Privacy Policy

Last updated: 22 July 2026

Yoink is operated by Heavy Metal Ltd. (“Yoink”, “we”, “us” or “our”), a company registered in England and Wales under company number 16297894. Heavy Metal Ltd. is the data controller responsible for your personal data. This Privacy Policy explains what personal data we collect when you use the Yoink website and services (including our physical “Yoink Point” charging units), how we use it, who we share it with, and the rights you have under the UK GDPR and the Data Protection Act 2018.

Who We Are and How to Contact Us

Heavy Metal Ltd. is the data controller for the personal data described in this policy. Our registered office is:

Heavy Metal Ltd.
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ

If you have any questions about this policy, or wish to exercise your data protection rights, please contact us at info@yoinkpoint.com.

Information We Collect

Depending on how you use Yoink, we may collect the following categories of personal data:

Account information. When you sign up we use a third-party authentication provider to manage your login. We store your name, email address and an authentication identifier.
Host and payment information. If you host a Yoink Point and receive payouts, payments and identity verification are handled by our third-party payment provider. We store an account identifier that links your account to that provider; we do not store your full card or bank details on our own systems.
Usage data. We record activity relating to your Yoink Point(s), such as top-ups, charging times, rates and the associated timestamps.
Marketing consent records. If you join a mailing list (for example our pilot scheme), we record your email address, the time you consented, the wording you consented to, and — as evidence of consent — your IP address and browser user-agent.
Communications. Any information you provide when you contact us by email or other means.
Analytics and cookies. We use a third-party analytics provider, which collects information about how you use our website through cookies and similar technologies (see “Cookies and Analytics” below).

We collect this data directly from you (for example when you sign up, top up or contact us), automatically as you use our website (through cookies and similar technologies), and from the service providers who help us operate Yoink.

How We Use Your Information and Our Legal Bases

We process your personal data for the following purposes, relying on the legal bases set out below:

To provide our services — creating and managing your account, operating Yoink Points, processing top-ups and enabling host payouts. Legal basis: performance of a contract.
To process payments and pay hosts. Legal basis: performance of a contract and compliance with our legal obligations.
To send service-related communications — such as top-up notifications and account or transaction emails. Legal basis: performance of a contract and our legitimate interests in operating the service.
To send marketing updates where you have opted in. Legal basis: consent, which you may withdraw at any time.
To understand and improve our website using analytics. Legal basis: consent (via cookies).
To comply with legal obligations and to establish, exercise or defend legal claims. Legal basis: legal obligation and legitimate interests.

Cookies and Analytics

We use a third-party analytics provider to help us understand how visitors use our website. It sets cookies and collects information such as the pages you visit, your approximate location and your device and browser, and processes that information on our behalf. Non-essential cookies, including analytics cookies, are only used where you have given your consent, and you can withdraw that consent at any time through your browser settings.

Sharing Your Information

We do not sell your personal data. We share it only with service providers who process data on our behalf, and only as needed to run Yoink:

Authentication providers — to manage account sign-up and login.
Payment providers — to process payments and host payouts, including identity verification.
Analytics providers — to understand how our website is used.
Communications providers — to send transactional and marketing emails.
Hosting and infrastructure providers — to host our website and database and to operate the connectivity behind Yoink Point hardware.

We may also disclose your information where required to do so by law, regulation or legal process, or to protect our rights, users or the public.

If we sell, transfer or merge parts of our business or assets, your personal data may be transferred to the new owner, who may continue to use it as described in this Privacy Policy.

International Transfers

Some of our service providers are based outside the UK, which may involve transferring your personal data to countries that do not provide the same level of protection as UK law. Where we do so, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

Data Retention

We keep your personal data only for as long as necessary for the purposes described in this policy — for example, for the life of your account and for a reasonable period afterwards — or for as long as we are required to keep it to meet legal, accounting or tax obligations. When it is no longer needed, we delete or anonymise it.

How We Protect Your Information

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, and we require our service providers to do the same. Sensitive payment details are handled by our payment provider rather than stored on our own systems. However, no transmission of data over the internet can be guaranteed to be completely secure, so we cannot guarantee the security of information you send to us online.

Your Rights

Under the UK GDPR you have the right to:

access the personal data we hold about you;
ask us to correct inaccurate or incomplete data;
ask us to delete your data in certain circumstances;
object to, or ask us to restrict, our processing of your data;
receive your data in a portable format;
withdraw your consent at any time where we rely on consent (for example, marketing emails — you can also unsubscribe using the link in any marketing email).

To exercise any of these rights, contact us at info@yoinkpoint.com. We will respond within one month, and there is normally no charge. To help us keep your data accurate, please let us know if any of it changes.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk, though we would appreciate the chance to resolve your concerns first.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Links to Other Websites

Our website and services may contain links to, or redirect you to, websites operated by others (for example our payment provider’s checkout or our social media pages). We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

Children

Yoink is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of this page. Please review it periodically.

If you have any questions about this Privacy Policy, or wish to make a request or complaint about how we handle your personal data, please contact us:

Email: info@yoinkpoint.com

Telephone: +447754951636

Post: Heavy Metal Ltd., 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ