Storage Enfield Wash Privacy Policy
This Privacy Policy explains how Storage Enfield Wash collects, uses, stores and protects personal data relating to customers and prospective customers. It applies to all Storage Enfield Wash customers and users of our services in the local area, including individuals and businesses who make enquiries, enter into storage agreements or otherwise interact with us offline or online.
We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This policy sets out the types of personal data we process, our lawful bases for processing, how long we keep data, the third parties who process data on our behalf, and the rights you have in relation to your personal information.
Data We Collect
We collect only the personal data that is necessary for the operation of our storage services and for the management of customer relationships. The information we may collect includes: your name, postal address, billing address, and contact details such as mobile or landline number and other communication details you provide; identification details such as date of birth and identification document details where required for security or verification purposes; contract and account details including storage unit number, key or access code identifiers, contract start and end dates, and records of payments and invoices; communication records such as enquiries, complaints, feedback and any correspondence you have with us; security and access information, which may include access logs, time and date of entry to our facilities, and where installed, CCTV footage in and around our premises; and technical information where you interact with any of our online services, such as basic device and browser details and usage records generated by our systems.
We collect personal data directly from you when you make an enquiry, sign a storage agreement, make a payment, visit our premises, or contact us by any communication method. We may also receive information from third parties where you have authorised them to share data with us, for example, referral partners or payment service providers.
Purposes and Lawful Bases for Processing
We process personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are: to provide storage services to you, manage your account, take payments, and communicate with you regarding your contract. The lawful basis for this is performance of a contract or taking steps at your request before entering into a contract; to respond to enquiries, requests for quotations, and customer support questions. The lawful basis is our legitimate interests in running and developing our business and providing information about our services; to comply with legal and regulatory obligations, including record keeping for tax purposes, fraud prevention, and cooperating with law enforcement where required. The lawful basis is compliance with legal obligations; to secure our premises, people and property by operating access control systems and, where installed, CCTV. The lawful basis is our legitimate interests in maintaining a safe and secure facility; to send service-related messages, updates regarding your contract or changes to our terms and policies. The lawful basis is performance of a contract and our legitimate interests in keeping customers informed; to send carefully selected marketing communications about our services, offers or promotions where you are an existing customer or where you have given consent. The lawful basis is our legitimate interests for existing customers and consent where required by law; and to manage and improve our services, systems and customer experience, using aggregated or pseudonymised data where possible. The lawful basis is our legitimate interests in improving and developing our operations.
Where we rely on consent, you may withdraw your consent at any time. Where we rely on legitimate interests, you have the right to object to such processing, as explained below.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, to comply with legal or regulatory requirements, and to protect or defend legal claims. We apply the following general retention rules: contract and billing records, including your contact details, contract information and payment records, are typically retained for up to seven years after the end of your contract to meet tax, accounting and legal requirements; identification and verification information is retained for as long as necessary to meet our legal obligations and security requirements, and for a reasonable period after your contract ends to address any disputes or investigations; CCTV recordings, where used, are normally kept for a short period, usually no longer than 30 to 90 days, unless a longer retention period is required for the investigation of an incident or for legal reasons; enquiry and correspondence records, including complaints and feedback, are generally stored for up to three years from the date of last contact unless required for a longer period in connection with a contract or legal claim; and marketing preferences and records of consent are kept for as long as we send you marketing communications and for a reasonable period afterwards to demonstrate compliance with data protection laws.
When data is no longer required, we securely delete or anonymise it. Anonymised information that can no longer identify you may be retained for statistical or analytical purposes.
Data Processors and Sharing
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your information in accordance with our instructions and for the purposes we specify. They are required to implement appropriate technical and organisational measures to protect your data.
Examples of data processors we may use include: payment processing providers who handle card or online payments; information technology and system support providers who host or maintain our software, access control systems and data storage infrastructure; accounting and professional advisers who assist us with financial and compliance matters where data access is necessary; security service providers who may support CCTV operation or access control systems; and communication and marketing service providers who help us send service notifications or, where permitted, marketing messages.
We may also share your information in limited circumstances with other third parties acting as independent controllers, where required or allowed by law. This may include law enforcement agencies, regulators, or government authorities where disclosure is necessary for legal or regulatory reasons, to prevent or detect crime, or to protect the rights, property or safety of our customers, staff or the public. Where we are involved in a business sale, merger or restructuring, your data may be shared with prospective or actual purchasers or advisers, subject to appropriate confidentiality safeguards.
We do not sell your personal data. If any transfer of personal data involves a destination outside the UK or European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection laws.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. You have the right to request access to the personal data we hold about you and to receive information about how we process it. You have the right to ask us to correct inaccurate or incomplete personal data. You have the right to request deletion of your personal data in certain circumstances, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and no other legal basis applies.
You have the right to restrict our processing of your data in specific situations, such as where you contest the accuracy of the data or object to our legitimate interests. You have the right to object to processing based on our legitimate interests, including profiling, and to direct marketing at any time. You have the right, in some cases, to receive the personal data you provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another controller, where technically feasible. Where we rely on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
If you wish to exercise any of these rights, you can contact us using the contact details set out in your storage agreement or on our official communications. We may need to verify your identity before acting on your request. We aim to respond to all valid requests within one month.
Complaints and Updates to This Policy
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so we can try to resolve the issue. You also have the right to lodge a complaint with the relevant supervisory authority in the UK.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. The most recent version will apply to your use of our services and will be made available through our usual communication channels. We recommend that you review this policy periodically so that you remain informed about how we use and protect your personal data at Storage Enfield Wash.
