Storage Eastcote Privacy Policy
This Privacy Policy explains how Storage Eastcote collects, uses, stores, and protects the personal data of its customers and prospective customers. It applies to all individuals and businesses using our storage services or making enquiries about our services in the Storage Eastcote service area.
Storage Eastcote is committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. We respect your privacy and handle your personal data in a lawful, fair, and transparent way.
Scope and Data Controller
This Privacy Policy applies to all Storage Eastcote customers, former customers, prospective customers, and any person who contacts or interacts with Storage Eastcote in relation to our storage services in the area we serve.
For the purposes of data protection law, Storage Eastcote is the data controller. This means we decide how and why your personal data is processed.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us:
Identification and contact details, such as your name, postal address, billing address, and any other address you provide to us. We also collect your contact details, such as your preferred contact method where provided.
Customer account information, such as your storage unit number, contract details, access permissions, payment history, and customer service interactions related to your account.
Payment and billing information, such as billing details, invoices, payment records, and information required to process payments. We do not store full card details where payment is made via a secure third party payment processor.
Communication and enquiry data, such as information provided when you contact us with questions, requests for quotes, or to make or change a booking. This may include notes of calls, messages, and other communications.
Usage and access information, such as records of visits to the premises, access control logs, and the times at which you enter or leave the facility, to the extent necessary for security and operational purposes.
Security and CCTV data, such as images captured by our on-site security systems where installed. CCTV is used for safety and security, including the protection of people, property, and our premises.
How We Collect Personal Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a contract, make a payment, or otherwise communicate with us in person, by phone, or in writing.
We may also collect data generated by your use of our services, such as access control records and CCTV images recorded on our premises.
In some cases we may receive limited information from third parties where you have authorised them to share data with us, for example an agent or business that arranges storage on your behalf.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract. We process your data when it is necessary to enter into or perform a contract with you, such as to provide storage services, manage your account, process payments, and handle enquiries related to your contract.
Legal obligation. We may process your data where this is necessary for us to comply with legal obligations, such as tax and accounting rules, health and safety regulations, anti-fraud requirements, or to respond to lawful requests from public authorities.
Legitimate interests. We may process your data where this is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. Examples include maintaining security at our premises, managing and improving our services, protecting our property, and handling customer service queries.
Consent. In limited cases, we may rely on your consent, for example for certain types of optional communication or where required by law. Where we rely on consent, you may withdraw it at any time, and this will not affect the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services you have requested, including creating and administering your account, allocating units, managing move in and move out processes, and providing customer support.
To process payments, manage billing, issue invoices, handle payment queries, and keep financial records as required for accounting and tax purposes.
To communicate with you about your account, including sending important notices about your contract, changes to our terms, payment reminders, and service updates relevant to your use of the storage facility.
To maintain security and safety at our premises, including the use of access control systems and, where installed, CCTV monitoring to help prevent and investigate crime, protect property, and ensure the safety of customers and staff.
To manage and improve our business operations, such as monitoring usage patterns, planning capacity, and performing internal reporting and analysis.
To comply with legal and regulatory requirements, respond to lawful requests, and exercise or defend legal claims if necessary.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Customer account and contract information is typically retained for a period after the end of your contract, to deal with any queries or disputes, to comply with accounting and tax obligations, and to maintain proper business records.
Payment records are kept in line with legal and regulatory requirements, including those relating to financial and tax reporting.
CCTV footage and access control logs, where used, are retained for a limited period that is appropriate for security and investigative purposes, unless a longer retention period is required due to a specific incident or legal claim.
When personal data is no longer required, it is securely deleted or anonymised.
Data Processors and Sharing
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your personal data in accordance with our instructions and are required to keep it secure and confidential.
Examples of processors include companies that provide payment processing services, customer management or booking systems, cloud storage or data hosting services, security and CCTV maintenance, and professional advisers where they act on our instructions.
We may also share your data with other third parties where required by law, such as public authorities, law enforcement, or regulatory bodies, or in connection with legal claims.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom or European Economic Area, or where data may be stored or accessed from outside these regions, we take appropriate steps to ensure that your personal data remains protected in line with applicable data protection laws. This may include using standard contractual clauses or relying on other recognised safeguards.
Your Data Protection Rights
You have a number of rights under data protection law in relation to your personal data. These rights include:
The right of access. You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.
The right to rectification. You can ask us to correct inaccurate or incomplete personal data.
The right to erasure. In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
The right to restrict processing. You can ask us to suspend the processing of your personal data in specific situations, for example while we consider an objection or a request to correct your data.
The right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format, and request that it is transferred to another controller where technically feasible.
The right to object. You can object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds to continue.
The right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect processing carried out before withdrawal.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. These measures are designed to provide a level of security appropriate to the risk and are reviewed and updated as necessary.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will take effect when the revised policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
