Privacy Policy - Edgware Storage

Edgware Storage is committed to protecting the privacy and personal data of all customers who use our services in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Edgware Storage customers in area, including current, former, and prospective customers, as well as individuals who contact us or interact with us in connection with our storage services.

1. Who We Are

For the purposes of data protection law, Edgware Storage acts as the data controller for the personal data we collect and process in connection with our services. This means we determine the purposes and means of processing your personal data. We take our responsibilities seriously and aim to ensure that personal data is handled lawfully, fairly, and transparently.

2. Personal Data We Collect

We may collect and process different categories of personal data depending on how you use our services. The information we collect is limited to what is necessary for the management and operation of our storage services.

Information you provide directly

Identification details such as your name and title
Contact details such as address, email address, and telephone number
Account and booking details relating to your storage unit, reservation, or rental agreement
Payment information necessary to process charges and manage billing
Communications you send to us, including enquiries, complaints, or service requests
Verification information used to confirm your identity where required

Information we collect automatically

Access records such as entry logs, times of access, and security events
Technical data including device type, browser information, and basic usage data when relevant to service systems
CCTV and security footage for safety, security, and crime prevention purposes where lawful and appropriate

Information from third parties

In some cases, we may receive personal data from third parties such as payment providers, identity verification services, insurers, legal representatives, or debt collection partners where necessary for the provision, administration, or enforcement of our services.

3. How We Use Your Personal Data

We use personal data only where we have a lawful basis to do so. We may process your data for the following purposes:

To set up and manage your storage agreement
To provide access to storage facilities and maintain operational records
To process payments, invoices, refunds, and account administration
To communicate with you about your account, service changes, or important notices
To manage security, prevent fraud, and protect our property, staff, and customers
To comply with legal obligations and respond to regulatory or lawful requests
To handle disputes, recover debts, and enforce contractual rights where necessary
To improve our systems, services, and customer experience in a lawful manner

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each processing activity. Depending on the context, Edgware Storage may rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, providing storage services, handling payments, and administering your account.

Legal obligation

We may process personal data where required to comply with legal obligations, including tax, accounting, security, or regulatory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include security monitoring, service improvement, fraud prevention, and debt recovery.

Consent

Where consent is required, we will ask for it clearly and separately. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

5. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods vary depending on the nature of the information and the reason for processing.

Contract and account records are kept for the duration of the agreement and for a reasonable period afterwards to manage disputes or legal claims
Financial records are generally retained in line with tax and accounting requirements
Security records, including CCTV footage, are retained only for as long as needed for safety, investigation, or prevention purposes
Enquiry and communication records are retained for as long as necessary to respond to requests and maintain service history

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Sharing Your Personal Data

We do not sell your personal data. We may share information with trusted third parties where necessary and lawful, and only to the extent required to operate our services.

Processors and service providers

We may use third-party processors who act on our instructions and process data on our behalf. These may include:

Payment service providers for processing transactions
IT and cloud service providers for hosting systems, storing records, and maintaining security
Security service providers supporting alarm systems, access control, and CCTV administration
Professional advisers such as accountants, auditors, insurers, or legal advisers
Debt recovery or credit control partners where necessary and lawful

All processors are required to protect personal data and only use it in accordance with our instructions and applicable law.

Other disclosures

We may also disclose personal data where required by law, court order, law enforcement request, or to protect the rights, safety, or property of Edgware Storage, our customers, or others.

7. Data Security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse, or disclosure. These measures may include restricted access controls, secure storage, monitoring systems, staff training, and contractual safeguards with processors.

Although we work hard to protect personal data, no system can be guaranteed to be completely secure. We therefore encourage customers to take reasonable steps to protect their own information when communicating with us or using shared systems.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis for processing.

Right of access – you can request a copy of the personal data we hold about you
Right to rectification – you can ask us to correct inaccurate or incomplete data
Right to erasure – you can request deletion of your data in certain circumstances
Right to restriction – you can ask us to limit how we use your data in certain situations
Right to object – you can object to processing based on legitimate interests or direct marketing
Right to data portability – you can request your data in a structured, commonly used format where applicable
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

You also have the right to make a complaint to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise concerns directly so we can address them promptly, but you are not required to do so before contacting the regulator.

9. Children’s Data

Our services are intended for adult customers. We do not knowingly collect personal data from children except where it is incidental and necessary in the context of service administration, such as emergency contact details or lawful correspondence. Where we become aware that personal data has been collected inappropriately, we will take reasonable steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or our services. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

11. Summary of Our Commitment

Edgware Storage processes personal data lawfully, fairly, and transparently. We collect only the information needed to provide and secure our services, use it for clear and legitimate purposes, retain it only as long as necessary, and share it only with trusted processors or where required by law. This policy applies to all Edgware Storage customers in area and reflects our commitment to respecting privacy rights and maintaining responsible data practices.