Customer Privacy Policy

This privacy policy covers all processing of personal data performed by Polestar Performance AB and/or Polestar Automotive Canada Inc. ("Polestar", “our”, “us” or "we"), except for:

• processing of your data relating to our cars, which is explained in our Car Privacy Notice [coming soon], and
• processing of your data in relation to our apps, which is explained in our privacy notice for each app.

It is important to us that you always feel safe and informed about how we process your personal data. In this privacy policy, you can learn more about what personal data we collect and process about you, why we do it, how we use the personal data and how we ensure that your personal data is handled in accordance with applicable legislation, and what rights you have. You can of course contact us, or our privacy officer, if you have questions about our processing of your personal data. See contact details.

This policy is updated continuously to reflect the measures taken by Polestar in relation to your personal data. Read more.

This privacy policy does not apply to authorized Polestar retailers, or third parties to whom you directly provide your information including, but not limited to, subscription services, or other third parties who may offer special rates or products to Polestar Automotive Canada Inc. customers, nor to content posted on their websites or social media channels. These entities are independent of Polestar Automotive Canada Inc. and responsible for their own collection of information. Please refer directly to those entities and their particular privacy policies for more information.

The concepts “controller” and “joint controllers” are terms used in the EU GDPR. A controller is the company that determines the purposes (why) and the means (how) of personal data processing – in other words, the controller is responsible for the processing of the personal data. When two or more companies jointly determine the purpose and means of the personal data processing, those companies are called joint controllers. The term “processor” refers to service providers or third parties who processes personal data on behalf of the controller. In the text and in each of the tables below you will find who the controller or joint controllers is/are for each processing. You will also find out where Polestar Performance AB or Polestar Automotive Canada Inc. acts as a processor. Each controller, joint controller, or processor is an “Organization” under Canadian privacy law and we explain their respective roles below.

In this section, we will inform you about what personal data we process about you, for what purposes, what our legal basis for the processing is, how long we will process your personal data for, and who the controller/controllers are for each processing purpose. We may process your personal data for several of the following purposes at once. The information is divided into the following parts:

1. 1.

   Polestar website, which includes information about our processing of personal data related to our chat function, your account on polestar.com and our processing of personal data collected using cookies. Read more.
2. 2.

   When providing our products and services, which includes information about our processing of personal data relating to your Polestar ID accounts, your purchase of products and services, your reservation of a build slot for a vehicle and our waiting list for such build slots, test drive bookings, service bookings, our referral program, our Polestar Fleet Portal, our administration of request for change of ownership of a vehicle and our Guest Wi-Fi. Read more.
3. 3.

   When we are in contact with you, which includes information about our processing of personal data relating to our customer support, our contacts with you on social media and on Polestar Community, our virtual and digital consultations, our events and competitions and our contact with you to remind you of non-completed orders. Read more.
4. 4.

   When marketing our business, brands, products and services, which includes information about our processing of personal data relating to marketing through telephone, e-mail, websites, social media and press releases and our use in marketing material of photos and videos of participants at events. In this section you will also find information about our profiling for marketing purposes. Read more.
5. 5.

   When developing our business, products and services, which includes information about our processing of personal data relating to our use of surveys and market research, training of our employees and our continuous work with developing our business, systems, products and services. Read more.
6. 6.

   E-mail analyses. We use technologies such as tracking pixels or click-through links when sending you e-mails. The purpose of using tracking pixels is to analyse if and how many emails are delivered and opened. The purpose of using click-through links is to analyse which links in our emails are clicked, to understand what interest there is in specific content. We use the result to make our e-mails more relevant or to stop them from being sent. By deactivating the display of images in your e-mail client, we will not be able to measure the opening rate of our e-mails using tracking pixels and the e-mail will not be displayed completely. However, if you click on text or graphic links in the e-mail, we will still be able to track whether the e-mail has been opened. To avoid that such data is collected and tracked, do not click on text or graphic links in the e-mails.
7. 7.

   When you apply for a job at Polestar.Read more.
8. 8.

   To comply with laws, legal obligations and voluntary undertakings and in the event of claims, disputes, supervision etc. This part includes information about our processing of personal data relating to recalls, claims and complaints, data subject requests, data subject complaints, data breaches and supervision, disputes, bookkeeping, financial reporting, transfer of data in the event om merger and acquisition and sharing of personal data with authorities. Read more.

When you visit our website, we collect certain information about you using cookies and other tracking technologies. This is for our website to function, to improve the user experience of our website, to collect visitor statistics and to provide you with relevant marketing in various channels (see more details regarding the marketing purpose). For more information on how we manage cookies, see our Cookie Policy. Polestar Performance AB is controller for the processing relating to web analytics/cookies.

To chat with you and answer your questions and provide you with requested information, products and services, we process your personal data. Read more about our processing related to the chat under customer support. Polestar Performance AB and Polestar Automotive Canada Inc. are joint controllers for processing relating to the chat.

For you to be able to create and log in to your account on our website and use those web services that require a Polestar ID, we will process your name, email address, phone number, password, relevant market and preferred language. Our legal basis for processing your personal data is to perform the contract (GDPR, article 6.1 (b)). We will continue to process your personal data for up to thirty (30) days after you have terminated your account. Polestar Performance AB is controller for the processing relating to your Polestar ID account.

We will collect, process and combine certain types of personal data (as explained in the next paragraph) to predict your personal preferences and categorise you into a “segment affiliation”. This is a group of approximately 5,000-15,000 individuals with similar preferences, interests and behaviour. Everyone categorised into the same segment affiliation will receive the same type of marketing. We do this in order to provide you with marketing and other communication which is relevant to you considering your specific situation, needs and interests, The segments we create can for example include, “people that visited the product page, started configuration and chose the colour red"

For this purpose, we process your IP address, information on your browsing on our website, e.g. product interest and configuration, device information, unique online identifiers and interaction in relation to our ads on third-party websites (your “Online Web Behaviour Data”), in pseudonymized form. If you consent to the use of cookies for targeting and ads, we will combine your Online Web Behaviour Data with aggregated data obtained from third party data providers through cookies, such as information about your personal preferences, demographics and content consumption (“Third Party Data”), and data that you provide us with when you interact with us, such as e-mail address, phone number, postal code, country of residence, your interests, purchased products or services and your interactions with us (“Customer Data”). This data will determine your segment affiliation.

Your segment affiliation may also be used to create so-called lookalike audiences, meaning that we create a target audience based on the same characteristics of the individuals belonging to a certain segment affiliation. This enables us to target potential customers with similar interests, behaviour or characteristics as the people that already have shown an interest in our products and services. In other words, we will use your segment affiliation to target other individuals with the same characteristics.

We will also use your segment affiliation to get a better general understanding of you and your needs, provide better customer support and to keep track of your interactions with us.

Besides segment affiliation, we build customer profiles to ensure a personalized delivery experience when you purchase a vehicle from us. The customer profile is created by  the use of analytics models based on generative artificial intelligence, and provides a summary of your interactions with us and personalized recommendations for the handover of your vehicle. For more information on the personal data we process to create your customer profile, please see the section "Personalized handover" above.

Your segment affiliation will not produce any legal effects or affect you in any similar way. For UK and EU privacy laws, the legal basis for placing, collecting and having access to the mentioned information from cookies is your consent, read more in our Cookie Policy. For UK and EU privacy laws, the legal basis for creating profiles, placing you in a segment affiliation, creating lookalike audiences and for sending you marketing based on your segment affiliation is your consent to marketing and profiling.

We mainly collect your personal data directly from you, but in some cases, we also collect personal data from other sources, namely when:

• you decide to finance your vehicle through leasing or a loan: we collect information about the status of your finance or leasing application from the finance or leasing company.
• service is performed on your vehicle: we collect information about the services performed on your vehicle in the workshop.
• we need to verify the registered owner with the authorities in case of a recall: we collect your name, address, phone number and e-mail address from the authority.
• we receive a request for change of ownership from the registered owner of the vehicle: we collect the new owner’s e-mail address from the registered owner.
• we create some personal data about you, such as Vehicle Identification Number (VIN) and individual license plate of your purchased vehicle, which will be personal data about you. We may also observe and infer personal data about you, such as your online behaviour and segment affiliation. Read more.

To provide our products and services and to comply with laws and regulations, we need to share your personal data with others, including other companies within the Polestar Group and third parties assisting us in various parts of our business and helping us to deliver our products and services. In each table you can find information about whom the data is shared with, and you can also find the categories of recipients listed below.

• IT providers, e.g. companies that manage the necessary operation, technical support and maintenance of our IT solutions,
• Polestar affiliates,
• Subcontractors: mail and messaging services, banks and payment service providers, providers of analytics services,
• Authorities, in certain circumstances, we may be legally required to disclose information to government or law enforcement authorities, e.g. the police, the privacy protection authority, tax authorities, public courts, authorities for official registering of the vehicle, or enforcement agencies. This may be in response to valid and lawful requests, such as subpoenas, court orders or other legal processes. We may also disclose information when necessary to protect the rights, property, or safety of you, us, or others.

  We comply with all applicable laws and regulations regarding the disclosure of information to government authorities. We carefully review each request to ensure its validity and legality, as well as the impact of the data disclosure on the subjects concerned by the request before disclosing any information. We strive to protect your privacy and rights to the extent permitted by law.

  In the event of a government request for information, we will make reasonable efforts to notify you unless prohibited by law or court order. If you have any questions or concerns about our practice of disclosing information to authorities, please contact us.
• Business partners, e.g. workshops, finance and leasing companies, insurance companies, legal counsels, printing companies (marketing purposes), advertising agencies/companies, market research companies, and
• Providers of social media platforms.

Because we use service providers that are located in the US, and our service providers in the US also rely on the services of our affiliates in the US and the European Union or United Kingdom, your personal data will be transferred outside the Canadian province where it was collected for these purposes.

Polestar Automotive Canada Inc. transfers personal data to the European Union, the US and the United Kingdom.

In providing its services to Polestar Automotive Canada Inc., Polestar Performance AB also sometimes transfers the personal data to service providers outside if EU/EEA or to the US. Under EU privacy law this constitutes a reverse transfer. Transfers to the United Kingdom are carried out pursuant to its adequacy decision. For transfers to other countries outside of EU/EEA and the US, that do not have an adequacy decision, we use EU Model Clauses entered into by all relevant third parties (article 46 of the GDPR) or they are certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S Data Privacy Framework and/or the Swiss-U.S. Data Privacy Framework with the U.S. Department of Commerce. In addition, we take additional technical and organizational security measures when needed, such as encryption and pseudonymization.

Below, you can find a list of your rights related to our processing of your personal data under the GDPR and privacy laws in Canada e.g. PIPEDA.

To exercise your right, you may submit a request by using our web form, call (800) 806-2507 or email us at dpo@polestar.com. For requests submitted via telephone or email, you must provide us with information to allows us to reasonably verify that you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information.

You always have the right to lodge a complaint with the supervisory authority where you live, work or where you believe an infringement has taken place. In Sweden, you have the right to lodge a complaint with the Swedish Supervisory Authority for Privacy Protection (IMY). A list of European supervisory authorities is available here.

Under PIPEDA, you have the right to complain directly to us regarding our alleged noncompliance with PIPEDA. We will review and respond to your complaint. PIPEDA-related complaints can be directed to our Privacy Officer at dpo@polestar.com c/o Polestar Automotive Canada Inc.

You have the right to know if we process personal data about you. If we do, you also have the right to receive information about the personal data we process and why we do it. If we collect your personal information from another person or entity (i.e. not you), you have the right to be informed of our source for your data. Similarly, if we share your information with another person or entity, you have the right to request we disclose to you those parties. Furthermore, you have the right to receive a copy of all personal data we have about you.

If you are interested in specific information, please indicate it in your request. For example, you can specify if you are interested in a certain type of information, such as what specific contact details we have about you, or if you want information from a certain period.

If the personal data we hold about you is incorrect, you have the right to have it corrected. You also have the right to supplement incomplete information with additional information that may be needed for the information to be correct. 

Once we have corrected your personal data, or it has been supplemented, we will inform those we have shared your data with (when applicable) about the update - if it is not impossible or too cumbersome. If you ask us, we will of course also tell you who we have shared your data with. 

If you request to have data corrected, you also have the right to request that we restrict our processing during the time we investigate the matter.