Storage Earlsfield Privacy Policy
This Privacy Policy explains how Storage Earlsfield collects, uses, stores and protects personal data relating to customers and prospective customers in the Earlsfield area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Earlsfield customers and prospective customers located in the Earlsfield area who use or enquire about our storage services. It covers personal data collected in person at our premises, over the phone, through online forms, and via any other method of communication we make available from time to time.
Personal Data We Collect
We collect and process a range of personal data in order to provide and manage our storage services. The categories of personal data we may collect include:
Identification and contact information, such as full name, postal address, billing address, and other contact details.
Account and contract information, such as storage unit number, contract start and end dates, services purchased, payment history, and communications relating to your account.
Payment and billing details, such as payment method information and transaction details. Payment card details may be processed by our payment service providers and are not always stored by us directly.
Security and access information, such as access codes, vehicle registration numbers recorded for site access purposes, and records of visits where appropriate.
Communication records, including enquiries, complaints, feedback, and any correspondence relating to the provision of our services.
Technical information, where applicable, such as basic device or browser information gathered when you interact with our online services, and general usage data which helps us to improve our services and security.
How We Collect Personal Data
We may collect personal data directly from you when you request a quote, sign a storage agreement, make a payment, update your account, visit our premises, or contact us with an enquiry. We may also receive personal data from third parties such as payment processors or service providers who assist us in supplying our services, provided that such sharing is lawful and necessary.
Lawful Basis for Processing
We process your personal data only when we have a valid legal basis to do so. The main lawful bases we rely on are:
Contract. We process your personal data when it is necessary for the performance of a contract with you, or in order to take steps at your request before entering into a contract. This includes managing your storage unit, administering your account, and handling payments.
Legal obligation. We may process your personal data when required to comply with legal and regulatory obligations, for example in relation to tax, accounting, security, or law enforcement requests.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests and these are not overridden by your interests or fundamental rights and freedoms. Our legitimate interests include managing and improving our storage services, ensuring site security and safety, preventing fraud, and protecting our property and staff.
Consent. In certain circumstances we may seek your consent to process your personal data for specific purposes, such as sending optional marketing communications. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including setting up your account, granting access to storage units, handling renewals and terminations, and providing customer support.
To process payments and manage billing, including issuing invoices, receipts, and payment reminders.
To maintain safety and security on our premises, including managing access controls and taking reasonable measures to prevent unauthorised access and misuse of our facilities.
To communicate with you about your account, service updates, changes to our terms, and important information regarding your storage unit.
To comply with legal and regulatory obligations, including record keeping, responding to lawful requests from authorities, and maintaining appropriate business records.
To improve our services, for example by analysing usage information, handling feedback and complaints, and carrying out internal reporting and management.
Data Retention
We will keep your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. In determining appropriate retention periods, we consider the type of data, the purpose of processing, applicable legal requirements, and our operational needs.
In general, we retain customer account and contract information for a period after the end of the storage agreement in order to respond to queries, manage potential disputes, meet legal and tax obligations, and maintain accurate business records. Security and access information may be retained for a shorter period, except where it is required for investigation or legal purposes. At the end of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer identify you.
Data Sharing and Processors
We do not sell your personal data. We may share personal data with carefully selected third parties where this is necessary to provide our services, meet our legal obligations, or protect our rights. Such third parties may include:
Payment processors who handle card payments and other financial transactions on our behalf.
IT and systems providers who support our website, databases, communications systems, and security infrastructure.
Professional advisers such as accountants or legal advisers who assist us in fulfilling our legal and regulatory obligations.
Security or maintenance providers who help ensure the safe and effective operation of our premises and systems.
Public authorities, law enforcement agencies, or regulators when we are legally required or permitted to share information.
Where third parties process personal data on our behalf they act as data processors. We ensure that such processors are subject to appropriate contractual obligations regarding confidentiality, data protection, and security in line with GDPR requirements.
International Data Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law. These safeguards may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Data Security
We take reasonable and proportionate steps to secure your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, secure storage, encryption or pseudonymisation where appropriate, regular system monitoring, and staff training. While we strive to protect your personal data, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
Your Data Protection Rights
Under GDPR and applicable data protection laws, you have a number of rights in relation to your personal data. These may include:
Right of access. You can request confirmation that we process your personal data and obtain a copy of that data, together with certain information about how it is used.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You may ask us to restrict the processing of your personal data in specific situations, such as while we are assessing a request for rectification or where you object to processing.
Right to data portability. Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine readable format, or transmit it directly to another controller where technically feasible.
Right to object. You have the right to object to processing carried out on the basis of legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims. You also have the right to object at any time to direct marketing.
Right to withdraw consent. Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
You may also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. The latest version will always apply to the personal data we hold about you. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
