Storage New Cross Privacy Policy
This Privacy Policy explains how Storage New Cross collects, uses, stores and protects personal data for all Storage New Cross customers in the area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
By using our storage services or contacting us in relation to our services, you acknowledge that you have read and understood this Privacy Policy.
Who this policy applies to
This Privacy Policy applies to all individuals who are customers or prospective customers of Storage New Cross in the area, including individuals who make enquiries, request quotes, sign storage agreements, access our premises, or otherwise interact with us in relation to our services.
It also applies to individuals who act on behalf of business customers, such as employees, contractors, or directors who are contact persons on an account.
Personal data we collect
We collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identification data, such as your full name, title, date of birth where required for verification, and identification numbers on documents you choose to provide to us for identity checks.
Contact data, such as your residential or business address, billing address, and contact details including your preferred means of contact.
Account and contract data, such as your customer number, details of your storage unit, contract start and end dates, payment terms, and records of correspondence relating to your contract or enquiries.
Payment data, such as information required to process your payments. Card and bank details are handled only in line with applicable payment security standards and are not retained by us beyond what is necessary for payment processing and legal or accounting obligations.
Usage and access data, such as records of when you access our premises, unit entry and exit logs where applicable, and details of services you use in connection with your storage unit.
Security and CCTV data, such as images and footage captured by CCTV cameras located on and around our premises, to help maintain the security of the site and our customers.
Communication data, such as records of telephone conversations where recorded, and details of emails or other communications that you send to us or that we send to you.
Marketing preference data, such as your choices about receiving marketing communications and information about our services.
How we collect your personal data
We collect personal data directly from you when you contact us for a quote, make a booking, sign a contract, enter our premises, or communicate with us by phone, in writing, or in person.
We may also collect data from third parties where lawful and relevant, such as payment service providers, credit reference agencies if credit checks are required, or business partners who introduce you to our services.
CCTV footage and access data are collected automatically through our security and access systems when you visit or use our facilities.
Lawful basis for processing
We rely on the following lawful bases under the UK GDPR for processing your personal data:
Contractual necessity. We process personal data to take steps at your request before entering into a contract and to perform our contractual obligations to you. This includes processing identification, contact, account, and payment data necessary to provide storage services, manage your account, and communicate with you about your contract.
Legal obligation. We process personal data where this is necessary to comply with legal and regulatory requirements, such as record keeping for tax and accounting, responding to lawful requests from authorities, and complying with health and safety or security obligations.
Legitimate interests. We process personal data where this is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include managing and improving our services, maintaining security and preventing crime, protecting our property and the property of our customers, handling enquiries and complaints, and pursuing or defending legal claims.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of marketing communications where consent is required by law. Where we rely on consent, you can withdraw it at any time by contacting us or by using the options provided in the communication.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up and administering your account, processing bookings and payments, and communicating with you about your unit and your contract.
To verify your identity where required, reduce fraud, and strengthen the security of our facility.
To manage our relationship with you, including handling enquiries, requests, feedback, and complaints, and sending you important service information and notices about changes to your agreement or this Privacy Policy.
To operate and secure our site, including monitoring CCTV for safety and security, controlling access to storage units, investigating incidents, and preventing and detecting crime.
To comply with legal, regulatory, and tax obligations, and to cooperate with law enforcement or regulatory authorities where required.
To conduct internal reporting, auditing, and quality control, and to improve our services and customer experience.
To send you information about products or services that are similar to those you have already purchased or enquired about, where lawful to do so. You can opt out of such communications at any time.
Data sharing and processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy or where we are legally required to do so.
We may share personal data with service providers acting as data processors on our behalf, who provide services such as payment processing, customer relationship management systems, accounting and bookkeeping support, IT hosting and maintenance, security and CCTV system support, and document storage or destruction services.
These processors may only process your personal data in accordance with our written instructions and must implement appropriate security measures to protect your data.
We may also share personal data with professional advisers acting as controllers or joint controllers, such as accountants, auditors, and legal advisers, where this is necessary for the services they provide to us.
Where required by law, we may share personal data with law enforcement agencies, courts, regulators, or other public authorities.
International data transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. This may include using standard contractual clauses or ensuring that the country has been recognised as providing an adequate level of data protection.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, meet legal, accounting, or reporting requirements, and resolve disputes.
In general, we keep contract and billing records for a period required by applicable tax and accounting laws after your relationship with us ends. CCTV recordings are kept for a shorter period, which is typically limited to what is necessary for security and investigation purposes unless an incident requires longer retention.
When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention and deletion procedures.
Your data protection rights
Under data protection laws, you have certain rights in relation to your personal data. These rights are subject to conditions and legal exemptions and may not apply in all circumstances.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with certain details about how it is processed.
Right to rectification. You can request correction of inaccurate personal data and completion of incomplete data we hold about you.
Right to erasure. You can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You can request that we restrict the processing of your personal data in certain cases, such as while we are reviewing a request to rectify or object.
Right to object. You can object to processing based on our legitimate interests, including direct marketing, and we will stop processing unless we have compelling legitimate grounds to continue or the processing is for legal claims.
Right to data portability. In certain circumstances, you can request to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and have it transmitted to another controller where technically feasible.
You also have the right to withdraw consent where we rely on consent for processing. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Security of your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include physical security for our premises, access controls, secure storage of records, and restrictions on who can access personal data within our organisation and among our processors.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
