Storage Barnehurst Privacy Policy
This Privacy Policy explains how Storage Barnehurst collects, uses, stores and protects your personal data. It applies to all Storage Barnehurst customers and prospective customers in the Barnehurst area who use our storage services, visit our premises or otherwise interact with us offline or online.
Storage Barnehurst is committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. We only process personal data in a lawful, fair and transparent manner and we take appropriate steps to keep it secure.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your full name, residential address, correspondence address, date of birth, and identification document details where required for verification purposes.
Contact information, such as your postal address, billing address, and other contact details you choose to provide.
Contract and service information, such as storage unit number, size and type of unit, rental period, payment history and information related to your chosen services or any additional options you select.
Payment and billing information, such as billing address and basic transaction information related to payments you make for our services. Card or bank details are processed by secure payment providers and are not retained by us beyond what is necessary for the particular transaction or as required by law.
Communication data, such as records of communications with you including enquiries, feedback, complaints and any other correspondence related to our services.
Security and access data, such as vehicle registration numbers you provide for site access, access logs to the facility, and, where in operation, CCTV footage for security and safety purposes in and around our premises.
Website and technical data, such as IP address, device information and basic usage data collected when you visit our website. This may include information gathered through cookies or similar technologies where used in accordance with applicable law.
How We Collect Your Data
We collect personal data directly from you when you request a quote, sign a storage agreement, visit our premises, make a payment, contact us by any communication channel, or interact with our website.
We may also receive personal data about you from third parties, such as payment service providers who confirm that a payment has been made, or from lawful requests by public authorities where required.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation. Depending on the specific processing activity, our lawful bases may include:
Contract performance: To take steps at your request before entering into a contract, and to perform our contract with you. This includes setting up your storage unit, managing your account, processing payments, communicating with you about your storage agreement and providing customer service.
Legal obligation: To comply with legal and regulatory requirements, including tax and accounting rules, prevention of fraud or other unlawful activities, and obligations relating to security and safety at our facilities. This may require us to retain certain records or to cooperate with law enforcement or regulatory bodies.
Legitimate interests: To pursue our legitimate business interests in managing and developing our storage services, maintaining the security of our premises, preventing non payment and misuse of our services, and improving customer experience. When we rely on legitimate interests, we assess that our interests are not overridden by your rights and freedoms.
Consent: In limited cases, we may rely on your consent, for example for certain types of optional marketing communications or non essential cookies where applicable. Where we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you, including setting up and managing your storage agreement, granting access to storage facilities and handling requests, enquiries and complaints.
To manage payments, invoicing and debt collection, including verifying payment details with processors, issuing invoices and reminders and enforcing our rights under the storage agreement.
To maintain the security and safety of our premises, customers and staff, including monitoring access, operating CCTV where in place and investigating incidents or suspected unlawful activity.
To manage our relationship with you, such as notifying you of changes to our terms, contacting you about your storage unit, and responding to your requests and feedback.
To conduct internal administration, compliance and record keeping, including auditing, financial reporting and legal compliance.
To improve and develop our services, by reviewing usage data, service performance and customer interactions to help us understand how our services are used and where improvements can be made.
Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law or regulation.
In general, we keep customer account and contract data for the duration of your storage agreement and for a period after it ends, to address any queries, resolve disputes, enforce our rights and comply with legal obligations. Financial and transaction records are typically retained for the period required by tax and accounting laws.
Security related data such as access logs and CCTV footage, where collected, is retained for shorter, defined periods unless it is needed for the investigation of an incident, in which case it may be kept for longer until the matter is resolved.
When personal data is no longer required, we will securely delete or anonymise it, ensuring that it can no longer be associated with you.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include providers of payment processing services, IT and cloud service providers, security and CCTV maintenance companies, and professional advisers who support our business operations.
Where we use processors, they only process your personal data in accordance with our documented instructions, are subject to confidentiality obligations and must implement appropriate technical and organisational measures to protect your data. We do not authorise them to use your personal data for their own purposes.
We may also share your personal data with other third parties where required by law or regulation, in connection with legal proceedings, to respond to legal requests from public authorities, or to protect our rights, property, safety or that of our customers and staff.
We do not sell your personal data and we do not share it with third parties for their independent marketing purposes.
International Data Transfers
Where we use service providers that are located outside the United Kingdom, or that store or access personal data from outside the United Kingdom, we take steps to ensure that your personal data continues to benefit from an equivalent level of protection. This may involve using locations that have been recognised as providing adequate protection, or putting in place appropriate safeguards such as standard contractual clauses and additional technical and organisational measures as required.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Subject to applicable law, your rights may include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you, together with information about how we use it.
Right to rectification: You can request that inaccurate or incomplete personal data about you is corrected or updated without undue delay.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing: You can ask us to restrict the processing of your personal data in certain situations, such as while we are assessing a request for rectification or where you object to processing based on legitimate interests.
Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may be entitled to receive your personal data in a structured, commonly used and machine readable format and to request that it is transmitted directly to another data controller where technically feasible.
Right to object: You can object at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
You also have the right to raise concerns with the relevant supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, in applicable laws or in how we process personal data. Any significant changes will be clearly communicated, and the updated policy will apply from the date it is published.
By using our storage services or otherwise interacting with Storage Barnehurst after any changes take effect, you acknowledge the updated Privacy Policy as the applicable version.
