Storage North Sheen Privacy Policy
This Privacy Policy explains how Storage North Sheen collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Storage North Sheen service area. It also describes your rights under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
By using our services, visiting our premises, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all Storage North Sheen customers and enquirers in our area, whether you contact us in person, by post, by electronic means, or via any other communication channel.
Data Controller
The data controller is Storage North Sheen. This means that Storage North Sheen determines the purposes and means of processing your personal data and is responsible for complying with applicable data protection laws.
Personal Data We Collect
We only collect personal data that is necessary for the provision and administration of our storage services, for the security of our premises, and for the management of our business. The types of personal data we may collect include:
Identification and contact information, such as your name, postal address, billing address, and other contact details you provide when you make an enquiry or enter into a storage agreement.
Account and contract information, such as details of your storage unit, contract start and end dates, payment status, communications about your account, and any notes necessary for the management of your contract.
Payment and billing information, such as records of payments made, payment method used, invoices issued, and details needed for accounting and tax purposes. We do not store full payment card details if card payments are processed via a secure payment service provider.
Security and access information, such as CCTV recordings from our premises, access logs, vehicle registration numbers where relevant, and records of incidents or security events. CCTV may operate in and around Storage North Sheen facilities for security and safety purposes.
Communication data, including emails, letters, and any other correspondence or records of telephone or in-person conversations relating to enquiries, bookings, complaints, or feedback.
Marketing preferences, such as your choice to receive or not receive updates or promotional information about our services, where you have given consent or where we have a legitimate interest.
How We Collect Your Data
We collect personal data in several ways, including:
When you contact us to request information about our services or obtain a quote.
When you enter into a storage agreement with Storage North Sheen.
When you make payments or update your account details.
Through CCTV systems and access control measures at our premises.
Through our ongoing communications with you relating to your account or enquiries.
Lawful Bases for Processing
We process your personal data only when we have a lawful basis to do so. The main lawful bases we rely on are:
Contract. We process your data to take steps at your request before entering into a contract with you and to perform our contract with you, including managing your storage unit, handling payments, and providing customer service.
Legal obligation. We process certain data to comply with legal and regulatory requirements, such as tax and accounting rules, health and safety obligations, and obligations to law enforcement authorities where applicable.
Legitimate interests. We process data for our legitimate interests, provided these interests are not overridden by your rights and freedoms. Legitimate interests include securing our premises, preventing fraud and misuse, managing our business operations, improving our services, and communicating with existing customers about similar services.
Consent. Where required by law, we will obtain your consent before sending you certain types of marketing communications or before using optional cookies or similar technologies. You can withdraw consent at any time, without affecting the lawfulness of processing that took place before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including processing enquiries, creating and administering contracts, allocating storage units, and providing customer support.
To process and record payments, manage billing and invoicing, and maintain accurate financial and accounting records.
To maintain the safety and security of our premises, customers, staff, and property, including the use of CCTV, access controls, and incident logs.
To communicate with you about your account, contract renewals, service updates, and any changes to our terms or this Privacy Policy.
To handle complaints, disputes, or claims and to establish, exercise, or defend legal rights.
To send you information about services and offers that may be relevant to you, where we are permitted to do so by law or where you have given consent.
To comply with legal requirements and cooperate with regulators and law enforcement authorities where necessary.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, or as long as required by law. In general:
Contract and account records, including contact details, contracts, and key correspondence, are kept for the duration of your contract and for a reasonable period afterwards, typically up to seven years, to comply with legal, tax, and accounting requirements and to deal with any disputes.
Payment and invoice data is retained in line with applicable financial and tax laws, usually for several years after the end of the relevant financial period.
CCTV recordings are retained for a limited period, typically only as long as necessary to investigate incidents or for security purposes, unless a longer retention period is required in relation to a specific incident or legal matter.
Marketing preference data is kept for as long as you remain a customer and for a limited period afterwards, or until you opt out of receiving marketing communications.
When personal data is no longer required, we will delete it securely or anonymise it so that individuals can no longer be identified.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected service providers who act as data processors on our behalf. These processors are engaged only to the extent necessary to provide their services to us and are required to process your data in accordance with our instructions, to maintain confidentiality, and to implement appropriate security measures.
Examples of processors and third parties we may use include:
Payment processing and merchant service providers that handle card or electronic payments.
IT and cloud service providers that host or support our systems and data storage.
Professional advisers such as accountants or legal advisers where necessary for our business operations, compliance, or the handling of claims.
Security and maintenance providers who support the operation and security of our premises, including CCTV system maintenance.
We may also share personal data with public authorities or other third parties where required by law, or where necessary to establish, exercise, or defend legal claims, or to protect the vital interests of individuals.
We do not sell your personal data to third parties.
International Data Transfers
If we transfer your personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. These safeguards may include the use of standard contractual clauses approved by relevant authorities or ensuring that the destination country provides an adequate level of data protection.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include access controls, secure storage, staff training, and procedures to handle data protection incidents. While we take reasonable steps to protect your data, no system can be completely secure, and you should take care when sharing personal information.
Your Data Protection Rights
As a data subject, you have certain rights under data protection laws. Subject to applicable conditions and exemptions, you may have the right to:
Access your personal data and obtain a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no longer a lawful basis for us to continue processing it.
Request restriction of processing of your personal data in certain circumstances.
Object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation.
Object to the use of your personal data for direct marketing at any time.
Request the transfer of your personal data to you or to another controller, where technically feasible, in a structured, commonly used, and machine readable format.
Where we rely on consent, withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
If you wish to exercise any of these rights, you can contact us using the contact details provided in your contract or on our official documentation.
You also have the right to lodge a complaint with the Information Commissioners Office or your local supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
