Storage Woodside Park Privacy Policy
This Privacy Policy explains how Storage Woodside Park collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our storage services, visiting our premises, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Woodside Park customers, former customers and prospective customers in our operating area, as well as individuals who contact us or whose data we process in connection with our storage services. It covers personal data collected through our site, through telephone or written communication, at our storage facilities and in the course of providing storage and related services.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:
Identification and contact details, such as full name, residential address, billing address, date of birth, and communication details you choose to provide.
Account and contract information, such as customer reference numbers, storage unit numbers, contract start and end dates, payment history, and records of communication regarding your agreement with us.
Payment and billing information, such as card or bank payment details processed via secure payment providers, and information necessary for invoicing, accounting and tax purposes. We do not store full card details ourselves where a third party payment processor is used.
Usage and operational information, such as records of access to the storage facility, security logs, CCTV recordings operated on our premises, and any incident reports relating to the use of our services.
Marketing and communication preferences, such as your consent choices, records of enquiries, feedback, and responses to surveys or promotions where applicable.
Lawful Basis for Processing
We process personal data only where we have a lawful basis under the UK GDPR and related legislation. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into a contract with you or to perform a contract for storage and related services. This includes setting up your account, managing your bookings, processing payments, and communicating with you about your contract.
Legal obligation: We may process your personal data where needed to comply with legal obligations, such as tax, accounting, regulatory and health and safety requirements, and to respond to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and interests. This may include managing and improving our services, ensuring site security and safety, preventing fraud, handling customer queries, and maintaining business records.
Consent: In limited circumstances, we may rely on your consent, for example for certain types of marketing communication where this is legally required. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide, manage and administer storage services and any related services you request.
To set up and maintain customer accounts and contracts.
To process payments and manage billing, including handling queries about charges.
To communicate with you regarding your contract, service updates, renewals, notices and operational information.
To ensure the safety and security of our premises, including through access controls and CCTV monitoring where used.
To respond to enquiries, complaints and requests you make.
To manage our business operations, including accounting, auditing and internal reporting.
To comply with applicable laws, regulations and legal processes.
To send you information about our services and offers where this is permitted by law and in accordance with your preferences.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, accounting or reporting requirements. The specific retention periods will depend on the nature of the information and the legal and regulatory context.
Customer account and contract information is generally retained for the duration of your contract and for a period after its end, to enable us to respond to queries, handle disputes and comply with legal obligations. Financial and billing records are kept for the time required by tax and accounting law. CCTV recordings and security logs are retained for a limited period necessary for security, investigation of incidents and the protection of our legitimate interests, unless a longer retention is required in connection with a specific incident.
When personal data is no longer needed for the purposes set out in this Privacy Policy and we have no legal obligation to retain it, we will delete or anonymise it in a secure manner.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services that support our operations, such as payment processing, accounting services, IT hosting and support, security systems operation or document storage.
Processors are only permitted to process your personal data in accordance with our written instructions and for the purposes we specify. They are required to implement appropriate technical and organisational measures to protect your personal data and to comply with applicable data protection laws.
In addition to processors, we may share personal data with third parties where we act as an independent controller, for example with professional advisers such as lawyers or accountants, insurers, law enforcement agencies, regulators or public authorities when required by law or in connection with legal proceedings, fraud prevention or the protection of our rights and property.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom or where personal data may be accessed from outside the United Kingdom, we take steps to ensure that any transfer of personal data is subject to appropriate safeguards. These may include relying on adequacy regulations or using standard contractual clauses or equivalent mechanisms recognised under applicable data protection law.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures may include access controls, encryption, secure storage, staff training, and regular review of our security procedures. While we aim to protect your personal data, no system can be completely secure and we cannot guarantee absolute security of information.
Your Data Protection Rights
Under the UK GDPR and related legislation, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is processed.
Right to rectification: You can request correction of inaccurate or incomplete personal data that we hold about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain cases, such as when the accuracy of the data is contested or you object to processing.
Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to object: You can object to processing of your personal data based on our legitimate interests, including profiling, and we will stop such processing unless we demonstrate compelling legitimate grounds. You also have the right to object at any time to direct marketing.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw this consent at any time. Withdrawal will not affect the lawfulness of processing carried out before you withdrew consent.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for operational reasons. The most current version will always apply to the personal data we hold about you. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process and protect your personal data.
