Storage New Eltham Privacy Policy
This Privacy Policy explains how Storage New Eltham collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Storage New Eltham area. We are committed to handling your personal information in accordance with the UK General Data Protection Regulation and all applicable data protection laws.
This Privacy Policy applies to all Storage New Eltham customers, including individuals and businesses, who use or enquire about our storage services in the Storage New Eltham area, whether in person, by phone, or online.
Data Controller
Storage New Eltham acts as the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data depending on your relationship with us and how you use our services. The types of data we may collect include:
Identification and contact details, such as your name, postal address, billing address, and other contact details you choose to provide when you make an enquiry, request a quote, or sign a storage agreement.
Customer account information, such as storage unit numbers, contract start and end dates, payment history, and correspondence relating to your account and use of our services.
Payment and transaction information, including details necessary to process payments and maintain accounting records, such as payment method and transaction records. We do not store full card details when using third party payment processors.
Verification and security information, which may include proof of identity documents, vehicle registration details, and records of access to the facility for security and operational purposes.
Usage and communication data, including records of communications with our staff, requests and enquiries, feedback you provide, and notes relating to services provided to you.
Technical information, where relevant, such as basic information about how you access any online services we provide, including date and time of visits, and general device information, collected for security, performance, and service improvement.
How We Collect Your Data
We collect personal data directly from you when you contact us, request information, obtain a quote, sign a storage agreement, make payment, or otherwise interact with our services. We may also collect data generated by your use of our facilities, such as access logs and security records.
In some cases, we may receive limited data about you from third parties, for example where a business provides contact details of an authorised user of a storage unit, or where payment is made on your behalf by another person or organisation.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the context, our lawful bases may include:
Contractual necessity, where processing is required to enter into or perform a contract with you, such as providing storage services, managing your account, and handling your requests.
Legal obligation, where we are required to process data to comply with laws and regulations, including tax, accounting, and health and safety requirements, and obligations to assist law enforcement or regulatory authorities.
Legitimate interests, where we have a legitimate business interest in processing your data that is not overridden by your rights and interests. This can include maintaining security at our storage facilities, preventing fraud and misuse, improving our services, managing our relationship with customers, and pursuing or defending legal claims.
Consent, where we rely on your explicit consent for a specific purpose, such as certain types of optional communications. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To respond to enquiries, provide quotes, and supply information about our storage services.
To set up and manage storage agreements, including verifying your identity, administering access, and providing customer support.
To process payments, send invoices and payment reminders, and maintain accurate financial and accounting records.
To maintain the safety and security of our premises, customers, and staff, including monitoring access, investigating incidents, and enforcing our terms of use.
To communicate with you about your account, service updates, changes to terms, or important information relating to your storage unit.
To manage and improve our operations, including training, quality assurance, service development, and resolving complaints.
To comply with legal and regulatory obligations and respond to lawful requests from public authorities.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory requirements.
In general, we retain customer account and contract information for the duration of your relationship with us and for a defined period after your contract ends, to handle queries, disputes, tax, and accounting obligations.
Payment and transaction records are kept for as long as required by applicable financial and tax laws. Security and access records may be retained for a shorter period, unless they form part of an investigation or legal matter.
When personal data is no longer required, we will securely delete or anonymise it so that you can no longer be identified.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions and for the purposes set out in this Privacy Policy.
Such processors may include:
Payment processing providers who manage card payments and other transactions for our services.
IT and system support providers who host or maintain our booking, billing, or communication systems.
Security and facility management providers who assist in operating and securing our storage premises.
Professional advisers, such as accountants, auditors, or legal advisers, where necessary for legitimate business and compliance purposes.
Where we use processors, we ensure that appropriate contractual and technical safeguards are in place to protect your personal data.
We may also disclose your personal data where required to do so by law, or in connection with legal proceedings, or to establish, exercise, or defend our legal rights.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will do so in compliance with data protection laws and ensure that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your information.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions. They include:
The right of access, which allows you to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how it is processed.
The right to rectification, which allows you to ask us to correct inaccurate personal data or complete incomplete data that we hold about you.
The right to erasure, also known as the right to be forgotten, which allows you to request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and there is no legal obligation to retain it.
The right to restriction of processing, which allows you to request that we restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
The right to data portability, which allows you, in specific circumstances, to receive personal data you have provided to us in a structured, commonly used, and machine readable format and to transmit it to another controller.
The right to object, which allows you to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for legal claims.
Where we rely on consent as a lawful basis, you also have the right to withdraw your consent at any time.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include limiting access to personal data to staff and processors who need it to perform their duties, using secure systems, and maintaining policies and training focused on data protection and security.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any changes will take effect when the updated Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
