Storage Eltham Privacy Policy
This Privacy Policy explains how Storage Eltham collects, uses, stores and protects personal data relating to our customers and prospective customers in the Storage Eltham service area. It also sets out your rights under the United Kingdom General Data Protection Regulation and the Data Protection Act. This Privacy Policy applies to all Storage Eltham customers, including individuals and businesses, as well as anyone who contacts us about our storage services.
Who we are and scope of this policy
Storage Eltham is a provider of storage and related services to customers in the local Eltham area and surrounding locations. When we refer to we, us or our in this Privacy Policy, we are referring to Storage Eltham as the controller of your personal data for the activities described in this document.
This Privacy Policy applies whenever you interact with us in connection with our services, including when you make enquiries, request a quote, sign a storage agreement, visit our facilities, or communicate with us in any other way.
Types of personal data we collect
The personal data we collect depends on how you interact with us and the services you use. The categories of personal data we may collect and process include:
Identity and contact details such as name, title, postal address, billing address, and any other contact details you choose to provide.
Account and contract information such as customer reference numbers, details of your storage unit or service plan, contract start and end dates, payment status, and communications relating to your account.
Payment and billing information such as payment method details processed via our payment processors, transaction records, invoices and information required for accounting and tax purposes.
Usage and service information such as dates and times of access to our facilities, details of services requested or used, and any preferences you communicate to us in relation to your storage arrangements.
Communications and correspondence such as records of enquiries, complaints, feedback, and any other interactions with our staff by post, in person, or through other communication channels.
Security and facility information such as visit logs, key or access code allocations, and any incident reports necessary for security and safety purposes.
How we collect personal data
We collect personal data from you directly when you contact us, request a quote, enter into a storage agreement, or communicate with us about your account or our services.
We may also collect personal data from third parties where this is necessary and lawful, for example from payment service providers in relation to payment confirmations or chargebacks, or from professional advisers assisting us with legal, financial or regulatory matters.
Lawful bases for processing your personal data
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we may rely on the following lawful bases:
Contract. We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up your account, providing storage services, managing payments, responding to service requests and administering your contract.
Legal obligation. We may process personal data where necessary to comply with our legal obligations, including tax and accounting requirements, fraud prevention, and obligations relating to health and safety or regulatory reporting.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing our relationship with you, maintaining and improving our services, ensuring security of our facilities, handling queries and complaints, and protecting our business and customers.
Consent. In limited circumstances we may rely on your consent, for example for certain types of optional communications. Where we rely on consent, you may withdraw it at any time, and we will explain how you can do this at the point where consent is requested.
Purposes for which we use personal data
We use the personal data we collect for the following purposes:
To provide and manage storage and related services, including setting up your account, administering contracts, managing unit access and providing customer support.
To process payments and manage billing, including issuing invoices, processing payments and dealing with queries or disputes about charges.
To communicate with you about your account, including service updates, contract renewals, changes to terms and important notices relating to your use of our facilities.
To manage security and safety at our facilities, including maintaining access records, investigating incidents and taking steps to protect our customers, staff and property.
To comply with legal and regulatory obligations, including responding to lawful requests from authorities and maintaining required records.
To improve our services and operations, including monitoring use of our services, addressing customer feedback and developing new or improved offerings.
Data sharing and use of processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so. These third parties act either as processors on our behalf or as separate controllers.
Processors are third parties who process personal data on our instructions and on our behalf. We use processors for services such as payment processing, accounting and bookkeeping support, secure data storage, document management, and certain aspects of customer administration.
Where we use processors, we ensure that appropriate contracts are in place requiring them to process personal data only in accordance with our instructions, to keep it secure and confidential, and to comply with applicable data protection laws.
We may also share personal data with professional advisers, such as lawyers or accountants, where necessary to obtain advice or to protect our legal rights. In some cases we may be required to disclose data to public authorities or law enforcement agencies, where required by law.
Data retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements.
In general, we keep customer account and contract information for the duration of your relationship with us and for a period after your contract ends to deal with any queries, disputes or legal claims. Financial and transaction records may be retained for periods required by tax and accounting legislation.
Where personal data is no longer needed for the purposes for which it was collected, and we are not required to retain it by law, we will take reasonable steps to delete it or anonymise it so that it can no longer be used to identify you.
International transfers
Where we use service providers or systems that are located outside the United Kingdom, your personal data may be transferred to countries that have different data protection laws. Where this occurs, we will ensure that appropriate safeguards are in place to protect your personal data in line with applicable legal requirements, such as using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
How we protect your personal data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, secure storage arrangements, staff training, and regular review of our data handling practices.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of that data, together with certain information about how we use it.
Right to rectification. You have the right to ask us to correct or complete personal data that you believe is inaccurate or incomplete.
Right to erasure. In certain circumstances, you may ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we are verifying its accuracy or considering an objection.
Right to object. You may object to our processing of your personal data where we are relying on legitimate interests as our lawful basis, and we will consider your objection in light of your particular circumstances.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it is transmitted to another controller.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. When we make material changes, we will take reasonable steps to bring the updated policy to your attention. The most current version of this Privacy Policy will always apply to the personal data we hold about you.
