Storage Beddington Privacy Policy
This Privacy Policy explains how Storage Beddington collects, uses and protects personal data for all Storage Beddington customers in the Beddington area. It is intended to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. By using our services, renting storage units or otherwise interacting with us as a customer in the Beddington area, you acknowledge that you have read and understood this Privacy Policy.
Who this policy applies to
This Privacy Policy applies to all individual customers and prospective customers of Storage Beddington in the Beddington area. It also applies to individuals who contact us with enquiries, visitors to our storage facilities, and individuals whose information is provided to us in connection with a storage agreement, such as authorised users or emergency contacts.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification data, such as full name, date of birth, nationality, and copies or details of identification documents used to verify your identity.
Contact data, such as residential address, billing address, and any correspondence address you provide, together with any communication preferences you specify.
Account and contract information, such as storage unit numbers, access codes, key or fob identifiers, contract start and end dates, payment status, and records relating to your storage agreement.
Financial and payment information, such as partial payment card details processed through our payment providers, bank transfer references, payment history, and billing records. We do not store full card details when payment is processed through a secure payment provider.
Usage and access data, such as entry and exit logs, gate and door access records, visitor sign-in records, and records of contacts or enquiries about your account.
Security and surveillance data, such as CCTV footage in and around our facilities, incident reports, and any information collected as part of security checks or investigations.
Communication data, such as emails, letters, and records of telephone conversations where we document key details or decisions relevant to your account or our services.
How we collect personal data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, make a payment, or contact us about your account. We may also collect information when you visit our facilities, use access control systems, or appear on CCTV recordings.
In some cases we may receive personal data about you from third parties, for example where you are a nominated contact or where a business customer provides your details as an authorised user of a storage unit.
Lawful bases for processing your data
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, the main lawful bases we rely on are:
Performance of a contract. We process personal data to set up, manage and administer your storage agreement, take payments, communicate with you about your contract, and provide customer support.
Compliance with legal obligations. We may process personal data to comply with laws and regulations, such as tax and accounting requirements, identity verification obligations, health and safety rules, and to respond to lawful requests from authorities.
Legitimate interests. We may process personal data where it is necessary for our legitimate interests or the legitimate interests of a third party, and where these are not overridden by your rights and freedoms. Legitimate interests include securing our premises and property, preventing fraud or misuse, handling queries and complaints, improving our services, and maintaining accurate records of our operations.
Consent. In some limited circumstances, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use personal data for the following purposes:
To provide storage services and manage your account, including processing applications, verifying identity where appropriate, setting up units, controlling access, and organising renewals or terminations.
To process payments, issue invoices, manage arrears and refunds, and maintain financial records for accounting and audit purposes.
To maintain security and safety at our facilities, including controlling access to the site and units, monitoring for unauthorised access or suspicious behaviour, and using CCTV footage for security and incident investigation.
To communicate with you about your storage agreement, changes to our terms or this Privacy Policy, operational notices about the facility, and responses to your questions or complaints.
To comply with legal and regulatory requirements, respond to requests or orders from law enforcement authorities, and support the detection and prevention of crime or fraud.
To analyse how our services are used, address service issues, improve customer experience, plan capacity and facilities, and support the general management and growth of our business.
Data retention and storage
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including for the purposes of satisfying legal, accounting or reporting requirements. Retention periods may vary depending on the category of data and the applicable laws and regulations.
In general, we retain core contract and billing information for a period required to meet tax, accounting, limitation and record-keeping obligations. Access control logs and CCTV footage are typically retained for a shorter period, unless required for the investigation of an incident, to defend legal claims, or to comply with a lawful request from authorities.
When personal data is no longer needed, we will take appropriate steps to delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.
Data processors and third parties
We may engage trusted third party service providers to process personal data on our behalf as data processors. These may include providers of payment processing services, secure data storage and hosting, customer management systems, maintenance and security services, and professional advisers such as accountants or legal advisers.
Where we use data processors, we require them to handle personal data strictly in accordance with our instructions, to use appropriate technical and organisational security measures, and to comply with applicable data protection laws. They are not permitted to use your personal data for their own purposes.
We may also share personal data with other third parties where required by law, requested by public authorities with appropriate powers, or necessary to establish, exercise or defend legal claims. If we are involved in a reorganisation, merger or transfer of business, personal data may be shared with prospective or actual buyers under appropriate safeguards.
International transfers
Where personal data is processed outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include relying on adequacy regulations, using standard contractual clauses or equivalent protections, or ensuring that transfers take place within a framework recognised as providing adequate protection.
How we protect your data
We take appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, alteration or disclosure. These measures may include controlled access to systems, secure storage solutions, encryption where appropriate, staff training in data protection responsibilities, and procedures for responding to potential data incidents.
Your data protection rights
You have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions or exceptions. Subject to those conditions, your rights include:
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification. You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
Right to erasure. You may request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may request that we restrict processing of your personal data in certain situations, such as while we are verifying the accuracy of the data or considering an objection you have raised.
Right to object. You may object to processing of your personal data where it is based on our legitimate interests or those of a third party, including profiling based on those interests. We will stop processing unless we have compelling legitimate grounds or the processing is needed for legal claims.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and have it transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns directly where possible.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any changes will take effect when the updated policy is made available to customers. We recommend that you review this Privacy Policy periodically to stay informed about how we handle personal data for Storage Beddington customers in the Beddington area.
