Privacy Notice

We are committed to providing our customers with truly excellent customer service. We recognise that customers value their data and privacy, and so we treat our customer data with great care. This notice sets out how and when we collect, use and share your personal information that you, or others, provide to us.

This Privacy Notice was last updated on 14 October 2026.

We are Octopus Electric Vehicles Limited (“Octopus EV”), with registered company number 10754317 and registered address at 5th Floor, UK House, 164-182 Oxford Street, London W1D 1NN. We are a subsidiary of the Octopus Energy Group.

Octopus EV also trades under the name OEV Low Carbon Tech Financing when providing consumer financing solutions including loans for the purchase of low carbon technology.

Octopus EV has appointed a Data Protection Officer, who is responsible for overseeing questions in relation to this Privacy Notice. If you’d like to speak to anyone about your data please contact data-protection@octopusev.com. 

Depending on the product you choose, we may act as a vehicle lessor/provider of the leasing arrangement, consumer credit lender, credit broker, vehicle owner, insurance intermediary or introducer.

In most cases we lease vehicles directly to our customers in relation to the following products:

• Personal contract hire
• Salary sacrifice schemes
• Business contract hire
• Vehicle to Grid Personal contract hire

Further information is available here.

We only collect and process data about you where we have a reason for doing so and only where that reason is permitted under data protection law. 

It’s important that you keep your personal information with us up to date, so please let us know if anything changes. 

This section sets out how we collect and use your data. 

When you make enquiries about our products online, over the phone or face to face, we will use your personal information to provide you with quotations and to arrange or offer vehicle leasing and finance. This information may include your name, address, date of birth, email address, phone number, payment details and your preferences (for example about marketing communications or your electric vehicle).

To understand who uses our services, we also collect information about you (which may include demographic information including your age, gender, salary, and the nature of your employment) to improve and create new products and services that are relevant to you.

We keep track of how you interact with us - like noting what communications you find most helpful and how you have used our website - so we can improve our services. More information can be found below under Technical information and analytics.

We rely on different legal bases to handle your personal information.

We would gain consent, for example, where you choose to subscribe to receive updates from us.

Where it is necessary for our legitimate interests, we may use your personal information to follow up on an enquiry or quotation you have requested. 

We may also identify from our interactions with you that you benefit from additional support. Where appropriate, we may record relevant support needs so that we can provide that support where needed.

Where information is necessary for us to provide a quotation, process an application, enter into or manage a contract, or meet a legal obligation, we may not be able to provide the relevant service if you do not provide the required information. 

Information about marketing preferences and additional support needs is optional. Choosing not to provide this information will not affect your ability to apply for or access our products and services.

We will share your details with partners and funders in order to provide you with a quotation and to arrange vehicle leasing and finance - please see Section 3 (Sharing your information) below for more details.

Depending on the product or service you apply for or use, including vehicle rental, leasing, finance or insurance, we may collect the following categories of personal information. The personal information we collect about you may vary depending on whether you are applying to join your employer’s salary sacrifice scheme, or a business or personal contract hire:

• Identity: We process your title, name, date of birth, gender, driving licence number (including licence type, years held)
• Contact: We process your physical and email addresses, phone numbers;
• Employment: occupation type, occupation, industry, secondary occupation.
• Other personal and household information: We process your marital status, employment status, income information, proof of UK residency (including status and history), home ownership, whether you have children, own/use other vehicles
• Driving and Insurance History: We process information relating to any driving claims (including date, type, cost, and impact on no claims bonus)
• Criminal Convictions & Driving Endorsements: We process data relating to your driving history, motoring endorsements, and driving convictions.
• Health & Additional Support (Vulnerability) Data: We capture and process specific special category information regarding your health and personal circumstances, including your medical history (obtained to arrange vehicle insurance or discussed if you become unable to drive due to medical reasons during your lease), alongside data which indicates you may require additional / specific support.
• Information about others: who will be (or are) included on your insurance policy, salary sacrifice agreement with your employer, or personal contract hire agreements (which you should have their permission to share)

We process the above information utilising appropriate legal bases which include (but are not limited to) the fulfilment of a contract, our legal obligations, or under legitimate interests. We maintain a record of the legal bases for our data handling internally and review and update these in line with ICO guidelines.

If you provide us with personal data about another person (such as for an additional driver), you confirm that you’ve got permission from them to share it with us, have made them aware of how we will process their data and have provided them with a copy or link to this privacy notice. We strongly encourage any person whose personal data you provide to us to read this privacy notice. (Note for Salary Sacrifice businesses: this privacy notice disclosure is required by the employer).

Other information related to you and the vehicle will include: 

• Details of the vehicle being insured: make, model, registration, etc., and its location (for more information on location data we receive please see the ‘Information we receive from third parties’ section of this notice).
• Insurance Policy Details: Quote type, start date, duration of the policy.

This information is used in a number of ways including aggregating all data across our systems to create, improve, and supplement our knowledge to identify correlations between data to further our learning and efficiency.

We gather this data in order to arrange vehicle finance and to comply with the law to ensure that your vehicle will be appropriate and affordable to you.

When you apply for a loan to purchase low carbon technology we, trading as OEV Low Carbon Tech Financing, will collect additional information for the purposes of assessing and administering the loan, including:

• nationality, country of birth, date of birth, UK residency, and national insurance number;
• current address details and history for the last 3 years;
• occupation, annual income, employment status, employer details, time periods in that occupation, and bank details for processing payments.
• credit history which we obtain from Credit Reference Agencies (CRAs) including data which originates from Royal Mail (UK postal addresses), local authorities (electoral roll), the insolvency service, Companies’ House, other lenders and providers of credit (who supply data to the CRAs), court judgments decrees and administration orders made publicly available through statutory public registers (see the section on ‘Credit Reference Agencies’ below) and information which we obtain from fraud prevention agencies.

This information is used in a number of ways including to:

• assess your creditworthiness and, where relevant, whether you can afford to repay the loan.
• perform necessary identity checks, manage your loan account, process your monthly instalment payments, and service the life of the loan.
• comply with our legal and regulatory obligations, including those set out by the Financial Conduct Authority (FCA), regarding consumer credit and the prevention of financial crime.
• comply with our contractual obligations with third parties in order to enable us to deliver services to you.

To facilitate these purposes, we will share your personal data with CRAs and fraud prevention agencies. We will also share data with funding partners within the Octopus Energy Group, who provide the capital for the loan. Please refer to Section 3 (Sharing your information) for further details on data sharing.

The legal basis for this processing is primarily for the performance of a contract (your loan agreement) and to comply with our legal and regulatory obligations as a financial services provider.

Where we are obliged to do so by law and in line with our risk and anti-money laundering policies, we may use your information for the following purposes:

• to carry out affordability and creditworthiness assessments (for applicable products)
• to prevent and investigate fraud, money laundering and other financial crime, verify your identity, and meet applicable legal and regulatory requirements.
• if fraud is detected, this may be recorded and could affect future applications for certain services, finance, or employment. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights, can be found at www.cifas.org.uk/fpn or by contacting our Data Protection Officer at data-protection@octopusev.com
• to make sure all nominated drivers are qualified to drive;
• to check your driving history; and
• to process any fines that you have received.

For occasions where we need to process personal data relating to criminal convictions or offences such as endorsements (penalty points for a driver), we only process it where permitted by data protection law and with appropriate safeguards in place. 

When you apply for personal contract hire financing, we use an automated system to assess your application against our credit, affordability, identity and fraud prevention criteria. For some applications that system will approve or decline you without a member of our team reviewing the decision. Other applications are referred to one of our underwriters, who makes the decision themselves. 

We do this because it is necessary in order to enter into a contract with you, and because we are required to assess whether the finance is affordable for you before we provide it. The information used is set out in this Section 2, and includes the information you give us and the information we receive from credit reference agencies and fraud prevention agencies. 

If your application was declined automatically you have the right to ask us to look at it again with a person involved. You can also tell us anything you think we should have taken into account, and you can challenge the decision. This must be done within 30 days of the initial decline decision being made and this process of appeal is detailed in our communications which confirm that decision.

This section applies if you have opted in to receive marketing communications from us or have previously expressed an interest in our products and services and have not opted out. We will process your personal information (your name, address, contact details and other relevant personal information you’ve given us) to provide you with marketing communications in line with any preferences you have told us about.

Examples of our messaging can include:

• Helping you through the quote journey towards selecting the right electric vehicle (EV) (our EV specialists will contact you based on your quote activity)
• Keeping you up to date on the latest news of cars of interest to you
• Informing you of product updates based on your previous interests that you have previously shared with us and based on our legitimate interests to inform you of new EVs becoming available
• Sharing news/information by post, phone, targeted or generic adverts about our products and services from other Octopus Energy Group companies because of our legitimate interest to promote the success of the products and services that you have expressed an interest in.

Every email we send to you for marketing purposes will also contain instructions on how to unsubscribe from receiving them.

Where you have responded to an advert online by clicking through to our website we may record any associated information you share with us and may pass basic information back to the social media platform you used to improve future marketing.

We never share your information with any third parties for their direct marketing purposes.

We may sometimes provide personalised advertising via third party platforms (such as Google, Bing, Instagram, Facebook and Linkedin). For example, we will securely scramble your data into a unique, unreadable code (called hashing) and cross-reference it with platforms like Facebook. If you have a profile with Facebook, we’ll ask them to exclude you from irrelevant adverts, such as “join Octopus Electric Vehicles ” adverts and send you more relevant adverts instead. We do this on the basis of legitimate interest to ensure that you receive more tailored and relevant information about our products and services. 

If you apply for or enquire about our Powerloop Vehicle to Grid (V2G) offering, we will collect information relevant to the provision of this scheme, including your name, address, and contact details. Powerloop is an Innovate UK funded project and we are delivering it to customers in collaboration with six other consortium partners (UK Power Networks, Guidehouse, Chargepoint Services, Energy Savings Trust, Octopus Energy, and Open Energi).

We will be gathering data from the V2G charger and a telematics device (also known as a Black Box) which will be installed in your car in order to collect usage data on a number of metrics, including how you charge and use your vehicle. We will need to report the aggregate data from the project to Innovate UK, as well as to the Department for Business, Energy and Industrial Strategy (BEIS). We do this because all Innovate UK V2G projects are being used to inform BEIS. We will not pass on any personal data, and data collection will be fully anonymised and will not be used for any decision purposes on an individual basis. 

We will use your personal information to provide you with a more effective user experience, such as by displaying services we think you will be interested in. Using your information in this way means that your experience of our website and apps will be more tailored to you, and the content you see on our website may differ from someone else.

We share anonymised (not personally identifiable) and aggregated data with third party analytics and search engine providers that assist us in the improvement and optimisation of our website, apps and services.

We will use your personal information for the purposes of administering our website and apps, making them more secure, including troubleshooting, data analysis, testing, research, statistical and survey purposes. We process your data for this reason because we have a legitimate interest to provide you with the best experience we can, and to ensure that our website and apps are kept secure.

You can prevent us from using your personal information in this way by using the “do not track” functionality in your internet browser. If you enable “do not track” functionality, our website may be less tailored to your needs and preferences.

When you visit our website, we will automatically collect the following information:

• technical information, including the IP address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
• information about your visit, including the full webpage address, how you navigate across our website (such as the order of pages you visit,, how long you interact with them and what links you click).; and
• when using our apps, the number of users on the app, session duration, the operating system used, device model information, first launch, app opens and updates, the occurrence of software bugs, and any in-app purchases.

We may also collect information on your location on our websites and apps, such as your location data when accessing the website or apps in line with the location settings on your phone or internet browser. This can be disabled or amended via the relevant iOS/Android platforms or in your internet browser settings.

We also work closely with various third parties, including advertising networks, analytics providers, hosting providers and search information providers from whom we may also receive general aggregated anonymous information about you.

We collect this information through the usage of cookies on our website and webapps in order to ensure they work efficiently and securely and to improve our product offering. You always retain complete control over your choice in non-essential cookie functionality and can revisit, update or change your cookie preferences at any time by clicking the link available in our website footer titled ‘Update cookies’. You may also be able to enable “Do Not Track” functionality within your internet browser settings. If you do either of these things, this may make your experience on our website feel a bit less tailored to you.

We are always looking for ways to make driving an electric vehicle better, for both our customers and for the planet. We sometimes process your data to further develop our product/services, where we have a legitimate interest for doing so, for example:

• to better understand our customer demographic and the content of customer communications and requests to create more relevant campaigns, products and services;
• to make predictions about future behaviour based on current behaviour, to help develop and tailor our products and services;
• to build a profile personally for you, so we can do things like show you products and services that we think will be of particular interest and relevance to you; and
• for data analysis, testing, research, statistical and survey purposes.

Where we do process your personal data, we rely on legitimate interests to process your data in this way and we always carry out a “balancing” test in line with the ICO’s guidance to ensure that our processing is necessary and is not outweighed by your rights to privacy.

We utilise Artificial Intelligence (AI) technologies to support our operational functions and enhance our services. This may involve the processing of your personal information as necessary for the effective functioning of these AI tools.

Where we employ AI in our operations, we are committed to ensuring that:

• We comply with all applicable data protection and artificial intelligence laws and regulations;
• The use of AI is appropriately supervised by our trained staff;
• We take measures to ensure the accuracy, fairness, and security of AI-driven processes involving personal data; and
• We implement safeguards to mitigate any potential risks associated with the use of AI.

Your data may be used in the following scenarios:

• Standardised responses: Customer service teams handling routine questions and queries. Any message sent into our teams (and the data within these messages) may be processed by AI in order to provide an automatic, standardised response where appropriate.
• Tailored responses: The data we hold about you, your vehicle or financial product may be used by AI in order to provide a more accurate automated, tailored response. For example; if requesting an update on the lead time for your vehicle order, our AI agent may be able to retrieve this data and send a response faster than needing a human agent to review.
• Quality Assurance (QA) and Compliance: As an FCA-regulated business, we maintain high quality-management standards across all of our products and services. Written and verbal communications with our teams may be reviewed by AI to provide coaching and feedback to our employees, improve our service delivery, and ensure we are meeting our regulatory obligations.
• Transcription and Record-Keeping: Create written transcripts of meetings and phone calls held between our employees and third parties (including customers, partners, and suppliers). These transcripts are securely retained to maintain a transparent record of our communications and to provide evidence that we are fulfilling our regulatory obligations.

Where we use AI to make or support a decision about you, we make sure there is appropriate human oversight and that you can challenge the decision by contacting us using the details set out in this privacy notice. Automated decision making in credit and finance applications is described in Section 2 above (Automated decision-making in credit and finance applications).

As well as the information you provide us with directly, we also receive information from some third parties.

Where we manage a salary sacrifice scheme on behalf of your employer, we may receive contact information via your employer to contact you to inform of the scheme. They will also inform us of changes of circumstance, confirmation of lease end and reasons why (relevant to early termination waiver applications).

We work with various affiliates and partners, such as employee benefit platforms, price comparison websites, telesales agencies and door-to-door sales agencies, and if you sign up to our services through one of our affiliates or partners they may receive a fee as part of that referral.

We also work with credit reference agencies (CRAs) for financial information relating to creditworthiness and product suitability. The identities of these CRAs and ways that they process personal data, are explained in more detail at www.callcredit.co.uk/crain, www.equifax.co.uk/crain and www.experian.co.uk/crain. Please visit www.cifas.org.uk/fpn for more information of how your personal information will be used by us and fraud protection agencies.

Penalty charges and fixed penalty notices are received from our fines management provider, as Octopus EV is and remains the owner of the vehicle during the term of your lease.

Your EV will have the ability to collect telematics (including but not limited to odometry/mileage, location, battery health, service status) data from the manufacturer.

We process telemetry data received via a third party API that aggregates data from the vehicle manufacturer (OEM). Telemetry refers to the automatic collection and transmission of data about a vehicle's performance and condition by the car’s manufacturer. The car sends data to be analysed, often to the manufacturer or a service centre. This data informs us of the health and state of our fleet of vehicles . Data we can receive varies according to what is available from each OEM and what the driver may have accepted with the manufacturer’s privacy notice, which can include but is not limited to;

• Location (with a date/timestamp): so we can identify when
  • in the event of reported theft, and/or
  • to assist in tracking delivery progress, and/or
  • to assist in collection/recovery of the vehicle after a lease is ended.
• Vehicle details: so we can reach out with proactive alerts to drivers relating to brake fluid, brake status, mileage, mileage until next service due, service required due date and status, maintenance state, tyre pressures (KPI), and
• Battery information to monitor battery health: voltage, capacity, charging speed/status, state of charge, range, temperature)

The data we receive may vary in frequency depending upon how often the manufacturer (OEM) retrieves this data from the vehicle itself and how often that manufacturer then provides it to our third party aggregator. Different vehicles may also provide alerts regarding vehicle tracking and, in some cases, it may be possible for you to disable the provision of this data to the manufacturer. In doing so, this would also prevent us from receiving this data and may limit our ability to provide you with proactive services such as those mentioned above. The availability of these settings and how to activate them varies from manufacturer to manufacturer.

We run referral schemes, including encouraging employees to ask us to contact their employee on their behalf (where they think salary sacrifice will be of benefit to them).

If you come to us using a referral link, then we will receive your initial details through this link, and we will also tell the person whose link you used.

Where we share your information, we always do so in line with this privacy notice and in compliance with data protection laws. We also ensure that third parties only use your data in line with our instructions.

Some of the organisations we may share your information with include:

• Where we manage a salary sacrifice scheme on behalf of your employer, we will disclose personal information to them, for purposes including but not limited to vehicle lease agreement, reporting, account management, leasing arrangements, complaint handling relating to your employer’s scheme.
• Our group companies, affiliates and partners, where necessary for the provision of our services, included but not limited to
  • brokers/funders/insurance companies to process and accept your application;
  • payment providers (your employer or other third party) to process payments to us;
  • engineers to install an electric charger at your home;
  • original equipment manufacturers & dealerships & delivery agents to source an EV and deliver it to you;
  • provide in-life assistance to named drivers, for breakdown, accidents, tyre replacements, arranging alternative mobility options, collecting of fees owed to us relating to driver actions resulting in penalty charge and/or fixed notices issued;
  • Octopus Energy Services Limited, to allow us to deliver your consumer finance product and associated low carbon technology goods;
• Our group companies, affiliates and partners where there is potential benefit for our customers to learn more about their products.
• Anyone who is named and authorised on your account.
• Credit reference agencies (CRAs), fraud prevention agencies and financial crime prevention tools or services, both when you first sign up and routinely whilst you have an EV or an account with us. This includes ongoing exchanges of information with/from CRAs of settled or unpaid debts. CRAs will in turn also share your information with other organisations. Your data will also be linked to the data of your spouse, any joint applicants or other financial associates. Please visit https://www.cifas.org.uk/fpn for more information of how your information will be used by us and fraud protection agencies.
• Payments: we use Stripe for payments and analytics. Stripe may collect personal data, including via cookies and similar technologies, to operate and improve services, such as fraud detection. Learn more by reading Stripe's privacy notice at https://stripe.com/privacy
• Fine issuers (when we receive penalty charges and fixed penalty notices) will be informed of the named driver and contact details, debt collectors and vehicle recovery agencies where we have to recover sums or vehicles owned by us.
• Our telesales and field sales partners, but only where necessary to perform our services.
• Law enforcement agencies, where we have been requested to disclose driver information that can relate to driver related penalties (such as speeding fines) or to assist in their investigations that include reference to one of our vehicles. We do this to assist the police and related emergency services.

Any personal information shared with our Octopus Energy Group companies shall also be used by those group companies in accordance with the Octopus Energy Group privacy policy, which can be found here: https://octopus.energy/policies/privacy-policy/

We may also share your information for the following reasons:

We will transfer your personal information to a third party as follows:

• if we sell or buy any business or assets, we will provide your personal information to the seller or buyer (but only to the extent we need to, and always in accordance with data protection legislation); and
• if Octopus Electric Vehicles Limited, or the majority of its assets, are acquired by somebody else, in which case the personal information held by Octopus Electric Vehicles Limited will be transferred to the buyer.

We process your personal information in this way because we have a legitimate interest to ensure our business can be continued by the buyer. 

In some circumstances we may need to share your personal information if we are under a duty to disclose or share it to comply with a legal obligation- for example, to investigate something like theft or fraud. 

We speak to thousands of customers a day, and some of those people will be in difficult circumstances. Occasionally people will share information which indicates that they, or a member of their household, are in imminent danger or at serious risk. In such circumstances we may refer the situation to relevant authorities or sources of assistance. In such cases we will consider first and foremost the interests of the person at risk.

We use cookies to distinguish you from other users of our website. A cookie is a small file of letters and numbers that we store on your device. Cookies are an essential and widely used tool, and they enable our website to function properly and efficiently, as well as providing us with helpful information about how people use our website. This helps us to provide you with a good user experience when you browse our website and keeps your visit secure from cross-site forgery. It also allows us to improve our marketing and our website, and we use cookies to do helpful things, such as remembering which cars you were interested in.

You can view our Cookie Policy and make changes to your preferences (or withdraw your consent) at the bottom of our website in the 'Update cookies' section.

We are based within the UK, however some of the third parties we work with are based outside of the UK, so their processing of your personal information may involve a transfer of data outside of the UK.

Whenever we transfer your personal information outside of the UK, we will always ensure it is protected by making sure we have appropriate safeguards in place. This might mean only transferring your personal information to a country that has been deemed by the UK Government to provide an adequate level of protection, or by the use of appropriate safeguards (more information on the kinds of safeguards we may use can be found here: ICO: Appropriate Safeguards). You can contact us at data-protection@octopusev.com for details of how we protect specific transfers of your data.

All information that you provide us with is stored on our secure servers, or those of our third parties’ data storage providers.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or administrative requirements.

To determine the appropriate retention period for the personal information we hold, we consider the amount, nature and sensitivity of the personal information, the risk of harm from unauthorised use or disclosure of your personal information, the reasons why we handle your personal information, the applicable legal requirements and whether we can achieve those purposes through other means.

In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical analysis, such as looking at email open rates, or to improve our website and develop new products. In these cases, we may use this information indefinitely without further notice to you.

You have various rights under the data protection laws, which you can exercise by contacting us. The easiest way to do this is by either completing this form directly here, or email to data-protection@octopusev.com.

• Your right of access - You have the right to ask us for copies of your personal information. 
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• Your right to complain - If you have any queries, concerns or would like to complain about the usage of your data or your privacy rights, please contact us using the details below in our Contact Us and Data Protection Complaints section below. If you are still unsatisfied, you have the right to lodge a complaint with your local data protection authority.

We will update you whether a charge is required in advance and where you make a request, we have one month to respond to you and will update you where necessary in advance of fulfilling your request.

Our website and apps may contain links to third party websites. If you click on a link to any of these websites, you will leave our website or app and this may allow third parties to collect or share your data. 

We have no control over the contents of those third party websites and so will not accept any responsibility or liability for any materials on there. We encourage you to check their privacy policies before you submit any personal information to these websites.

We have in place appropriate technical and organisational measures to safeguard the personal information that you provide to us.

We keep our privacy notice under regular review. Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by email.

Please check back frequently to see any updates or changes to our privacy notice.

To make a complaint about how we handle your personal data please visit our Complaints Process here. This page contains information on how to raise a data handling complaint to us and the process we will undertake to acknowledge, investigate and provide an outcome as well as any applicable routes for escalation to regulatory bodies.

If you have any questions, comments or requests regarding this privacy notice please address these to our customer service team by email to customerservice@octopusev.com or on 020 3870 3892. We would always rather you speak to us first if you have any questions about our handling of your personal data, so we can provide clarity or resolve any problems as quickly as possible.