Storage Edgware Privacy Policy
This Privacy Policy explains how Storage Edgware collects, uses, discloses and protects personal data relating to customers and prospective customers. It applies to all Storage Edgware customers and users of our storage services in the area and is intended to be compliant with the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our services, visiting our premises or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Who We Are And Scope Of This Policy
Storage Edgware is the controller of the personal data described in this Privacy Policy. As controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law.
This Privacy Policy applies to all personal data collected from individuals who use or inquire about our storage services, including those who visit our facility, communicate with us by any channel, or are listed as authorised contacts on an account.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include the following:
Identification and contact details, such as your full name, residential address, billing address, date of birth, and any identification numbers shown on documents you provide for identity verification, as well as your preferred contact details.
Account and contract information, such as your customer reference number, details of the storage unit or services you have booked, start and end dates of your contract, payment terms, and communication records relating to your account.
Payment and transaction information, such as payment card details processed through our payment providers, bank account details where applicable, payment history, invoices, receipts, and information about any arrears or disputes.
Security and access data, such as CCTV footage captured at and around our premises, access control logs, records of visits to the site, entry and exit times, and authorised user details.
Communication data, such as emails, letters and other correspondence, notes taken during calls or meetings, and feedback or complaints you submit to us.
Technical and usage data, where relevant, such as information about how you interact with any online portals or tools that we provide for account management, including log in times and basic device or browser information.
Lawful Bases For Processing Personal Data
We only process your personal data where a lawful basis under data protection law applies. The main lawful bases we rely on are:
Performance of a contract. We process personal data where it is necessary to enter into a contract with you or to fulfil our obligations under an existing contract, for example to set up, manage and administer your storage agreement, facilitate access to your unit, and handle invoicing and payments.
Compliance with legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, including tax, accounting, anti money laundering, fraud prevention, health and safety, and obligations to assist law enforcement or regulatory authorities where we are legally required to do so.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. This includes managing and improving our services, maintaining site security including CCTV and access logs, recovering debts, handling queries and complaints, and defending or establishing legal claims.
Consent. In limited circumstances we may rely on your consent, for example where required for certain types of optional marketing or where we wish to retain information beyond our usual retention periods. Where processing is based on consent, you can withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To register you as a customer, set up your account and verify your identity.
To provide storage services and related customer support, including managing access to your unit and responding to your questions and requests.
To administer billing and payments, handle deposit arrangements, recover outstanding amounts, and manage any disputes.
To ensure the safety and security of our premises, customers, staff, and property, including through the operation of CCTV systems and access control measures.
To communicate with you about your contract, including notices about renewals, changes to terms, and necessary service messages.
To manage our business operations, including internal record keeping, audits, quality control, training, and service improvement.
To comply with legal and regulatory obligations and to cooperate with authorities where required.
To protect our legal rights, for example in relation to non payment, claims, or alleged misconduct on our premises.
Data Sharing And Use Of Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged under written contracts and are required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational measures to protect it.
Such processors may include providers of payment processing services, providers of secure data storage and document management services, providers of IT support and maintenance, providers of CCTV and access control systems, and professional advisers and consultants who assist us in the operation of our business.
We may also share personal data with other controllers where necessary and lawful, for example with law enforcement bodies, regulatory authorities, courts and tribunals, debt recovery agencies, or insurers and legal advisers, where the sharing is required by law, necessary to protect our rights, or necessary to protect the rights of others.
We do not sell your personal data to third parties.
Retention Of Personal Data
We retain personal data only for as long as is necessary for the purposes for which it was collected and to meet our legal, accounting, or reporting requirements.
In general, we retain core customer and contract records for a number of years after the end of the relevant contract, to enable us to respond to queries, resolve disputes, demonstrate our compliance with legal obligations, and exercise or defend legal claims. Specific retention periods may vary depending on the type of data and the applicable legal requirements.
CCTV footage and access logs are retained for shorter periods, unless a longer retention period is required in connection with an incident, investigation or legal proceedings.
When personal data is no longer required, we will delete it or anonymise it in a secure manner.
International Transfers
Where we use service providers or host systems outside the United Kingdom, your personal data may be transferred to countries which may not provide the same level of data protection as the United Kingdom. In such cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other mechanisms recognised by data protection law, to ensure that your personal data remains adequately protected.
Security Of Your Personal Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, encryption, secure storage, staff training, and regular review of our security arrangements.
While we strive to protect your personal data, no system can be completely secure. You are responsible for keeping any account credentials or access codes confidential and for notifying us promptly of any suspected unauthorised use.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply in many circumstances, although there are exceptions and limitations. Subject to those, your rights may include:
The right of access, meaning you can request confirmation as to whether we process your personal data and obtain a copy of that data, along with certain information about how it is processed.
The right to rectification, meaning you can request that inaccurate or incomplete personal data be corrected or updated.
The right to erasure, also known as the right to be forgotten, meaning you can request that certain personal data be deleted where there is no longer a valid reason for us to retain it.
The right to restriction of processing, meaning you can request that we limit the way we use your personal data in certain situations.
The right to data portability, meaning you can request that we provide certain personal data to you or to another organisation in a structured, commonly used and machine readable format, where this is technically feasible and relates to data you have provided to us and that we process by automated means on the basis of consent or contract.
The right to object to processing, meaning you can object at any time to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds which override your interests or the processing is needed for legal claims.
Where we rely on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Complaints And Supervisory Authority
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can attempt to resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority, the Information Commissioners Office, if you believe your data protection rights have been infringed.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any revised version will be made available to customers and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
