Storage Slade Green Privacy Policy
This Privacy Policy explains how Storage Slade Green collects, uses and protects personal data relating to customers and prospective customers using our storage services in the surrounding area. It applies to all Storage Slade Green customers and enquirers in the local area, whether you contact us online, by post or in person at our facility.
Who we are and scope of this policy
Storage Slade Green is a storage service provider offering units and related services to individuals and businesses. For the purposes of data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, Storage Slade Green is the data controller of the personal information described in this policy.
This Privacy Policy applies to all personal data we process in connection with enquiries, quotations, reservations, contracts, access to our site, payment for services and ongoing customer relationships within the Storage Slade Green service area.
Types of personal data we collect
We collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identification and contact details: name, postal address, billing address, contact address, and similar identifying information; personal or business contact details such as email address and any other contact channels you choose to provide.
Account and contract data: customer reference number, unit number, details of storage services used, move-in and move-out dates, contract terms, correspondence relating to your contract and service usage history.
Payment and billing information: payment method details and related transaction records. We do not store full payment card numbers where payments are processed through a secure payment processor; only limited information such as the last digits and transaction references may be retained for verification and accounting purposes.
Security and access data: CCTV footage and images captured on or near our premises, records of access to the site or units where an access control system is in place, logs relating to key codes or access cards, and information relating to security incidents or accidents.
Communications and enquiries: information you provide when you contact us with questions, feedback or complaints, including the content of messages, call notes and any information you choose to provide about your circumstances.
Business customer details: for business or organisational customers, we may collect details of authorised contacts, company details, job titles and related information required to manage the account.
How we collect personal data
We collect personal data directly from you when you request a quote, make a booking, sign a contract, set up a payment method, visit our site, use our services or contact us with an enquiry. We may also receive information from third parties, such as comparison or referral services, where you have asked them to share your information with us, and from payment processors when a transaction is completed or fails.
Lawful basis for processing your data
We only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:
Contract: to take steps at your request before entering into a contract and to perform our contract with you. This includes setting up your account, managing your unit, processing payments, communicating with you about your booking and providing customer support.
Legal obligation: to comply with legal and regulatory requirements, including tax and accounting rules, safety and security obligations, and responding to lawful requests from public authorities.
Legitimate interests: to pursue our legitimate business interests in operating and improving our storage services, while always considering and balancing your rights and interests. This covers activities such as maintaining site security, using CCTV for crime prevention and investigation, managing and improving customer service, collecting unpaid charges, and defending or establishing legal claims.
Consent: in limited situations where we ask for your clear permission to use your data for a specific purpose that is not covered by another lawful basis. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide our storage services: creating and managing your account, confirming bookings, administering contracts, providing access to the facility, responding to enquiries and providing customer service.
To process payments and manage billing: issuing invoices, processing one-off and recurring payments, handling payment queries and refunds, and keeping financial records for accounting and auditing.
To ensure safety and security: operating CCTV and access control systems for crime prevention and detection, monitoring for unauthorised access, and investigating security incidents or accidents on site.
To communicate with you: sending service messages related to your booking, contract, payments, changes to our terms or policies, or important information about the operation of the site.
To manage our business: analysing how our services are used, improving our operations and facilities, training staff and handling disputes, complaints or legal claims.
Data retention and storage
We keep personal data only for as long as is necessary for the purposes for which it was collected, to satisfy legal, accounting or reporting requirements, and to resolve disputes or enforce our agreements.
In general, contact, contract and billing records are retained for a number of years after your relationship with us ends, in line with legal and tax retention requirements. CCTV footage is kept for a shorter period, typically only as long as needed for security monitoring and investigation, unless an incident requires us to retain particular footage for longer as evidence.
When personal data is no longer required, we take reasonable steps to securely delete or anonymise it so it can no longer be linked back to you.
Use of data processors and third parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These include providers of payment processing services, customer management systems, IT hosting and support services, CCTV system maintenance and secure document destruction.
These processors only process personal data in accordance with our instructions and are required to implement appropriate security measures and comply with data protection law. We do not allow our processors to use your personal data for their own independent purposes.
We may also need to share your data with other third parties in specific circumstances, such as insurers, professional advisers, debt collection agencies, or law enforcement and regulatory authorities where this is required by law or necessary to protect our rights, the rights of others, or site security.
We do not sell your personal data to third parties.
International data transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is accessed from outside these regions, we ensure that appropriate safeguards are in place to protect your personal data. These may include using countries that have been recognised as providing an adequate level of protection, or putting in place standard contractual clauses or equivalent measures approved by data protection authorities.
How we protect your data
We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. Measures may include access controls, encryption in transit where appropriate, secure storage systems, staff training and regular review of our security arrangements.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Slade Green customers and individuals in our service area, subject to certain legal limitations and exemptions.
Right of access: you can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how we use it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: in certain situations, you can ask us to delete your personal data. This right may not apply where we need to retain information to comply with legal obligations or to establish, exercise or defend legal claims.
Right to restriction: you can ask us to restrict the processing of your personal data in specific circumstances, for example while we are investigating a concern you have raised about accuracy or our use of your information.
Right to object: you can object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for legal claims.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you can request that we provide a copy of your personal data in a commonly used, machine-readable format, or that we transmit it to another controller where technically feasible.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, the way we process personal data or legal requirements. The most recent version will always apply to our use of your personal data.
