Storage North Woolwich Privacy Policy
This Privacy Policy explains how Storage North Woolwich collects, uses, stores and protects personal data relating to customers and prospective customers in the Storage North Woolwich service area. It is designed to meet the requirements of the UK General Data Protection Regulation and related data protection laws. By using our storage services, visiting our site or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage North Woolwich customers, as well as individuals who make enquiries about our services, within the Storage North Woolwich area. It covers personal data processed in connection with self storage units, associated services, customer accounts, billing, marketing and customer support.
Who We Are and Role as Data Controller
Storage North Woolwich acts as the data controller for the personal information described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in compliance with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about or use our storage services:
Identification and contact details such as full name, postal address, billing address, and other contact information you choose to provide.
Account and contract information such as customer account numbers, storage unit numbers, contract start and end dates, access permissions, notes relating to your account and records of communications with you.
Payment and transaction information such as payment method type, payment status, invoices, amounts paid, dates of payment, and records of refunds or arrears. We do not store full payment card details, but may retain limited information necessary for transaction records and fraud prevention.
Access and security information such as entry and exit logs for storage facilities, access codes, key or fob allocation details, and where in use, vehicle registration numbers associated with access control.
Technical and usage data related to your interactions with our websites or online tools, including information provided in contact forms and service enquiry forms.
Marketing preferences such as records of your consent to receive marketing communications and your preferences about how we contact you.
How We Collect Your Data
We collect personal data directly from you when you complete a booking, sign a storage agreement, make a payment, contact us by any communication channel, or visit our facilities. We may also collect certain data automatically when you visit our website, such as technical usage information.
In some cases, we receive personal data about you from third parties, such as payment service providers, credit reference agencies where relevant, or individuals who are authorised by you to manage or access your storage unit.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a valid lawful basis under data protection laws. The main purposes and corresponding lawful bases are:
To provide storage services and manage your account, including setting up your contract, managing payments, granting facility access and handling customer service queries. The lawful basis for this processing is performance of a contract, or taking steps at your request prior to entering into a contract.
To comply with legal and regulatory obligations, such as record keeping, tax requirements, prevention of fraud and assisting law enforcement when we are legally required to do so. The lawful basis is compliance with a legal obligation.
To protect our legitimate business interests, for example by maintaining site security, managing access logs, recovering debts, improving our services and defending legal claims. The lawful basis is our legitimate interests, balanced against your rights and freedoms. We only rely on this basis where our interests are not overridden by your privacy interests.
To send you service related communications, for example information about changes to your contract, facility access or terms and conditions. The lawful basis is performance of a contract and legitimate interests.
To send you marketing communications about similar services, promotions or updates where you have given your consent or where we are otherwise allowed to do so under marketing laws. The lawful basis is consent or legitimate interests, depending on the circumstances. You can opt out of marketing communications at any time.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting and reporting requirements.
Customer account and contract data is typically retained for a period after your storage agreement ends, to handle any disputes, queries and regulatory requirements. Payment and invoice records are kept for the period required by tax and financial regulations. Access logs and security related data are retained for a period that allows us to investigate incidents, protect our facilities and manage legal claims.
When personal data is no longer required for these purposes, we will securely delete, anonymise or otherwise irreversibly remove identifying details in line with our data retention procedures.
Data Processors and Third Party Recipients
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These service providers are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures.
Typical categories of processors and recipients include customer management and billing service providers, payment processing services, secure cloud hosting and data storage providers, IT support and maintenance providers and security and access control system providers.
Where required, we may disclose personal data to professional advisers such as lawyers, accountants or insurers, and to public authorities, regulators or law enforcement agencies if legally obliged or permitted to do so.
If any processing involves transfer of personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent measures, to protect your data.
Data Security
We take the security of your personal data seriously. We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or destruction. These measures include access controls, security protocols for our facilities, restricted access to personal data for staff who need it to perform their duties and regular review of our security practices.
Your Data Protection Rights
As an individual whose personal data we process, you have a number of rights under data protection law. Subject to certain conditions and legal limitations, these include the right to:
Access your personal data and obtain a copy of the information we hold about you.
Request correction of any inaccurate or incomplete personal data.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected.
Request restriction of processing of your personal data in certain circumstances, for example while we verify accuracy or consider an objection.
Object to processing based on our legitimate interests, including profiling, where you believe your rights and interests override our reasons for processing.
Object to the use of your personal data for direct marketing at any time.
Request the transfer of certain personal data to you or to a third party in a structured, commonly used and machine readable format, where technically feasible.
Withdraw consent where we rely on your consent as our lawful basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdraw it.
Exercising Your Rights
If you wish to exercise any of the rights described above, or if you have any questions or concerns about how we handle your personal data, you can contact us using the contact methods provided on our main customer communications and documentation. We may need to verify your identity before responding to your request to protect your confidentiality and security.
You also have the right to lodge a complaint with the data protection supervisory authority if you are unhappy with how we have handled your personal data. We would, however, appreciate the chance to deal with your concerns first, so we encourage you to contact us in the first instance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal and regulatory developments. The most current version will always apply to the personal data we hold. Any material changes will be communicated through appropriate channels so that you remain informed about how your personal data is used.
This Privacy Policy is intended to provide clear and comprehensive information about the processing of personal data by Storage North Woolwich for all customers and enquirers in the Storage North Woolwich area.
