Storage Little Ilford Privacy Policy
This Privacy Policy explains how Storage Little Ilford collects, uses, stores and protects personal data relating to our customers and prospective customers in the Storage Little Ilford area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Little Ilford customers and individuals who enquire about, use, or interact with our storage services in the Little Ilford area, whether in person, by telephone, by post, or through any digital means we make available.
Data Controller
For the purposes of data protection law, Storage Little Ilford is the data controller for the personal data described in this Privacy Policy. As data controller, we are responsible for determining how and why your personal data is processed and for ensuring that such processing is carried out in a lawful, fair and transparent manner.
Types of Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identification and contact details such as your name, title, postal address, billing address, service address, and any other address you provide to us, as well as your chosen contact methods.
Account and contract information such as customer or unit numbers, contract start and end dates, storage unit size and type, payment terms, services purchased, and communication preferences.
Payment and transaction data such as payment method details (excluding full card data where processed exclusively by a secure payment provider), payment status, invoices, charges, refunds, and transaction history.
Security and access data such as access codes, entry and exit logs, CCTV images captured at our premises, incident reports, and records of visits, where applicable.
Communication data such as records of correspondence, queries, complaints, feedback, call notes, and information you provide when you contact us or respond to our communications.
Technical and usage data such as information about your interactions with any online tools we provide, including date and time of access and basic device or browser information where this is collected.
How We Collect Your Data
We may collect personal data directly from you when you:
Request information or a quotation for storage services.
Enter into a storage agreement or other contract with us.
Visit our premises and use our facilities.
Communicate with us by phone, post, or through any digital channel we provide.
Provide feedback, submit a complaint, or participate in customer surveys.
We may also collect data from third parties where lawful to do so, such as payment service providers, fraud prevention agencies, or other partners involved in delivering our services.
Lawful Basis for Processing Personal Data
We will only process your personal data where we have a lawful basis under data protection laws. Depending on the circumstances, the lawful bases we rely on include:
Performance of a contract. We process your personal data where it is necessary to enter into or fulfil our contract with you, for example to provide you with storage services, manage bookings, process payments, and communicate with you about your account.
Legal obligations. We process certain data to comply with legal and regulatory requirements, such as tax, accounting and record-keeping obligations, and obligations relating to health and safety, crime prevention and law enforcement requests.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises and customers, improving our services, managing our relationship with you, recovering debts, and handling queries or complaints.
Consent. In limited circumstances, we may rely on your consent to process your data, for example for certain types of marketing communications where required by law. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To set up and manage your storage account, including identity confirmation where required, issuing access credentials, and administering your contract.
To provide and maintain our storage services, including granting access to units, handling bookings, and managing changes to your services.
To process payments, issue invoices, administer refunds and handle queries related to billing or charges.
To maintain safety and security at our premises, including recording access to facilities and using CCTV where in operation, to help prevent and detect crime and manage incidents.
To communicate with you about your account, services, updates to our terms, changes to this Privacy Policy, service notices, and other information that is necessary for the proper provision of our services.
To respond to enquiries, feedback or complaints and to improve our services and customer experience.
To meet our legal and regulatory obligations and cooperate with law enforcement or regulatory authorities where required.
To enforce our contractual terms and protect our rights, property, customers and staff, including debt recovery and the management of legal claims.
Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we will hold account and contract data for the duration of your relationship with us and for a period afterwards where reasonably necessary to deal with queries, handle disputes, comply with legal obligations, and maintain appropriate records. This period will vary depending on the type of data and relevant legal requirements.
Security and access data, including CCTV recordings where used, will be retained for a shorter period, typically only for as long as needed to investigate incidents and ensure safety and security, unless a longer retention period is required for legal or evidential reasons.
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a safe and irreversible manner.
Data Sharing and Processors
We do not sell your personal data. We may share your data with trusted third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law.
These third parties may include:
Service providers who act as data processors on our behalf, such as payment processing companies, IT and system support providers, security and CCTV system providers, document storage or destruction services, and professional advisers such as accountants or legal advisers. These processors are only permitted to process your data in accordance with our instructions and are required to keep it secure and confidential.
Law enforcement agencies, regulators, courts or other public authorities where we are required or permitted to do so by law, or where disclosure is necessary to protect our rights, our customers, or others.
In all cases where we engage data processors, we take steps to ensure that appropriate contractual and technical safeguards are in place to protect your personal data.
International Transfers
Where we use service providers located outside the United Kingdom or where data may be accessed from outside the United Kingdom, we will ensure that an adequate level of protection is in place for your personal data in accordance with data protection laws. This may include using countries that have been formally recognised as providing an adequate level of protection, or putting in place appropriate safeguards such as standard contractual clauses.
How We Protect Your Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include access controls, secure storage, staff training and appropriate policies and procedures. While we take these steps to safeguard your data, no system can be completely secure and we cannot guarantee absolute security.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you. Subject to certain conditions and exemptions, these include:
The right of access. You have the right to request a copy of the personal data we hold about you, together with information about how we process it.
The right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you may ask us to delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other lawful basis for retaining it.
The right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing.
The right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis, particularly for direct marketing activities where applicable.
The right to data portability. Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transferred to another organisation.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any changes will apply from the date they are published. You should review this Privacy Policy periodically to stay informed about how we collect and use your personal data.
