Storage Downham Privacy Policy
This Privacy Policy explains how Storage Downham collects, uses, stores, and protects personal data relating to all Storage Downham customers in our service area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act.
By using Storage Downham services, contacting us, or providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Downham customers and prospective customers in our service area, including individuals, sole traders, and representatives of business customers. It also applies to individuals who contact us with enquiries, use our website, visit our premises, or otherwise interact with us.
Types of personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identity and contact information, such as your name, postal address, billing address, service address, date of birth, and other identifying details you provide, as well as communication preferences.
Contact and communication records, including records of correspondence with you, and notes relating to your interactions with us.
Contract and account data, such as details of the services you have requested, move-in and move-out dates, storage unit details, rental terms, payment status, and account history.
Payment-related information, such as payment method details, invoices, transaction history, and information necessary to process payments and issue refunds. We do not retain full payment card details where a third-party payment processor is used.
Usage and technical data when you use our website, such as log data, basic analytics information, and information about the device and browser you use. This may include IP address, dates and times of access, and pages visited.
Security and access information, which may include visitor logs, access control records, vehicle registration numbers you provide, and closed-circuit television images where CCTV is in operation at our sites.
Any other information you voluntarily provide to us as part of an enquiry, complaint, survey, or customer feedback.
How we collect personal data
We collect personal data directly from you when you contact us by phone, in person, by post, or through our website; when you request a quote; when you sign a storage agreement; and when you update your details or communicate with us during your relationship as a customer.
We may receive personal data from third parties where this is necessary for our services, such as from payment providers, referencing agencies, or professional advisers acting on your behalf. We may also generate personal data in the course of providing our services, such as account records and security logs.
Lawful bases for processing your data
We will only process your personal data where we have a valid lawful basis to do so. Depending on the circumstances, we rely on the following lawful bases:
Contract: To take steps at your request before entering into a contract and to perform our contract with you, including setting up your account, providing storage services, managing payments, and administering your agreement.
Legal obligation: To comply with legal and regulatory obligations, including tax, accounting, and record-keeping requirements, and obligations relating to health and safety, security, and crime prevention.
Legitimate interests: To pursue our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes managing and improving our services, maintaining site security, preventing fraud and misuse, handling queries and complaints, and promoting our services to existing customers in a proportionate way.
Consent: Where we rely on your consent, for example, for certain forms of marketing or where required for specific optional processing. You have the right to withdraw your consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.
How we use your personal data
We may use your personal data for the following purposes:
To prepare quotes, respond to enquiries, and provide information about our services when you request it.
To set up, manage, and administer your storage account and contract, including verifying your identity, managing access to storage units, handling billing and payments, and communicating with you about your account.
To maintain the safety and security of our premises, customers, and staff, including using CCTV and access control systems where operated.
To manage our relationship with you, including customer service, correspondence, feedback, and complaint handling.
To comply with legal, regulatory, and law enforcement requirements, including responding to lawful requests from public authorities and maintaining necessary records.
To manage our business operations, including internal administration, financial management, auditing, and service improvement.
Where permitted, to send you information about services that are similar to those you have already purchased or enquired about. You can object to this at any time.
Data retention and storage
We keep personal data only for as long as is reasonably necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting requirements.
In general, we retain customer account data for the duration of your contract and for a defined period after it ends, to deal with any queries, disputes, or legal obligations. Financial and transaction records are retained for the period required by tax and accounting laws.
CCTV footage, where used, is typically retained for a limited period necessary for security and incident investigation, unless a longer retention is required for a specific investigation or legal claim.
When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer be linked to you.
Data processors and third-party sharing
We may share your personal data with trusted service providers who act as data processors on our behalf. These processors may provide services such as payment processing, IT hosting and support, customer relationship management, security and access control, or professional advisory services. They are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures.
We may also share personal data, where necessary, with banks and financial institutions, professional advisers, insurers, prospective buyers or business partners in the context of a business sale or restructuring, and public authorities or law enforcement agencies when required by law or where it is necessary to protect our rights, property, or the safety of individuals.
We do not sell your personal data to third parties.
International data transfers
Where we transfer personal data outside the UK or European Economic Area, we will ensure that an adequate level of protection is provided, for example by using appropriate contractual protections or relying on an adequacy decision, in accordance with data protection laws.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, and safeguarding of physical and electronic records, proportionate to the nature and sensitivity of the data.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access: You have the right to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction: You may request that we restrict the processing of your personal data in certain cases, such as when you contest its accuracy or object to processing.
Right to data portability: Where we process your personal data by automated means based on your consent or on a contract, you may have the right to receive that data in a commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
Right to object: You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including profiling related to those interests. You also have the right to object at any time to direct marketing.
Rights relating to automated decision-making: You have rights in relation to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you, where such processing occurs.
Exercising your rights and complaints
You can contact us to exercise any of your rights or to raise questions about how we handle your personal data. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by data protection law.
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant data protection supervisory authority.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply from the date it is made available. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
