Storage Purley Privacy Policy
This Privacy Policy explains how Storage Purley collects, uses, stores, and protects personal data relating to customers and prospective customers. It applies to all Storage Purley customers and individuals enquiring about our services in the local area, whether you contact us online, by post, or in person at our premises.
We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner, in compliance with the UK General Data Protection Regulation and applicable data protection laws.
Who This Policy Applies To
This Privacy Policy applies to all Storage Purley customers, former customers, individuals who make enquiries about our storage services, and any authorised persons or emergency contacts whose details are provided to us in connection with a customer account. By engaging with our services, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and the services you use. The types of personal data we may collect include:
Identification data such as full name, date of birth, and proof of identity details recorded from documents you provide for verification.
Contact details such as postal address, billing address, and other contact information necessary to communicate with you about your storage agreement.
Account and contract information such as unit number, access permissions, rental start and end dates, payment status, and correspondence relating to your account.
Payment-related information such as payment method details required to process rental fees and security deposits. We do not store full card details where a payment processor collects them on our behalf.
Security and access information such as CCTV footage at our premises, vehicle registration details if recorded, key fob or code usage records, and logs of site access where relevant to the security of our facility.
Communication data such as records of enquiries, complaints, feedback, or other correspondence you send to us or that we send to you in relation to our services.
Technical data such as basic device or browser information and interaction with our website, where this is necessary for the secure and efficient operation of our online services.
How We Collect Personal Data
We may collect personal data directly from you when you request a quote, sign a storage agreement, contact us with a query, visit our premises, or interact with our website or other communication channels.
We may also receive personal data about you from third parties, for example where a payment processor confirms that a payment has been made, or where an authorised person provides your details as an emergency contact or account contact.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis to do so. Depending on the context, this may include:
Contract performance. We process personal data to take steps at your request before entering into a storage agreement and to perform our obligations under an existing contract, such as administering your storage unit, processing payments, and providing customer support.
Legal obligation. We process certain personal data to comply with legal and regulatory requirements, such as tax and accounting rules, anti-fraud and crime prevention obligations, and health and safety requirements at our premises.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. Examples include ensuring the security of our facility using CCTV, managing and improving our services, protecting our property, and handling queries and complaints.
Consent. In situations where we rely on your consent, for example for optional marketing communications, we will ask for your clear and specific permission. You can withdraw your consent at any time using the contact details provided by us in our communications or by contacting us directly.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up and manage your storage agreement, including verifying your identity, allocating a storage unit, and maintaining account records.
To process payments, deposits, refunds, and to manage any outstanding balances.
To maintain the safety and security of our premises, including monitoring access and using CCTV for crime prevention, incident investigation, and the protection of our customers, staff, and property.
To communicate with you about your account, service updates, contract renewals, price changes, and other important service-related information.
To respond to your enquiries, requests, or complaints and to provide customer support.
To comply with legal obligations and cooperate with law enforcement or regulatory authorities where we are legally required or permitted to do so.
To improve our services, premises, and customer experience through analysis of how our services are used, where this can be done lawfully and proportionately.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In general, we retain customer account records and related documentation for a period after your contract ends, to deal with any queries, disputes, or legal obligations. CCTV footage and access records are typically kept for a shorter period, unless they are required for the investigation of an incident or legal claim.
When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to process your personal data in accordance with our instructions and for the purposes outlined in this Privacy Policy. They are required to provide appropriate security measures to protect your data.
Examples of data processors we may use include:
Payment processing providers who handle card payments or other electronic transactions in order to collect fees for your storage unit.
IT and cloud service providers who support our website, customer management systems, document storage, and communication tools.
Security and maintenance service providers who may have controlled access to our systems or premises in order to maintain security equipment or other facility infrastructure.
We may also share personal data with other third parties who act as independent data controllers, such as professional advisers and public authorities, where this is necessary to meet legal obligations, enforce our rights, or protect the rights and safety of others.
International Transfers
Where we use service providers located outside the United Kingdom or where personal data is stored or accessed from another country, we take steps to ensure that appropriate safeguards are in place. These may include using countries that have been recognised as providing an adequate level of protection, or putting in place standard contractual clauses or equivalent measures to protect your data.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include physical security at our premises, access controls on our systems, staff training on data protection, and procedures for dealing with suspected data breaches.
While we strive to protect your personal data, no system can be completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you and the relevant supervisory authority as required by law.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection laws. These rights may be subject to certain conditions and legal exemptions. They include:
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification. You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.
Right to erasure. In certain circumstances, you may request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You may ask us to restrict the processing of your personal data in specific situations, such as while we verify its accuracy or assess an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format or transfer it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how your personal data is being handled.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will take reasonable steps to inform you, such as by updating the version available at our premises or on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
