Storage Ponders End Privacy Policy
This Privacy Policy explains how Storage Ponders End collects, uses, stores, and shares personal data relating to individuals who use our storage services or otherwise interact with us. It applies to all Storage Ponders End customers and prospective customers in the local area, as well as visitors to our premises who provide personal data.
We are committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent way, in accordance with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
Data Controller
Storage Ponders End is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed when you use our storage services or contact us.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you become a customer, make an enquiry, or visit our premises in the area:
Identification and contact details such as full name, postal address, billing address, date of birth, and identification document details where required for security and verification purposes.
Contact information such as your preferred correspondence address and any other contact details you choose to provide.
Account and contract information such as storage unit details, contract start and end dates, payment history, agreed services, and correspondence relating to your account.
Payment and billing information such as payment method details and transaction records that enable us to administer your account and process payments or refunds. We do not store full payment card details where a third party payment processor is used.
Communication records such as emails, written correspondence, and notes of conversations when you contact us, request information, or make a complaint.
Security and access information such as CCTV footage from cameras located at our premises, entry and exit records, and access control logs necessary for site security, safety, and the protection of property.
Technical information collected when you interact with our online services, which may include information about your device and basic usage data necessary to operate and secure our online platforms.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so. Depending on the context, we rely on the following lawful bases:
Performance of a contract. We process your personal data where it is necessary to enter into a storage agreement with you and to perform that contract. This includes setting up your account, managing your storage unit, processing payments, communicating with you about your contract, and handling service-related requests.
Compliance with legal obligations. We may process your personal data where necessary for compliance with our legal and regulatory obligations, such as tax and accounting rules, anti fraud measures, and health and safety legislation.
Legitimate interests. We may process your personal data where it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes maintaining site and customer security, preventing and detecting crime, managing and improving our services, and protecting our business and assets.
Consent. In limited circumstances, we may rely on your consent, for example for certain non essential communications or optional services. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To set up and administer your storage account, including creating records, verifying your identity where necessary, and providing you with our storage services.
To manage our contractual relationship with you, including handling enquiries, providing customer service, managing access to your storage unit, and issuing invoices, payment reminders, and relevant notices.
To process payments and maintain financial records, including receipts, charges, and refunds as needed for accounting and auditing.
To ensure the safety and security of our premises, staff, customers, and property, including using CCTV and access control systems, and investigating incidents or suspected unlawful activity.
To comply with legal and regulatory obligations, including the retention of certain records and responding to lawful requests from public authorities.
To manage our business operations, such as monitoring service performance, planning capacity, and improving our processes and customer experience.
To communicate with you about important changes to services, terms, or policies that affect your use of our facilities.
Data Retention
We keep your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, and to meet any legal, regulatory, or reporting requirements.
Customer account and contract data are generally retained for the duration of your contract and for a period after your contract ends, to deal with any queries, disputes, or legal claims. The specific retention period may vary depending on legal requirements and the nature of the data.
Financial records relating to payments and invoices are kept for the time required under applicable tax and accounting laws.
CCTV and access control records are retained for relatively short periods, unless required for the investigation of an incident, dispute, or suspected criminal activity, in which case they may be kept for longer as necessary.
When personal data is no longer required, we will securely delete or anonymise it so that you can no longer be identified.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to provide specific services, such as payment processing, secure data storage, accounting support, or maintenance of our IT and security systems.
When we use processors, we ensure that they are subject to contractual obligations requiring them to process personal data only in accordance with our instructions, to keep it secure, and to comply with data protection law.
We may also share your personal data with third parties where this is required by law, necessary to protect our rights or the rights of others, or in connection with legal proceedings, law enforcement requests, or regulatory investigations.
We do not sell your personal data to third parties.
International Transfers
Where any of our service providers or their systems are located outside the United Kingdom, we take steps to ensure that your personal data receives an adequate level of protection that is consistent with UK data protection law. This may involve using standard contractual clauses approved by relevant authorities or other appropriate safeguards.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Ponders End customers and data subjects in the area, subject to certain conditions and legal exceptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to receive a copy of the personal data we hold about you.
Right to rectification. You have the right to ask us to correct any inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You may ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests where you believe your rights and freedoms outweigh our interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds or need the data for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you have the right to request that we provide your personal data in a structured, commonly used, machine readable format and, where technically feasible, transmit it to another controller.
Right to withdraw consent. Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing that took place before consent was withdrawn.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include restricting access to personal data to those who need it for their role, using secure systems and storage methods, and regularly reviewing our security practices.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
