Storage Addiscombe Privacy Policy
This Privacy Policy explains how Storage Addiscombe collects, uses, stores and protects personal data relating to all Storage Addiscombe customers in the Addiscombe area. It also explains your rights under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. Please read this Policy carefully so that you understand how and why we use your personal information.
Scope of this Privacy Policy
This Privacy Policy applies to all existing and prospective customers of Storage Addiscombe in the Addiscombe area, including individuals and businesses who make enquiries, request quotes, sign storage agreements, access our premises or use our services in any way. By using our services, contacting us, or entering into a contract with us, you acknowledge that you have read and understood this Privacy Policy.
Personal data we collect
We may collect and process the following categories of personal data about you when you enquire about, use or terminate our storage services:
Identification data such as your full name, title, date of birth and any identification numbers recorded for verification checks.
Contact details such as your postal address, billing address, and any other correspondence addresses you provide, together with any online identifiers linked to your account with us.
Account and contract information such as storage unit numbers, access permissions, contract start and end dates, payment history, records of communications and notes relating to your account and service preferences.
Payment and billing information such as billing name and address, payment method details as required for processing transactions, and records of invoices, charges, refunds and arrears.
Security and access information such as access logs for our premises, CCTV recordings on and around our site, records of visits, incident reports and information you provide in relation to security or safety events.
Communication information such as enquiries, complaints, feedback, and other correspondence you send to us, as well as notes and responses we create when managing your account and handling customer service matters.
How we collect your personal data
We collect personal data directly from you when you request information, obtain a quote, sign a storage agreement, make a payment, contact us with a query or complaint, or otherwise interact with us. We may also collect information about you when you enter our premises, for example through access control systems and CCTV. In limited cases, we may obtain personal data from third parties, such as credit reference agencies, debt collection agencies, professional advisers or law enforcement bodies, but only where this is lawful and necessary for our purposes.
Lawful bases for processing
We only process your personal data where we have a lawful basis to do so under the UK GDPR. Depending on the context, our lawful bases will include one or more of the following:
Performance of a contract. We process your data to take steps at your request prior to entering into a contract and to perform our contract with you, including providing storage services, managing your account, handling payments and communicating with you regarding your agreement.
Compliance with legal obligations. We may process your data where necessary for us to comply with legal and regulatory requirements, for example for tax, accounting, insurance, health and safety, security and law enforcement purposes.
Legitimate interests. We may process your data where this is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This can include ensuring the security of our premises and property, preventing and investigating fraud, managing customer relationships, improving our services and defending our legal rights.
Consent. In certain circumstances, we may rely on your consent, for example for optional marketing communications that go beyond our legitimate interests. Where processing is based on consent, you are free to withdraw that consent at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage your storage services, including processing enquiries, preparing quotes, setting up and administering contracts, managing access, handling payments and communicating with you about your account.
To maintain the safety and security of our customers, staff, premises and property, including through CCTV monitoring, access controls, incident logging and investigation of security events.
To manage our business operations, including internal reporting, financial management, auditing, service development, staff training and quality assurance.
To comply with our legal obligations, including tax and accounting requirements, responding to lawful requests from public authorities, and cooperating with regulatory and law enforcement agencies.
To protect and enforce our rights, including recovering debts, managing disputes, responding to complaints, and establishing, exercising or defending legal claims.
Data processors and third party recipients
We may share your personal data with carefully selected third parties who act as our data processors. These organisations process personal data on our behalf and are contractually required to handle it securely and only in accordance with our instructions and applicable data protection law.
Processors may include providers of data storage and hosting services, payment processing and banking services, accounting and billing systems, customer relationship management tools, security and CCTV maintenance providers, and professional advisers such as accountants and legal advisers acting as processors.
In addition, we may disclose personal data to other third parties where we act as a controller, for example to insurers, credit reference agencies, debt collection agencies, professional advisers acting as independent controllers, and law enforcement or regulatory authorities where we are legally required or permitted to do so.
We do not sell your personal data to third parties.
International transfers
Where any of our service providers or their systems are located outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with UK data protection law. These safeguards may include the use of standard contractual clauses or reliance on an adequacy decision issued by the relevant authorities.
Data retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet any legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the relevant legal obligations.
In general, information related to your contract, payments, and account history will be retained for a period required for tax and accounting purposes after the end of your relationship with us. CCTV footage and access logs are usually retained for a shorter period, unless longer retention is required in connection with an investigation or legal claim.
When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Measures may include restricted access controls, secure storage, encryption where appropriate, staff training, and regular review of our security practices. While we take these steps to safeguard your information, no system is completely secure and you should also take care to keep your own information and access credentials safe.
Your data protection rights
As a data subject, you have a number of rights under the UK GDPR in relation to the personal data we hold about you. These include:
The right of access, which allows you to request confirmation that we process your personal data and to obtain a copy of that data, together with certain information about how we use it.
The right to rectification, which allows you to request correction of inaccurate personal data and completion of incomplete data.
The right to erasure, in certain circumstances, which allows you to request that we delete your personal data where there is no longer a lawful basis for us to process it.
The right to restrict processing, which allows you to request that we limit the way we use your data in certain situations, for example while we are considering a challenge you have made about the accuracy of your data.
The right to data portability, in certain circumstances, which allows you to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transfer it to another controller where technically feasible.
The right to object, which allows you to object to processing that is based on our legitimate interests or for direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.
You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how we handle your personal data. We would, however, welcome the opportunity to address your concerns directly in the first instance.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our operations or applicable law. When we make changes, we will revise the date of the most recent update and make the updated version available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
