opportunity.

‍

4. Disclosure of Personal Data to Other Parties

We generally do not disclose your Personal Data with any third party unless we are legally required or allowed to do so or if such action is necessary to protect, defend and/or enforce our legal rights. However, we may need to do so with some of our service providers, affiliates, and our subsidiaries who process such data for and on our behalf and strictly in accordance with the purposes listed above, as follows:

All disclosures are governed by appropriate data processing/compliance, data sharing, and confidentiality agreements, where applicable, in compliance with the Data Privacy Act. It is our policy to inform data subjects of the purposes for engaging third-party service providers, in the case of data processing agreement, and to ensure that disclosures to third parties, in the case of data sharing agreements, are supported by the appropriate lawful criteria under the Data Privacy Act.  

In all cases, we make sure that third parties are contractually obligated to protect your data and hold it confidential.

5. Manner of Storage of Personal Data

We securely store Personal data in the following manner:  

5.1. Secure electronic databases hosted on controlled servers, protected by access controls and encryption; and

5.2. Physical records, where applicable, are stored in locked cabinets within restricted office premises.

We limit the access of your personal information to authorized personnel based on role and operational necessity, subject to monitoring and periodic review to safely secure and store your data.

6. Retention

Your Personal data will be retained only for as long as necessary and relevant to fulfill declared purposes stated above or as required by law, unless extended for other lawful purposes allowed under the law.  

7. Secure Disposal

When your personal data is no longer needed, we dispose of the records of personal data in a secure manner in accordance with our internal retention and disposal policy, unless we are required or allowed by law to keep it. We secure and protect your personal data with appropriate safeguards to ensure confidentiality and privacy, prevent loss, theft, use for unauthorized purposes, and comply with the requirements of the law.

8. How Evro Protects Your Personal Data and Other Information

We take pride in providing the best possible protection in handling our customer’s personal data. Thus, we implement the applicable organizational, security, and technical measures intended to protect the personal information of the customer against any unscrupulous activities in your data. The third parties who are given access to the data subjects Personal Data, including the Shared Personal Data and Other Information are processed in accordance with our Privacy Statement and with the Data Privacy Act, its Implementing Rules and Regulations, and Commissions Circulars.

9.Security Measures

9.1. Organizational Measures

9.1.1. Fully functioning Data Protection Office with a duly appointed Data Protection Officer (DPO)

9.1.2 Functional and periodic privacy training and awareness programs

9.1.3. Periodically reviewed Privacy Impact Assessments (PIAs)

9.1.4. Periodically reviewed privacy policies and procedures covering access control, security incident management, data security, and the exercise of data subjects’ rights, among others.

9.2. Physical Security Measures

9.2.1. Restricted office access

9.2.2. Secured storage areas

9.2.3. Closed Circuit Television (CCTV) Cameras

9.2.4. Visitor access controls

9.3. Technical Security Measures

9.3.1. Encryption of sensitive data

9.3.2. Firewalls and malware protection

9.3.3. Multi-factor authentication

9.3.4. Audit logs and monitoring

9.3.5. Penetration and vulnerability testing

10. Cross-Border Data Transfers

Where personal data is stored or processed outside the Philippines (e.g., cloud servers), Evro ensures an equivalent degree of security by providing protection standards secured by contractual safeguards and strict access controls. Access to personal data stored outside the Philippines is restricted to authorized personnel and subject to contractual and technical safeguards.

11. Rights of Data Subjects

11.1. Right to be informed – We honor your right to be informed of the scope of our personal data processing activities including where and how we collected them, to whom we share them and why, how we secure them, how long we keep them, and how we dispose of them, as well as any changes to such activities before they are applied. ‍

11.2. Right to access – Upon request, you should be able to have reasonable access to your personal data in accordance with our internal procedures. At times, however, we may charge reasonable fees when granting your request takes additional effort due to its volume and the possible removal of information considered to be confidential/propriety or belonging to other data subjects.  ‍

11.3. Right to rectification – You may dispute the accuracy of the personal data we have about you and ask for it to be corrected and/or updated subject to the company’s internal procedures.

11.4. Right to object – You may object to the processing of your personal data whenever you feel that we have no legal basis to do so. However, we may be unable to render our services should the processing objected to is necessary for its performance.  ‍

11.5. Right to suspend and/or withdraw consent anytime – Whenever data processing is based on consent, you may suspend and/or withdraw your consent at any time. If you suspend and/or withdraw your consent, this will not affect the lawfulness of our collecting, using and sharing of your Personal Information up to the point in time that you withdraw your consent. Even if you suspend and/or withdraw your consent, we may still use your information if we have other lawful bases for processing (e.g., fulfillment of contractual obligations and for legitimate business interests) and such information that has been fully anonymized and does not personally identify you. Unless duly communicated to us in writing and which communication we have acknowledged, the consent you have given shall remain in full force and effect, and shall continue to authorize us to process your personal data, including the shared personal data and other information, for purposes stated herein. Suspension and/or withdrawal of consent shall not be presumed from non-use of our products and/or services for any length of time.

11.6. Right to erasure or blocking – You have the right to suspend, withdraw, or order the blocking, removal, or destruction of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, including those unnecessary for the company’s stated purposes. ‍

11.7. Right to damages – You have the right to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information. ‍

11.8. Right to data portability – You have the right, where personal information is processed by electronic means to obtain from Evro a copy of its electronic personal data or have it sent in a portable and accessible format in accordance with its internal rules and regulations.  

12. How to Exercise Your Rights

You may exercise your rights by submitting a written request with our data protection office using the contact details below. Please be advised that apart from a description of the right being exercised, we may also request for additional information to help us understand why the request is being made as well as sufficient proof of identity to ensure that the personal data subject of the request is properly identified.

We will respond within the period prescribed by the Data Privacy Act and its Implementing Rules and Regulations. You may also lodge a complaint directly with the National Privacy Commission if they believe their data privacy rights have been violated.

13. Cookies and other Similar Technologies

EVRO uses cookies and similar technologies to improve [website, product, service] functionality and user experience. You may manage your preferences and settings through Cookie Policy.

Refusal to the use of cookies can be enabled by selecting the appropriate settings on your web browser. However, this may result in not being able to use the full functionality of the website and our products and/or services.

14. Amendments

This Privacy Statement may be updated to reflect changes in law, regulation, or business operations. Updated versions will be posted on our website together with the effective date.

In case of changes that substantially affect how we collect, use, disclose, or otherwise process your personal data, we will notify you before the changes take effect, update the relevant privacy notice, and ensure that the processing remains supported by an appropriate lawful basis. Where consent is relied upon, we will obtain your consent before implementing the changes.

15. Contact Information

Data Privacy Office
EVRO Mobility Solutions Inc.
Email: dpo@evro.acmobility.ph
Address: 932 28th St. cor. 9th Ave., City Center, Bonifacio Global City, Taguig City, Philippines

These Terms and Conditions were last updated on September 22, 2026.