Storage Lower Clapton Privacy Policy
This Privacy Policy explains how Storage Lower Clapton collects, uses, stores and protects personal data relating to customers and prospective customers in the Lower Clapton area. It is designed to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or contacting us about them, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Lower Clapton customers, former customers and individuals who make enquiries or bookings for storage services in the Lower Clapton area, whether the interaction occurs online, by post or in person at our premises.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, title, date of birth and a copy of identification documents where required for security or verification purposes.
Contact details such as home or business address, billing address, and any correspondence address you provide.
Communication data such as the content of enquiries, complaints, feedback and any other communications you send to us, along with the date and time of those communications.
Contract and account data such as the storage unit number, contract start and end dates, payment status, rental history, access permissions and information required to administer your storage agreement.
Payment and transaction data such as payment method details to the extent required to take payment or issue refunds, and records of invoices, charges and payment dates. We do not store full card details where this is not necessary.
Security and access data such as records of access to the storage facility, including key or code usage times, CCTV images within and around our premises where operated, incident reports and information relating to security checks.
Technical and usage data such as information about how you interact with our booking systems or digital tools used to manage your storage arrangements, including basic log information and device identifiers where applicable.
How We Collect Your Personal Data
We collect personal data directly from you when you request a quote, make a booking, sign a storage agreement, communicate with us or visit our premises. We may also receive data from third parties where this is necessary to provide our services or meet legal requirements, for example from payment service providers, insurers, or law enforcement bodies.
Lawful Basis for Processing
We will only process your personal data where we have a valid lawful basis under data protection law. Depending on the situation, we rely on the following lawful bases:
Contract. We process your personal data where it is necessary to enter into, administer or perform a storage agreement with you, including handling bookings, managing your account, taking payment and providing access to your storage unit.
Legal obligation. We process data where this is necessary to comply with legal and regulatory obligations, such as record keeping, tax and accounting requirements, law enforcement requests and health and safety obligations on our premises.
Legitimate interests. We process data where this is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes maintaining the security of our facility, preventing fraud and misuse, managing and improving our services, handling enquiries and complaints, and protecting our property and legal rights.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional marketing communications or where we are required to obtain consent for specific uses of CCTV in clearly marked areas. Where processing is based on consent, you can withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, manage and administer storage services, including setting up your account, managing bookings, creating and maintaining your storage contract, arranging access and responding to day to day queries.
To take payment, issue invoices and statements and manage any arrears, refunds or disputes.
To communicate with you about your contract, payments, access arrangements, service changes, renewals and important notices relating to the operation or security of the facility.
To maintain safety and security at our premises, including through access control, monitoring and the use of CCTV where installed.
To comply with legal and regulatory requirements, cooperate with lawful requests from public authorities and enforce our rights arising from contracts or applicable law.
To improve our services and operations by analysing how our facilities and systems are used, addressing issues raised by customers, and carrying out internal reporting and training.
Retention of Personal Data
We will keep your personal data only for as long as is necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.
In general, we retain customer and contract records for a period that covers the length of your agreement plus a number of years afterwards, to enable us to respond to queries, manage potential legal claims and meet statutory obligations. Payment records are retained for the period required under tax and financial laws. CCTV footage, access logs and security records are usually stored for a shorter period, unless a longer retention is required for the investigation of an incident, dispute or suspected criminal activity.
At the end of the relevant retention period, we will securely delete or anonymise your personal data so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors may include payment service providers, accountants, IT and system support providers, security and CCTV maintenance services, data storage and backup providers and professional advisers.
These processors are only permitted to use your personal data in accordance with our instructions, for the purposes described in this Privacy Policy and subject to appropriate contractual and technical safeguards.
We may also share your data with other third parties, acting as independent controllers, where this is required by law or necessary to protect our rights, such as law enforcement bodies, courts, regulatory authorities, insurers or debt recovery services.
We do not sell your personal data to third parties.
International Transfers
Where any of our service providers or data storage solutions are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection laws. This may include using jurisdictions that have been formally recognised as providing an adequate level of protection or putting in place standard contractual clauses or equivalent mechanisms.
Your Data Protection Rights
Under the UK GDPR and related laws, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these rights may include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how it is used.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You can ask us to restrict the processing of your data in certain situations, such as while we are considering a request to rectify or erase your data.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to transmit it to another controller.
Right to object. You can object to processing carried out on the basis of our legitimate interests, including any direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or where processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent for specific processing activities, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can seek to resolve any concerns.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures include access controls, physical security at our premises, staff training and the use of secure systems for storing and transmitting data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. The most recent version will always apply to your information. We recommend that you review this page periodically to stay informed about how we handle your data.
