Storage Stanmore Privacy Policy
This Privacy Policy explains how Storage Stanmore collects, uses, stores, and protects personal data relating to customers and prospective customers in the Stanmore area. It also explains the lawful bases we rely on under the UK General Data Protection Regulation and the EU General Data Protection Regulation, as applicable, and sets out your rights in relation to your personal data.
This Privacy Policy applies to all Storage Stanmore customers and anyone who makes enquiries or uses our services in the Stanmore area, whether you contact us online, by post, or in person.
Who We Are and Scope of This Policy
Storage Stanmore is a provider of storage and related services to individuals and businesses in the Stanmore area. For the purposes of data protection law, Storage Stanmore is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed.
This Privacy Policy covers personal data we collect from you when you use or enquire about our services, visit our premises, interact with our website, or otherwise communicate with us in the context of storage services.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, billing address, contact address, and any other contact details you choose to provide.
Account and contract information, such as storage unit numbers, access codes assigned to you, contract dates, service history, and any preferences relating to your storage arrangements.
Payment and transaction information, such as payment method, partial payment card details where required for verification, payments made, outstanding balances, refunds, and billing history. We do not store full payment card details when processed by secure payment processors.
Communication data, such as emails, written correspondence, notes of phone calls or in-person discussions, and records of any complaints, queries, or feedback you provide.
Security and access data, which may include CCTV footage recorded on our premises, entry and exit logs, access control records, and incident reports for security and safety purposes.
Technical and usage information where relevant, such as information about how you use our website or online account tools, including device information, approximate location, and log data. This is collected through server logs and similar technologies.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, sign a storage agreement, set up or manage an account, make payments, or communicate with us in any way.
We may also collect data automatically through our website or security systems at our locations, for example through CCTV at our premises or logs generated when you access secure areas.
In limited circumstances, we may receive personal data about you from third parties, such as credit reference agencies where checks are necessary, or from law enforcement or regulatory bodies when they contact us.
Lawful Bases for Processing Your Data
We process your personal data only when we have a lawful basis to do so under data protection law. Depending on the context, we may rely on the following lawful bases:
Contract: We process your data where it is necessary to enter into, perform, or manage a contract with you, such as providing storage services, managing your account, and processing payments.
Legal obligation: We process certain data to comply with legal and regulatory requirements, for example maintaining records for tax and accounting purposes, cooperating with law enforcement, or meeting health and safety obligations.
Legitimate interests: We process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This includes managing and improving our services, ensuring the security of our premises, preventing and detecting fraud or misuse, and handling customer queries and complaints.
Consent: In some cases we rely on your consent, for example if we send you certain types of marketing communications that require consent, or if we use optional cookies that are not strictly necessary. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, administer, and manage your storage account, including verifying your identity where needed, preparing and managing contracts, operating access systems, and providing customer support.
To process payments, issue invoices, manage billing arrangements, chase overdue payments where necessary, and keep appropriate financial records.
To maintain the safety and security of our premises, staff, customers, and property, including monitoring through CCTV, access systems, and incident reporting and investigation.
To communicate with you regarding your storage services, such as contract renewals, changes to terms, access or security updates, service notifications, or responses to your enquiries.
To manage our business operations, including service planning, performance monitoring, staff training, and internal reporting, while using only the data we reasonably need for those purposes.
To comply with legal obligations and cooperate with law enforcement, courts, regulators, and similar bodies where we are legally required or permitted to do so.
To send you information about services or offers that may be relevant to you, where the law allows us and subject to your preferences and rights to object or opt out.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.
In general, we retain customer account and contract data for a period after your contract ends, to handle any queries, disputes, or legal claims. Financial records are retained for the period required by tax and accounting laws.
CCTV recordings and access logs are kept for a limited period, which may be extended where necessary for the investigation of incidents, for the establishment or defence of legal claims, or to comply with lawful requests from authorities.
When personal data is no longer needed, we take steps to securely delete or anonymise it so that it can no longer be associated with an identifiable individual.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with third parties where necessary and lawful, including:
Service providers acting as data processors who provide services on our behalf, such as payment processing, secure data storage, customer relationship management systems, technical support, and security monitoring. These processors are bound by contracts that require them to protect your data, act only on our instructions, and comply with data protection law.
Professional advisers such as accountants, auditors, or legal advisers, where this is necessary for legitimate business purposes and subject to confidentiality obligations.
Law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required or permitted to do so by law, or where it is necessary to protect our rights, property, or the safety of our customers and staff.
If we undergo a business sale, merger, or reorganisation, we may share relevant personal data with prospective or actual buyers or their advisers, under appropriate confidentiality protections and only where lawful.
Where processors or other recipients are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, in line with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply subject to certain conditions and exceptions. You may:
Request access to the personal data we hold about you, including receiving a copy of it.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the purposes for which it was collected and there is no legal obligation to retain it.
Object to the processing of your personal data where we rely on legitimate interests and you believe your rights and interests outweigh our reasons for processing. You also have an absolute right to object to direct marketing.
Request restriction of processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.
Request the transfer of your personal data to you or to another controller in a structured, commonly used, machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on your consent for processing. Withdrawal of consent will not affect the lawfulness of any processing carried out before you withdrew consent.
You also have the right to lodge a complaint with your local data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us first so we can try to resolve any concerns.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include physical security at our premises, controlled access to systems and data, staff training, and appropriate data security policies and procedures proportionate to the nature of the data and the risks involved.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will take effect when the revised Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
