Storage Greenford Privacy Policy
This Privacy Policy explains how Storage Greenford collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Greenford area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Greenford customers and prospective customers in the local Greenford area, including individuals and businesses who use or enquire about our storage units, related services, and facilities. It also applies to visitors to our premises where personal data is collected, such as via CCTV or visitor sign-in processes.
Data Controller
Storage Greenford is the data controller responsible for deciding how and why your personal data is used. This means we are responsible for ensuring that your personal data is handled lawfully, fairly, and transparently, and for safeguarding your rights under data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identification and contact details such as name, postal address, billing address, contact address, date of birth, and other identifying information you provide to confirm your identity.
Contact information such as email address, contact preferences, and other details you provide when communicating with us or completing forms.
Contract and account information such as storage unit number, contract start and end dates, services selected, payment status, invoices, and correspondence relating to your account.
Payment and transaction information such as payment method details, payment history, and records of amounts paid and outstanding. We do not store full payment card details when payments are processed by external payment processors.
Security and access information such as CCTV footage at our premises, vehicle registration numbers recorded for site management and security, access logs for entry systems, and visitor sign-in records.
Communication records such as emails, letters, online enquiry forms, call notes, and any feedback or complaints you provide.
Technical data relating to your use of our website or online tools such as IP address, browser type, device identifiers, and information derived from cookies or similar technologies where applicable and lawful.
How We Collect Personal Data
We collect personal data directly from you when you make an enquiry, complete a booking or storage agreement, create or manage an account, visit our premises, communicate with us, or use our website or online tools. We may also receive personal data from third parties such as payment processors, referencing agencies, or partners where this is necessary for us to provide services or manage risk lawfully.
Lawful Basis for Processing
We process your personal data only where we have a valid legal basis under GDPR. Depending on the circumstances, we may rely on the following lawful bases:
Contract: We process personal data to enter into and perform our contract with you, including setting up your storage unit, managing your account, processing payments, and providing customer support.
Legal obligation: We process personal data where this is necessary to comply with legal obligations, such as tax and accounting rules, fraud prevention requirements, security and safety laws, and responding to lawful requests from public authorities.
Legitimate interests: We process certain data where this is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing and improving our services, maintaining site and property security via CCTV and access controls, handling queries and complaints, and pursuing or defending legal claims.
Consent: In limited cases, we may rely on your consent, for example for certain optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services and related support, including setting up, managing, and terminating your storage agreement.
To manage payments, billing, and account administration, including issuing invoices, processing payments, and recovering debts.
To maintain safety and security on our premises, including monitoring CCTV and access logs to prevent unauthorised access, protect property, and investigate incidents.
To respond to your enquiries, requests, feedback, and complaints, and to communicate with you about your account and our services.
To comply with legal and regulatory requirements, including record-keeping, audit, tax, and reporting obligations.
To improve our services and operations, including analysing usage patterns on our website, maintaining service quality, and planning capacity and facilities.
To send you information about our services, promotions, and updates where we are permitted to do so by law. You can opt out of non-essential marketing communications at any time.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to retain it by law. This generally means:
Contract and billing records are kept for the duration of your contract and for a reasonable period afterwards, typically up to several years, to comply with legal obligations and to manage any disputes or queries.
CCTV footage and access records are kept for a shorter period, usually for security and incident investigation purposes, unless a specific incident requires us to retain footage for longer.
Marketing and enquiry data is retained for a period that allows us to respond to your enquiry and manage our relationship with you, or until you withdraw consent or object, where applicable.
When data is no longer needed, it is securely deleted, anonymised, or destroyed in accordance with our data retention and destruction policies.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data under our instructions and are required to implement appropriate security measures. Examples of such processors include:
Payment processors that handle card and electronic payments.
IT, hosting, and system support providers that help us operate our business systems, website, and storage management tools.
Security service providers that assist with CCTV operation, alarm systems, and access management.
Professional advisers such as accountants, auditors, or legal advisers where this is necessary for our business operations and legal obligations.
We may also share personal data with other third parties where we are required or permitted to do so by law, such as law enforcement agencies, regulators, or courts. We do not sell your personal data.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data receives an equivalent level of protection. This may include using contracts approved for use under data protection laws or relying on other recognised safeguards.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include physical security at our premises, access controls on systems, encryption or pseudonymisation where appropriate, staff training, and regular review of our security practices.
Your Data Protection Rights
You have certain rights under data protection law in relation to your personal data. These include:
The right to access your personal data and obtain a copy of the information we hold about you, subject to certain limitations.
The right to request correction of inaccurate or incomplete personal data.
The right to request deletion of your personal data where there is no good reason for us to continue processing it, subject to legal or contractual retention requirements.
The right to request restriction of processing in certain circumstances, for example while we verify the accuracy of data or consider an objection you have raised.
The right to object to processing based on our legitimate interests, and to object to direct marketing at any time.
The right to data portability, allowing you to request that certain personal data is provided in a structured, commonly used, and machine-readable format, or transferred to another controller where technically feasible.
Where we rely on consent, you have the right to withdraw that consent at any time.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the details provided on our website or in your contract documentation. We will respond to your request in accordance with applicable legal time limits and may need to verify your identity before acting on your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we handle your personal data. We encourage you to contact us first so that we can attempt to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updates will be made available through our usual communication channels. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information.
