Storage St Pauls Cray Privacy Policy
This Privacy Policy explains how Storage St Pauls Cray collects, uses, stores and protects your personal data in accordance with the UK General Data Protection Regulation and relevant data protection laws. It applies to all Storage St Pauls Cray customers and prospective customers in the surrounding area, including anyone who uses our storage services, visits our premises, makes an enquiry, or interacts with us in any other way.
Who This Privacy Policy Applies To
This Privacy Policy applies to all individual customers and potential customers of Storage St Pauls Cray in the local area, as well as individuals acting on behalf of a business or organisation that uses our services. It also applies to visitors to our premises whose personal data may be captured by our security and access systems.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identification data such as name, title, date of birth, and identification document details where required for security and verification purposes.
Contact data such as residential or business address, billing address, and communication preferences.
Account and contract data such as customer reference numbers, storage unit details, contract start and end dates, payment history, and records of communications with you.
Payment and transaction data such as payment method details and records of payments made to us for storage or related services. We do not store full card details when payment is processed through secure third-party payment providers.
Security and access data such as CCTV footage from our premises, access codes or key fob identifiers, entry and exit logs, and incident reports relating to security or safety.
Usage and enquiry data such as enquiries made in person or through other channels, records of quotes provided, complaints and feedback, and information about the services you have shown interest in.
How We Collect Your Data
We may collect personal data from you directly when you contact us, request a quote, sign a storage agreement, make a payment, or visit our premises. We may also receive personal data from third parties where this is necessary to provide our services or to meet legal obligations, for example identity verification services or payment processors. Some data, such as CCTV recordings, are captured automatically when you visit our premises.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Performance of a contract: We process your data to take steps at your request before entering into a contract and to perform our contractual obligations to you, including setting up your storage unit, managing your account, and processing payments.
Legal obligation: We process certain information to comply with legal and regulatory requirements, for example record-keeping for tax purposes, responding to lawful requests from authorities, and maintaining necessary security records.
Legitimate interests: We process data where it is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, preventing and detecting crime or fraud, managing our business operations, and improving our services.
Consent: In limited cases we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time by contacting us or using any available opt-out method.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage and related services, including setting up and managing your account, administering contracts, facilitating access to units, and handling renewals or terminations.
To communicate with you, including responding to enquiries, sending service-related messages and notices, and dealing with complaints or disputes.
To manage payments and billing, including issuing invoices, processing payments through third-party payment processors, managing arrears, and maintaining financial records.
To maintain security and safety, including monitoring access to our premises, operating CCTV systems, investigating incidents, and protecting our property, customers, and staff.
To manage and improve our business, including internal record-keeping, analysing service usage, planning capacity, and training staff.
To meet our legal and regulatory obligations, including responding to lawful requests from authorities and maintaining required records.
To send you information about services that are similar to those you have already used, where permitted by law and where you have not opted out of such communications.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where this is necessary for the purposes described in this Privacy Policy, including:
Service providers acting as processors who supply IT, hosting, storage management systems, security systems, customer support tools, and payment processing services.
Professional advisers such as accountants, auditors, or legal advisers where necessary for legitimate business and legal purposes.
Law enforcement bodies, regulatory authorities, and other official agencies where we are legally required or permitted to do so, or where it is necessary to protect our rights, property, or the safety of others.
Debt recovery agencies or legal representatives where necessary to recover unpaid amounts under our contract with you.
Where we engage processors, they act only on our instructions, are bound by contractual obligations to protect your data, and may not use it for their own purposes.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will take steps to ensure that your personal data is given adequate protection in line with data protection law. This may include using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of protection for personal data.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. In determining appropriate retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any applicable legal requirements.
Customer and contract records are typically retained for a period after the end of your agreement to enable us to respond to queries, resolve disputes, and comply with tax and accounting obligations. CCTV footage and access logs are retained for a shorter period unless required for an ongoing investigation or legal process.
When data is no longer required, it is securely deleted, anonymised, or destroyed in a way that protects your privacy.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data. These rights apply to all Storage St Pauls Cray customers and prospective customers in the area, subject to any legal restrictions or exemptions. Your rights include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of that data, together with certain information about how it is used.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In some circumstances, you can request that we delete your personal data. This right is not absolute and may be limited by our legal obligations or legitimate interests.
Right to restrict processing: You can request that we restrict the processing of your personal data in certain situations, for example while we are dealing with a request to correct inaccurate data.
Right to data portability: In limited circumstances, you can request that we provide your personal data in a structured, commonly used and machine-readable format or that we transmit it to another controller, where technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including for certain types of direct marketing.
Rights in relation to automated decision-making: We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
If you wish to exercise any of these rights, you can contact us using the details provided on our main customer communication channels. We may need to verify your identity before responding to your request. There is generally no fee to exercise your rights, unless a request is clearly unfounded or excessive.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, secure storage systems, staff training, and regular review of our security practices. While we take reasonable steps to protect your data, no system can be completely secure and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any updated version will apply to all Storage St Pauls Cray customers in the area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
