Storage Brondesbury Privacy Policy
This Privacy Policy explains how Storage Brondesbury collects, uses, stores and protects personal data relating to our storage services. It applies to all Storage Brondesbury customers and prospective customers in our service area, including individuals, business clients and any authorised users of our storage units.
Storage Brondesbury acts as the data controller for the personal data described in this Privacy Policy. We process your data in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data, depending on how you interact with us and which services you use. This may include the following categories of information.
Identification details such as full name, residential or business address, date of birth, identification document details and signature, where required for verification and legal compliance.
Contact details such as postal address, billing address, and any other contact information you provide so we can manage your account and respond to your enquiries.
Account and contract information such as unit number, contract start and end dates, rental terms, payment history, security deposit details and records of communications regarding your contract.
Payment and billing information such as the amount paid, payment method and billing records. We do not store full payment card details in our own systems; where card payments are used, they are processed by a secure payment processor acting on our behalf.
Security and access information such as access control records, gate or door entry logs, CCTV recordings on and around our premises, incident reports and records of visits as needed to maintain site security.
Communication data such as enquiries, complaints, feedback, and any other correspondence you send to us in person or through other channels that you choose to use.
How We Collect Personal Data
We may collect personal data directly from you when you request a quote, make a booking, sign a storage agreement, visit our premises, or communicate with us. We may also receive personal data about you from authorised third parties where this is necessary to enter into or perform a contract, verify your identity, or comply with our legal obligations.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are set out below.
Performance of a contract. We process your personal data in order to provide storage services to you, administer your account, manage payments, secure our premises and communicate with you about your contract.
Compliance with legal obligations. We process certain data to comply with legal and regulatory requirements, including tax, accounting, fraud prevention and law enforcement obligations, and to respond to lawful requests from public authorities.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. Examples include maintaining the security of our premises, preventing and investigating potential criminal activity, managing business operations and improving our services.
Consent. In limited cases we may rely on your consent, for example for certain optional communications that go beyond what is needed to provide our services. Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Purposes of Processing
We use the personal data we collect for the following purposes.
To set up, administer and manage your storage contract, including unit allocation, billing, renewals and termination of the agreement.
To take and process payments, handle refunds or deposits, and maintain accurate financial and accounting records.
To maintain the safety and security of our customers, staff, premises and stored goods through access control systems, CCTV monitoring, incident reporting and investigations.
To provide customer service, respond to questions, handle complaints, and deal with any requests you make in relation to your account or stored items.
To manage our business operations, including performing audits, quality checks, training staff as appropriate, and planning and improving our services.
To comply with applicable laws and regulations, to protect our legal rights, and to cooperate with lawful requests from courts, regulators or law enforcement agencies.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
Customer account and contract data is generally retained for a period after the end of your contract, to allow us to respond to any follow up queries, disputes or legal claims and to comply with statutory retention periods.
Financial and billing records are kept for the period required under tax and accounting laws, after which they are securely deleted or anonymised.
CCTV recordings and access control logs are retained for a limited period that is appropriate for security and incident investigation purposes. They may be kept longer where they are required as evidence in an ongoing investigation or legal matter.
When data is no longer required, we take steps to delete it securely or anonymise it so that you can no longer be identified.
Data Processors and Sharing of Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data according to our instructions and for the purposes described in this Privacy Policy. We require them to protect your data and to comply with data protection law.
Examples of such processors may include payment processing providers, IT hosting and support providers, security and CCTV system providers, and professional advisers such as accountants where they need limited data for their services.
We may also share your personal data with other third parties in the following circumstances where we act as data controller. With public authorities, regulators, law enforcement or courts where we are required to do so by law or where it is necessary to protect our rights or the safety of others. With third parties to whom we may choose to sell, transfer or merge parts of our business or assets. In such cases, we will only share data to the extent necessary and seek to ensure that your privacy rights remain protected.
We do not sell your personal data to third parties.
International Transfers
Where we or our processors transfer personal data outside the United Kingdom or the European Economic Area, we take steps to ensure that an adequate level of protection is in place. This may include using data transfer mechanisms recognised by data protection law, such as adequacy regulations or standard contractual clauses.
Your Data Protection Rights
You have several rights in relation to your personal data under data protection law. These rights apply to all Storage Brondesbury customers within our service area, subject to certain limitations and exemptions.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.
Right to rectification. You can ask us to correct inaccurate personal data or complete data that is incomplete.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing. You may ask us to restrict the use of your data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to data portability. For personal data you have provided to us and which we process by automated means on the basis of consent or contract, you can request a copy in a structured, commonly used format and ask us to transfer it to another controller where technically feasible.
Right to object. You can object at any time to processing based on our legitimate interests, including profiling related to those interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Rights in relation to automated decision making. Storage Brondesbury does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Exercising Your Rights and Contact Details
You can exercise your rights by contacting us with a clear description of your request and sufficient information to verify your identity. We may need to request further information to ensure we are dealing with the correct individual and to respond effectively.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has not been handled lawfully. We encourage you to contact us first so we can address your concerns directly where possible.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. The updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
