Storage Brent Park Privacy Policy
This Privacy Policy explains how Storage Brent Park collects, uses, stores and shares personal data of all Storage Brent Park customers in the area, and of individuals who contact or interact with us. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. Please read this Policy carefully to understand how and why we process your personal data.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Brent Park customers in the area, prospective customers, former customers, visitors to our premises, and individuals who contact us with enquiries, complaints or feedback. By using our services or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy.
Personal data we collect
We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification data such as full name, title, date of birth, and identification documents where required for security and contract purposes.
Contact details such as correspondence address, billing address, and any other contact information you choose to provide.
Account and contract information such as storage unit number, contract start and end dates, services purchased, payment history and customer reference numbers.
Payment and billing data such as payment method, billing records and transaction details. We do not store full card numbers where payment is processed through a secure third party.
Communication data such as enquiries, complaints, feedback, and records of communications with you including notes from phone calls or in-person discussions relevant to your account.
Security and access information such as CCTV footage at our premises, access logs, vehicle registration numbers recorded for site security, and incident reports where relevant.
Technical information relating to the use of our website where applicable, such as IP address, device information and basic usage data collected through standard web server logging or similar technologies.
How we collect your personal data
We collect personal data directly from you when you contact us to enquire about our services, enter into a storage agreement, make a payment, visit our premises, or otherwise communicate with us by any means. We may also receive data from third parties where this is necessary for credit checking, fraud prevention, debt recovery or to comply with legal obligations. CCTV images and access records are collected automatically when you visit our facilities.
Lawful bases for processing your data
We rely on one or more of the following lawful bases under data protection law to process your personal data:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, handling payments and communicating with you about your agreement.
Legal obligation: We process certain data to comply with our legal and regulatory obligations, for example maintaining financial and tax records, cooperating with law enforcement, and ensuring health and safety at our premises.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and interests. This includes ensuring site security through CCTV and access control, preventing fraud, managing disputes, improving our services and maintaining accurate records.
Consent: In limited cases we may rely on your consent, for example where we choose to send certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide storage services, administer your contract, allocate and manage your storage unit, and provide customer support.
To process payments, manage billing, handle direct debits or recurring payments where applicable, and maintain appropriate financial records.
To communicate with you about your account, including confirmations, updates, reminders, changes to terms and conditions, and responses to your enquiries.
To maintain security and safety at our premises, including the operation of CCTV systems, access control, monitoring of incidents and the protection of property and individuals.
To manage debt recovery and resolve disputes, including contacting you about overdue payments and working with third parties where necessary.
To comply with legal and regulatory requirements, respond to requests from public authorities where lawfully required and maintain appropriate business records.
To improve our services and operations, including internal analysis, service development and staff training.
Data retention and storage
We retain personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements. The specific retention period for your data will depend on the type of information and the context in which it was collected.
Customer account and contract records are typically retained for a period after your agreement ends in order to handle queries, resolve disputes, recover any outstanding amounts and comply with legal obligations. CCTV recordings are retained for a limited period, unless an incident is under investigation or needs to be kept for legal reasons. Payment records are retained in line with financial and tax legislation.
At the end of the relevant retention period, personal data is securely deleted, anonymised or otherwise put beyond use, in accordance with our data retention procedures.
Data sharing and processors
We may share your personal data with carefully selected third parties where this is necessary for the purposes described in this Policy and where appropriate safeguards are in place. These third parties act either as independent controllers or as processors on our behalf.
Typical categories of data recipients include payment service providers who process card and electronic payments securely on our behalf, IT and cloud service providers who support our business systems, companies that provide CCTV or access control services, professional advisers such as accountants, lawyers or auditors, and debt recovery agencies involved in the recovery of unpaid charges.
Where we use processors, they are only permitted to process your personal data on our documented instructions, must keep it secure, and are not allowed to use it for their own purposes. We do not sell your personal data to third parties.
International data transfers
If any of our service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in line with data protection law. This may include reliance on adequacy regulations, standard contractual clauses or equivalent measures.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions, but we will always respond to any request you make in accordance with applicable law.
Right of access: You have the right to obtain confirmation as to whether we process your personal data and to request a copy of the data we hold about you.
Right to rectification: You can ask us to correct or update personal data that is inaccurate or incomplete.
Right to erasure: In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected and we have no legal reason to keep it.
Right to restriction of processing: You can ask us to restrict the processing of your data in specific situations, such as while we are verifying its accuracy or assessing an objection you have raised.
Right to data portability: In some cases you have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format, and to have it transmitted to another controller where technically feasible.
Right to object: You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests or we need to continue for legal claims.
Rights relating to consent: Where we rely on your consent, you can withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, disclosure or alteration. These measures include physical security at our premises, controlled access to systems, staff training and appropriate contractual safeguards with our service providers. While we take all reasonable steps to protect your data, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or changes in applicable law. Any updated version will take effect from the date of publication. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.
