Storage Woodford Green Privacy Policy
This Privacy Policy explains how Storage Woodford Green collects, uses, stores, and protects personal data relating to customers and prospective customers in the Woodford Green area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Woodford Green customers, past customers, prospective customers, and individuals who make enquiries or otherwise interact with us in the Woodford Green area. It covers personal data collected through our storage facilities, customer service channels, billing processes, and any other method by which we interact with you in connection with our storage services.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about, sign up for, or use our storage services:
Identification and contact details such as full name, postal address, billing address, and any preferred contact details you choose to provide.
Account and contract details such as storage unit number, contract start and end dates, details of services requested, and communications relating to your account.
Payment and transaction information such as payment method, billing history, and records of invoices and payments. We do not store full card details when payments are processed by external payment processors.
Verification and security information such as copies of identification documents where required for security or legal purposes, vehicle registration details where necessary, and records from facility access systems such as key fob or gate entry logs.
Communication records such as records of enquiries, complaints, feedback, and other communications with us, including the date, time, and subject of the interaction.
Technical and usage information such as limited technical information that may be collected when you interact with any online services we provide, including basic device and browsing data necessary to operate and secure those services.
How We Collect Your Data
We collect personal data directly from you when you contact us for information, obtain a quote, sign a storage agreement, make a payment, enter into or terminate a contract, or communicate with us in person, by post, or through any other communication channel we make available.
We may also receive personal data about you from third parties where this is necessary for the performance of our contract with you or where you have authorised the third party to share information with us. This may include payment service providers, credit reference agencies where applicable, or business partners who refer you to our services.
Lawful Bases for Processing Your Data
We process your personal data only when we have a lawful basis to do so under data protection law. Depending on the circumstances, we may rely on one or more of the following lawful bases:
Performance of a contract. We process your data where it is necessary to enter into or perform a storage contract with you, for example to set up your account, manage your storage unit, and process payments.
Compliance with a legal obligation. We process certain data to comply with legal and regulatory requirements, such as tax and accounting obligations, fraud prevention, and responses to lawful requests from public authorities.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises and services, managing and improving our operations, maintaining records of customer interactions, and defending or establishing legal claims.
Consent. In specific situations, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services, including setting up your account, managing your storage unit, handling access arrangements, and communicating with you regarding your contract and any changes to our services or policies.
To process payments and administer billing, including sending invoices, recording payments, and managing any arrears or refunds.
To maintain security and safety at our facilities, including managing access control systems, addressing incidents, and protecting our customers, staff, and property.
To respond to enquiries, requests, or complaints, and to provide customer support.
To comply with legal, regulatory, and tax obligations and to cooperate with authorities where we are legally required to do so.
To manage and improve our business operations, including internal record keeping, performance monitoring, and staff training.
To send you information about our services or related offerings where we are permitted to do so and where you have not opted out of such communications.
Data Sharing and Use of Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where this is necessary for the purposes described in this Privacy Policy, including:
Payment service providers that process card and other payments on our behalf.
IT service providers that host or support our systems, such as customer management or billing platforms.
Professional advisers such as accountants, auditors, or legal advisers where necessary for the management of our business or the handling of legal or financial matters.
Debt collection agencies or similar service providers where required to recover unpaid amounts under our contract with you.
Public authorities and law enforcement agencies where we are required by law or where disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
Where we use third party processors, we ensure that they are bound by written contracts requiring them to process your personal data only in accordance with our instructions, to maintain appropriate security measures, and to comply with data protection law.
International Data Transfers
Where personal data is transferred outside the United Kingdom, we take steps to ensure that an adequate level of protection is in place as required by data protection law. This may include relying on adequacy regulations or putting in place standard contractual clauses or other appropriate safeguards. You can ask us for more information about international transfers relevant to your data where applicable.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting, or reporting requirements. In general:
Customer account and contract data is kept for the duration of your contract and for a period after it ends, to respond to queries, manage any disputes, and comply with legal obligations.
Financial and transaction records are typically retained for the period required under applicable tax and accounting laws.
Security and access records are kept for a limited period necessary to investigate incidents, manage facility security, and comply with legal requirements.
Where data is no longer required, it will be securely deleted, anonymised, or otherwise removed from our systems.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data. These rights may be subject to limitations and conditions, and we may need to verify your identity before responding to your request. Your rights include:
The right of access. You can request confirmation as to whether we process your personal data and request a copy of the personal data we hold about you.
The right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
The right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for the processing.
The right to restrict processing. You can ask us to restrict the processing of your data in certain situations, for example while we verify the accuracy of the data or consider an objection.
The right to object. You can object to processing that is based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests or the processing is needed for legal claims. You also have the right to object at any time to processing for direct marketing.
The right to data portability. Where processing is based on consent or on a contract and is carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used, machine readable format and to request that we transfer it to another controller where technically feasible.
The right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdraw it.
You also have the right to lodge a complaint with the Information Commissioners Office or another competent supervisory authority if you believe that your data protection rights have been infringed.
Security of Your Personal Data
We take appropriate technical and organisational measures to safeguard the personal data we process against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are designed to provide a level of security appropriate to the risks presented by the processing and the nature of the personal data involved. However, no system can be guaranteed as completely secure and you should take care to protect your own information, particularly when sending data through any online or communication channels.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updates will apply from the date they are made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
