Storage Southall Privacy Policy
This Privacy Policy explains how Storage Southall collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Southall service area. It is intended to comply with the UK General Data Protection Regulation and all applicable data protection laws. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Southall customers, prospective customers, and individuals who contact or interact with Storage Southall in the local area, whether in person, by telephone, in writing, or through any digital channels that we operate. It covers personal data collected in connection with enquiries, quotes, bookings, contracts, payments, and ongoing customer service.
Personal Data We Collect
We may collect and process the following categories of personal data:
Identification and contact details, such as your full name, postal address, billing address, and preferred contact details.
Account and contract information, such as unit number, contract dates, access authorisations, and notes related to the services you have requested or received.
Payment and billing information, including information necessary to process payments and issue invoices. We do not store full payment card details when processed through secure payment providers.
Communication data, such as records of calls, messages, and correspondence between you and Storage Southall, including any feedback or complaints.
Usage and access information, where relevant for security and operational purposes, such as access logs for storage units, visit dates and times, and security monitoring information from our premises.
Technical information, when you interact with our online services, such as device, browser, or basic usage data that allows us to operate and secure our website or online account tools.
How We Collect Your Data
We collect personal data directly from you when you request information or a quote, sign a storage agreement, make a payment, contact us with a query, or update your details. We may also collect data when you visit our premises, including through security and access control systems.
In limited circumstances, we may receive data about you from third parties, for example where you are listed as an authorised contact on another customer’s account, or where a third party has referred you to us with your consent.
Lawful Bases for Processing
Storage Southall processes personal data only where we have a lawful basis under the UK GDPR. Depending on the context, we may rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, arranging payments, and communicating with you about your booking.
Legal obligation: We process data where necessary to comply with legal and regulatory obligations, such as tax, accounting, and record-keeping requirements, and obligations related to the safety and security of our premises.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This can include ensuring the security of our premises, preventing fraud, improving our services, managing customer relationships, and defending legal claims.
Consent: In situations where we rely on your consent, we will make this clear at the point of collection and you may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data primarily to provide, manage, and improve our storage services. This includes:
Handling enquiries and providing quotes for our services.
Setting up, managing, and terminating storage contracts.
Processing payments, issuing invoices, and managing any arrears or billing queries.
Communicating with you about your account, including service updates and important notices.
Ensuring the safety and security of our premises, units, and customers, including the use of access logs and other security systems.
Responding to requests, complaints, or disputes, and enforcing our contractual terms.
Complying with applicable laws, regulations, and guidance from regulatory bodies.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where this is necessary for the purposes described above and where those third parties act as processors or independent controllers in their own right.
Processors are service providers that process personal data on our behalf and only in accordance with our instructions. These may include payment processing providers, cloud or data storage providers, IT and security support services, and professional advisers such as accountants or legal advisors acting under a duty of confidentiality.
Where we use processors, we ensure appropriate data processing agreements are in place, requiring them to maintain suitable security measures and to process your personal data only for the agreed purposes and duration.
We may also share personal data with public authorities or law enforcement agencies where required by law, or where necessary to protect our legitimate interests, for example in the prevention or detection of crime or to establish or defend legal claims.
International Data Transfers
Where personal data is transferred outside the United Kingdom, we will ensure that an adequate level of protection is in place, for example by using jurisdictions that have been deemed to provide an adequate level of data protection or by implementing appropriate safeguards such as standard contractual clauses. You may contact us for further information about any such transfers where applicable.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected and to meet legal, accounting, or reporting requirements.
In general, we keep customer account and contract information for a period following the end of your contract, to respond to queries, manage any disputes, comply with tax obligations, and demonstrate that we have met our legal and regulatory duties. Security-related data, such as access records, may be retained for shorter periods unless required for an investigation or legal claim.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to you.
How We Protect Your Data
Storage Southall takes appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include access controls, secure storage, and limiting personal data access to staff and processors who need it for the performance of their duties and who are subject to confidentiality obligations.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification: You can ask us to correct or update personal data that is inaccurate or incomplete.
Right to erasure: You can request that we delete your personal data where there is no longer a lawful basis for us to retain or use it.
Right to restriction: You can ask us to restrict the processing of your personal data in certain circumstances, such as while we verify its accuracy.
Right to object: You can object to processing that is based on our legitimate interests, including profiling based on those interests. We will stop processing unless we have compelling legitimate grounds that override your interests or where processing is necessary for legal claims.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used, machine-readable format, or transfer it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time. This will not affect processing that has already taken place.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
