Storage East Sheen Privacy Policy
This Privacy Policy explains how Storage East Sheen collects, uses, stores and shares personal data relating to individuals who enquire about, use, or have used our storage services. It applies to all Storage East Sheen customers and prospective customers in our service area, regardless of the channel used to contact us or the specific storage service chosen.
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner in accordance with the UK General Data Protection Regulation and any applicable data protection laws.
Who This Privacy Policy Applies To
This Privacy Policy applies to all Storage East Sheen customers, former customers and prospective customers located in our operating area, including individuals, businesses, and their authorised representatives. It also applies to individuals who contact us with general enquiries, request a quotation, or visit our premises where personal data is collected.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and the services you use. This may include:
Identification and contact details, which may include full name, postal address, billing address, contact address, and other contact details you choose to provide.
Customer account and contract information, which may include details of your storage unit, rental start and end dates, payment history, invoices, and correspondence about your contract.
Payment and financial information, which may include payment method details and transaction records required to take payments and manage your account. We do not store full card details where we use secure third party payment processors.
Security and access information, which may include access codes, entry and exit logs for our facilities, CCTV footage from common areas, and records relating to security incidents or breaches of contract.
Communication data, which may include records of calls, written correspondence, feedback, complaints, and any other information you provide when you communicate with us.
Technical and usage data, collected when you interact with our online services, which may include basic device and usage information in line with applicable law.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a contract, use our facilities, contact us, update your details, or provide feedback. We may also receive data from third parties such as payment service providers, credit reference agencies where applicable, or business partners who refer you to us.
Lawful Bases for Processing
We only process your personal data when we have a lawful basis to do so. Depending on the situation, the lawful basis will be one or more of the following:
Performance of a contract: To take steps at your request before entering into a storage contract and to provide and manage the storage services you have requested, including handling payments, access control, and customer support.
Legal obligation: To meet legal and regulatory duties, such as maintaining accurate accounting records, complying with tax obligations, responding to lawful requests from authorities, and complying with health and safety and security requirements.
Legitimate interests: To pursue our legitimate business interests, provided that your rights and freedoms do not override those interests. This may include managing and improving our services and facilities, ensuring the security and integrity of our premises, preventing and investigating fraud or misuse, recovering debts, and sending service-related information about your existing contract.
Consent: In limited cases where required by law, we may rely on your consent, for example, to send certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, manage and administer storage services, including setting up and managing your account, operating access control systems, issuing invoices, taking payments, and handling renewals or terminations.
To communicate with you about your account, including sending confirmations, payment reminders, access updates, and responses to your queries or complaints.
To maintain the safety and security of our premises, property and customers, including through access controls, visitor records, and CCTV monitoring of shared areas.
To manage our business operations, including internal record keeping, auditing, analysis of service usage, and service improvement planning.
To comply with applicable laws and regulations, including responding to lawful requests and protecting our legal rights where necessary.
Where permitted, to send you information about services that may be relevant to your existing or previous relationship with us, and to manage your preferences in relation to such communications.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements.
The retention period will vary depending on the type of data and the reasons for which it was collected, but in general:
Customer contract and billing records are typically kept for a period required by applicable tax and financial regulations after the end of your contract.
CCTV recordings and access logs are kept for a shorter period necessary for security, investigation and safety purposes, unless longer retention is required in connection with an incident or legal claim.
Enquiry details and quotation records are retained for a limited time to respond to your enquiry, follow up where appropriate, and maintain basic business records.
When data is no longer required, it will be securely deleted, anonymised or otherwise processed so that you can no longer be identified from it.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may provide services such as payment processing, IT hosting and maintenance, security systems, access control technology, accounting support, or customer management systems.
Where we use processors, they are only allowed to process your personal data in accordance with our written instructions, for the purposes set out in this Privacy Policy, and with appropriate security measures in place. They are not permitted to use your data for their own independent purposes.
We may also share personal data with other third parties where necessary, including professional advisers, insurers, law enforcement or regulatory authorities, courts and other bodies, where disclosure is required by law or is necessary to protect our rights, property or safety or that of our customers or others.
We do not sell your personal data. We do not transfer your personal data outside the United Kingdom or European Economic Area unless appropriate safeguards are in place in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Subject to applicable law, your rights include:
Right of access: You can request confirmation of whether we process your personal data and request a copy of the data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the original purpose and we have no legal obligation to retain it.
Right to restriction of processing: You can ask us to restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format and to transmit it to another controller where technically feasible.
Right to object: You can object, on grounds relating to your particular situation, to certain types of processing based on our legitimate interests. You also have the right to object at any time to the processing of your personal data for direct marketing.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is typically the Information Commissioner's Office.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, unlawful use, accidental loss, damage or destruction. These measures are designed to provide a level of security appropriate to the risks associated with the processing of your personal data. Access to personal data is restricted to personnel and service providers who need to know the information for the purposes described in this Privacy Policy and who are subject to confidentiality obligations.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any changes will take effect when the updated version is made available by us. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.
Contact and Further Information
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the contact details provided on our main customer information materials or by using the usual communication channels you use to interact with Storage East Sheen.
