Storage Stroud Green Privacy Policy
This Privacy Policy explains how Storage Stroud Green collects, uses, stores and protects personal data relating to customers and prospective customers in the Stroud Green area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. This policy applies to all Storage Stroud Green customers in the area, as well as individuals who contact us or use our services.
Data Controller
Storage Stroud Green is the data controller for the personal data described in this Privacy Policy. As data controller, we decide why and how your personal data is processed, and we are responsible for ensuring that such processing complies with applicable data protection law.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identification data such as full name, title and proof of identity details provided when you sign up for a storage unit or related services.
Contact details such as your home or business address, billing address, and any contact details you choose to share with us.
Account and contract information such as storage unit number, contract start and end dates, payment history, deposit details, and records of services you have requested.
Payment information such as partial payment card details or bank transaction references as necessary to process your payments. We do not store full card details where payments are processed by a third party payment provider.
Communication data including enquiries, complaints, feedback, and any correspondence you have with us by post or other channel.
Security and access information such as access codes, recorded times of entry or exit, and any visitor logs maintained for safety and security at our facilities.
Technical and usage data relating to how you interact with our online content, such as log information, basic device data and general usage statistics, where applicable.
How We Collect Your Data
We collect personal data from you directly when you contact us, request a quote, sign a contract, make a payment, visit our facility or otherwise communicate with us.
We may also receive personal data from third parties, such as payment service providers, credit reference agencies where legally permitted, or other individuals who are authorised to act on your behalf.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under the UK GDPR. Depending on the specific processing activity, we rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into or perform a contract with you, for example to provide you with storage services, manage your account, process your payments, and respond to your requests in connection with an existing agreement.
Legal obligation: We process certain data to comply with legal and regulatory requirements, such as record keeping, tax obligations, security, and compliance with law enforcement requests where required.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include maintaining the security of our facilities, preventing and detecting fraud, improving our services, and managing customer relationships.
Consent: In limited situations, we may rely on your consent, for example for certain marketing communications. Where consent is used, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your account, granting facility access, and ensuring that your stored items are held in accordance with our agreement.
To administer contracts, process billing and payments, issue invoices and statements, and handle any refunds or outstanding balances.
To communicate with you about your account, service updates, operational notices, changes to terms and this Privacy Policy, and to respond to enquiries or complaints.
To maintain the safety and security of our premises, including monitoring access, maintaining logs and using appropriate security measures.
To manage our business operations, such as internal reporting, quality assurance, staff training, and service improvement.
To comply with legal and regulatory obligations and to cooperate with authorities where required by law.
To send you information about our services that may be of interest to you, where permitted by law and subject to your preferences.
Data Retention
We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy and in accordance with legal and regulatory requirements.
Customer account and contract records are generally kept for a minimum period after the end of your contract in order to deal with any queries, disputes or legal claims. Financial and transactional data may be retained for longer where required by tax or accounting laws.
Security logs, access records and related data are kept for a period appropriate to our security needs and legal obligations, after which they are securely deleted or anonymised.
Where we rely on consent for marketing communications, we will retain your contact data for that purpose until you withdraw consent or object, or until we decide to stop the relevant marketing activity.
Data Processors and Third Parties
We may share your personal data with selected third parties that act as data processors on our behalf. These processors are engaged to provide services such as payment processing, secure data hosting, customer relationship management tools, accounting software, or professional and technical support.
When we use processors, they are only permitted to process your personal data on our instructions and for the purposes we specify. We require all processors to implement appropriate technical and organisational measures to protect your data and to comply with applicable data protection laws.
In some circumstances, we may also share your data with third parties who act as independent data controllers, for example with law enforcement or regulatory authorities where required by law, or with professional advisers such as auditors or legal representatives where necessary for our legitimate interests and legal obligations.
International Transfers
Where personal data is transferred outside the United Kingdom by our processors or service providers, we ensure that appropriate safeguards are in place to protect your data, such as the use of approved standard contractual clauses or transfers to countries recognised as providing an adequate level of data protection.
Security of Your Data
We take the security of your personal data seriously. We use a combination of physical, technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction or damage. These measures are reviewed and updated periodically to reflect current best practice and the level of risk.
Your Data Protection Rights
You have several important rights in relation to your personal data under the UK GDPR. Subject to certain conditions and exemptions, you may have the right to:
Access your personal data and receive a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no longer a lawful basis for us to retain it.
Request restriction of processing in certain circumstances, for example while we consider a challenge you have raised about the accuracy of your data.
Object to processing where we rely on legitimate interests, including for certain forms of direct marketing.
Request the transfer of your personal data to you or another organisation in a commonly used, machine-readable format, where applicable.
Withdraw consent where we rely on your consent for a particular processing activity. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdraw it.
You can exercise your rights by contacting us using your usual contact route with Storage Stroud Green. We may need to verify your identity before responding to your request. We aim to respond within the timeframes set by data protection law.
Complaints
If you have concerns about how we handle your personal data, you are encouraged to contact us so that we can address your concerns. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any changes will be posted in the latest version of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
