Storage Eden Park Privacy Policy
This Privacy Policy explains how Storage Eden Park collects, uses, stores, and protects personal data relating to our customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act, and how you can exercise those rights. This Privacy Policy applies to all Storage Eden Park customers in the local area who use, enquire about, or express an interest in our storage services, whether in person, by phone, or online.
Who We Are
Storage Eden Park is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data when you use or enquire about our storage services. Where we engage third parties to process your data on our behalf, they act as data processors and are bound by contractual obligations to protect your information.
Personal Data We Collect
We collect and process personal data that is necessary to provide our storage services and to manage our relationship with you. The types of data we may collect include:
Identification and contact details, such as name, postal address, billing address, and any other contact details you choose to provide when you contact us or sign an agreement.
Account and contract details, such as customer reference numbers, storage unit details, contract start and end dates, payment terms, and communications related to your storage agreement.
Payment and billing information, such as payment method, payment history, and information required to process transactions and manage invoices. We do not store full card details where payments are processed via secure payment providers.
Usage and interaction data, such as records of your communications with us, enquiries, complaints, and feedback. Where relevant, this may include dates and times of visits or call logs.
Security and site access information, such as information captured through security systems on our premises that may include video images taken by CCTV for the safety and security of customers, staff, and property.
Any other information you provide to us voluntarily in the course of using our services, such as information provided in correspondence or during site visits.
How We Collect Your Data
We typically collect data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, or visit our premises. We may also collect data when you interact with us through our website or other communication channels. In some cases, we may receive information about you from third parties where they have a lawful basis to share that information, such as payment processors or service providers that you choose to use in connection with our services.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation. Depending on the context, we rely on the following bases:
Contract: We process personal data to take steps at your request before entering into a contract, and to perform our contract with you. This includes providing storage space, managing your account, arranging access, and handling payments.
Legal obligation: We process data where necessary to comply with legal and regulatory requirements, such as tax, accounting, and health and safety obligations, and to respond to requests from public authorities where required by law.
Legitimate interests: We process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and interests. This may include maintaining site security, protecting our property, preventing and detecting fraud, managing customer relationships, improving our services, and defending legal claims.
Consent: In limited circumstances, we may rely on your consent, for example for certain forms of optional marketing or communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up and administering your account, preparing and managing storage agreements, and facilitating access to storage units.
To process payments, issue invoices, manage billing queries, and maintain accurate financial records.
To communicate with you regarding your enquiries, bookings, contract status, site access, service updates, and any changes to our terms or policies.
To maintain security and safety at our premises, including the use of CCTV and other security measures for crime prevention, incident investigation, and the protection of customers, staff, and property.
To handle complaints, disputes, or legal claims, and to enforce our contractual rights.
To carry out internal administration, reporting, data analysis, and service improvement, where this is compatible with your rights and reasonable expectations.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The exact retention period will vary depending on the type of data and the reason we are holding it.
Contract and account records are generally retained for a period after your contract ends to allow for queries, disputes, and legal or regulatory obligations. Financial and transaction records are typically kept for a period required by tax and accounting laws. CCTV images, where used, are usually retained for a limited period unless a longer retention is required in connection with a specific incident, investigation, or legal claim.
When data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
Data Processors and Sharing of Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include providers of payment processing services, IT and cloud hosting services, security and CCTV maintenance services, and professional advisers such as accountants or legal advisers where necessary.
All processors are required to process your personal data only on our instructions, to keep it secure, and to comply with data protection law. We do not sell your personal data to third parties.
We may also share personal data with other parties where required by law, for example with law enforcement, regulatory authorities, or government bodies when we are legally obliged to do so, or where it is necessary to protect our rights, property, or the safety of our customers and staff.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is stored on servers located abroad, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of approved standard contractual clauses or other mechanisms permitted under data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you. These include:
The right of access: You have the right to request confirmation that we process your personal data and to request a copy of that data, together with information about how we use it.
The right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
The right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
The right to restrict processing: You may ask us to restrict the processing of your data in certain situations, such as where you contest the accuracy of the data or object to our use of it.
The right to data portability: In some circumstances, you may request that we provide your personal data in a structured, commonly used, and machine-readable format and that we transmit it to another controller where this is technically feasible.
The right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests and rights or where processing is required for legal claims.
Where we rely on consent as a lawful basis, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we process your personal data, you can contact us using our usual contact channels. We may need to confirm your identity before responding to your request to protect your privacy and security.
You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to contact us first so that we can address your concerns directly where possible.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we handle personal data. Any updates will apply from the date they are published. We recommend that you review this Privacy Policy periodically so that you remain informed about how we protect your information.
