Privacy Policy - Woodsidepark Storage

Effective date: This Privacy Policy applies to all Woodsidepark Storage customers in area and explains how we collect, use, store, share, and protect personal data when you use our storage services.

We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help customers understand what information we process, why we process it, how long we keep it, and what rights you have over your personal data.

1. Scope of this Privacy Policy

This Privacy Policy applies to all customers, prospective customers, visitors, and anyone whose personal data we process in connection with Woodsidepark Storage services in area. It covers information gathered when you request a quote, sign a storage agreement, make payments, access our services, communicate with us, or otherwise interact with us.

We may update this policy from time to time to reflect changes in our services, legal obligations, or data protection practices. When we do, we will make the revised version available and update the effective date.

2. Data We Collect

We collect only the personal data that is necessary for operating our storage services, meeting our legal obligations, and managing our relationship with you. Depending on how you interact with us, the information may include:

Identity information such as your name, date of birth, and identification details where required for verification.
Contact details such as postal address, email address, and telephone number.
Account and contract information including storage unit numbers, agreement dates, customer reference numbers, and service preferences.
Payment information such as billing details, payment status, and transaction history. We do not keep more payment information than is necessary for accounting and service administration.
Security and access information such as access logs, entry records, CCTV-related data, and incident reports where applicable.
Correspondence such as emails, messages, call notes, complaints, or other communications you send to us.
Technical information if you interact with our digital systems, including device identifiers, log data, and usage data.

In some cases, we may also receive information from third parties, such as credit reference agencies, identity verification providers, payment processors, or professional advisors, where this is necessary and permitted by law.

3. How We Use Personal Data

We use personal data for the following purposes:

to manage enquiries, quotations, and customer registration;
to set up, administer, and maintain storage agreements;
to process payments, refunds, and invoices;
to provide secure access to storage facilities and manage site safety;
to communicate service updates, notices, and account-related information;
to detect, investigate, and prevent fraud, misuse, or security incidents;
to comply with legal and regulatory obligations;
to handle complaints, disputes, and insurance or claims-related matters;
to improve our services, systems, and operational procedures.

We only process personal data where we have a valid legal reason to do so. We do not use personal data for purposes that are incompatible with those described in this policy unless required or permitted by law.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing activity. The lawful bases we rely on include:

Contract

We process personal data where it is necessary to perform our contract with you or to take steps at your request before entering into a contract. This includes setting up your storage account, managing access, handling payments, and administering the services you have requested.

Legal Obligation

We may need to process and retain certain information to comply with legal and regulatory requirements, including accounting, tax, anti-fraud, safety, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests. These legitimate interests may include protecting our property and customers, preventing crime, managing security, improving services, and resolving disputes. When we rely on legitimate interests, we carry out a balancing assessment to ensure processing is appropriate and proportionate.

Consent

In limited situations, we may rely on your consent, for example where you have clearly agreed to receive optional communications or where consent is required by law. You may withdraw consent at any time, although this will not affect processing that has already taken place lawfully before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where this is necessary to provide services, manage operations, or comply with the law. These third parties act either as processors or independent controllers, depending on the circumstances.

Processors are organisations that process personal data on our behalf and under our instructions. They may include:

payment service providers that handle card or bank transactions;
IT, cloud hosting, and data storage providers;
customer management and record-keeping system providers;
security, alarm, and monitoring service providers;
professional advisors such as accountants, auditors, lawyers, and insurers;
identity verification or fraud prevention service providers.

We require processors to keep personal data secure, use it only for authorised purposes, and implement appropriate technical and organisational safeguards. We do not sell personal data.

We may also disclose personal data where necessary to law enforcement, courts, regulators, or other public authorities when required by law or to protect our rights, staff, customers, or property.

6. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, reporting, or contractual requirements. Retention periods depend on the type of information and the context in which it was obtained.

Contract and account records are typically retained for the duration of the customer relationship and for a reasonable period afterward.
Payment and transaction records may be kept for the period required by tax and accounting law.
Security logs and access records are retained only as long as necessary for security, incident handling, and operational purposes.
Complaints and dispute records may be kept for as long as needed to resolve the matter and for a further period to defend legal claims.

When data is no longer required, we will delete it, anonymise it, or securely archive it in line with our retention procedures.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, encryption where appropriate, staff training, and physical safeguards.

While no system can be guaranteed to be completely secure, we continuously review our safeguards to help ensure personal data is protected to a standard appropriate to the risks involved.

8. Your Rights

Data protection law gives you a number of rights in relation to your personal data. Subject to legal limits, you may have the right to:

Access the personal data we hold about you;
Rectification of inaccurate or incomplete information;
Erasure of your data in certain circumstances;
Restriction of processing in certain situations;
Object to processing based on legitimate interests or direct marketing;
Data portability where processing is based on contract or consent and carried out by automated means;
Withdraw consent where we rely on consent as the lawful basis;
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.

To help protect your privacy, we may need to verify your identity before responding to a request. We will respond within the time limits required by law unless an extension is permitted due to complexity or the number of requests received.

9. Children’s Data

Our storage services are intended for adults. We do not knowingly collect personal data from children in connection with our services unless it is necessary for a lawful and specific purpose, such as an emergency contact record or a legal matter. If we become aware that we have collected data inappropriately, we will take steps to delete it where required.

10. International Transfers

If personal data is transferred outside the UK, we will take appropriate steps to ensure it remains protected to the standard required by data protection law. This may include using approved contractual safeguards or transferring data only to jurisdictions with recognised adequate protection.

11. Changes to This Policy

We may amend this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be effective when published unless otherwise stated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of Your Privacy at Woodsidepark Storage

In summary, Woodsidepark Storage processes personal data to deliver secure and reliable storage services, manage contracts, meet legal duties, and protect the interests of our customers and business. We collect only the information we need, rely on recognised lawful bases, share data only with appropriate processors or authorities where necessary, and keep information only for as long as required. We are committed to respecting your rights and protecting your personal information in a lawful and transparent manner.