Storage Crouch End Privacy Policy
This Privacy Policy explains how Storage Crouch End collects, uses and protects the personal data of all Storage Crouch End customers in the local area. It is intended to provide clear information in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our storage services, visiting our premises or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Crouch End customers in the area, including individuals and businesses who enquire about, use, or have used our storage units or related services. It also applies to visitors to our premises and to individuals whose information we may process in connection with our services, such as guarantors or authorised contacts named on an account.
Personal data we collect
We only collect personal data that is necessary for the purposes described in this Privacy Policy. The types of data we may collect include:
Identification and contact details such as name, postal address, billing address, date of birth, and contact details including communication preferences.
Account and contract information such as unit or space rented, contract dates, payment history, correspondence related to your contract, and records of your interactions with us.
Payment and billing information such as limited payment details necessary to process transactions and records of invoices and receipts. We do not store full card details when payment is processed through a secure payment provider.
Security and access data such as access codes, key or fob identifiers, entry and exit logs, and CCTV footage at our premises where in use. CCTV is used to help maintain the security of our facilities and to protect customers, staff and property.
Communication data such as records of enquiries, complaints or feedback made by phone, in writing or in person, and notes of conversations relevant to your account or any dispute resolution.
Technical and usage data such as basic information relating to how you interact with our online content where applicable, including date and time of contact and pages viewed, to help us improve our services.
How we collect your personal data
We may collect personal data directly from you when you contact us to request information or a quote, enter into a storage agreement, visit our facilities, make a payment, contact us with a question or complaint, or provide feedback.
We may also receive data from third parties where lawful to do so, for example from payment providers confirming a transaction, from insurers in relation to claims, or from law enforcement or regulatory bodies when required.
Lawful bases for processing
We rely on one or more of the following lawful bases to process your personal data:
Contractual necessity to set up, manage and administer your storage agreement. This includes processing data to provide you with a quote, prepare and manage your contract, take payment, provide access to your storage space and communicate with you about your account.
Compliance with legal obligations to meet legal and regulatory requirements, including tax and accounting rules, health and safety obligations, fraud prevention and responding to lawful requests from authorities or law enforcement.
Legitimate interests to pursue our legitimate business interests, provided these are not overridden by your rights and freedoms. These interests include ensuring the security of our premises and property, maintaining accurate business records, improving our services and handling enquiries, complaints or disputes.
Consent where we rely on your explicit agreement, for example where you choose to receive certain types of marketing communications from us. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services including preparing and managing contracts, allocating units, controlling access, communicating with you about your agreement and processing payments.
To maintain safety and security at our premises including controlling entry and exit, monitoring CCTV where in use, investigating incidents and preventing crime, damage or unauthorised access.
To manage customer relationships including responding to enquiries, providing customer support, resolving complaints, and keeping records of interactions to ensure continuity and accuracy.
To manage our business operations including accounting, auditing, invoicing, reporting, training and quality control, and to plan and improve our services.
To meet legal and regulatory requirements including record keeping for tax and accounting purposes, responding to lawful requests from authorities and enforcing our contractual rights.
Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, accounting or reporting obligations.
The exact retention period may vary depending on the type of data and the purpose of processing. In general:
Customer account and contract records are retained for a period after your agreement ends to deal with any queries, disputes or legal claims and to meet legal and regulatory requirements.
Financial and transaction records are retained for a period required by tax and accounting laws.
CCTV footage and access logs are kept for a limited period necessary for security, investigation and crime prevention purposes, unless an incident requires us to keep specific footage for longer.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with an identifiable individual.
Sharing your personal data and processors
We do not sell your personal data. We may share it with trusted third parties to help us operate our business and provide our services, where they act as processors on our behalf or as separate controllers.
Third party processors may include payment service providers that process card or online payments, information technology and system support providers, secure document or data storage providers, professional advisers such as accountants, auditors or legal advisers, and security and maintenance contractors who may have controlled access to the premises or systems.
These third parties are only permitted to process your personal data for specified purposes and in accordance with our instructions and the law. We take steps to ensure that they protect your data and maintain its confidentiality.
We may also share personal data with law enforcement agencies, regulators, courts or other third parties where we are required to do so by law or where it is necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of our customers, staff or others.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we take appropriate measures to ensure that it remains protected, such as using standard data protection clauses or ensuring that the destination country offers an adequate level of data protection in line with data protection law.
Your data protection rights
You have a number of rights in relation to your personal data under data protection law. Subject to certain conditions and exemptions, these may include:
The right of access to obtain confirmation of whether we process your personal data and to request a copy of that data.
The right to rectification to request correction of inaccurate or incomplete personal data.
The right to erasure to request deletion of your personal data where there is no longer a lawful basis for us to keep it.
The right to restriction of processing to request that we limit the way we use your data in certain circumstances.
The right to data portability to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible.
The right to object to certain processing based on legitimate interests, and to object to direct marketing at any time.
The right to withdraw consent where we rely on consent to process your data. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to raise a concern or complaint with the relevant data protection authority if you believe your rights have been infringed.
Security of your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular review of our security procedures.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or changes in legal requirements. The updated version will be made available at our premises or through our usual communication channels. We encourage you to review this Privacy Policy periodically.
