Storage Chingford Privacy Policy
This Privacy Policy explains how Storage Chingford collects, uses, stores and protects personal data relating to our customers and prospective customers in the Chingford area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, including enquiring about storage, entering into a storage agreement or visiting our premises, you acknowledge that your personal data will be handled in accordance with this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all individual customers and prospective customers of Storage Chingford in the Chingford area. It covers personal data collected through enquiries, bookings, contracts, payments, on-site visits, and any other interaction you may have with Storage Chingford in the course of using or considering our storage services.
Data Controller
Storage Chingford is the data controller for the personal data described in this Privacy Policy. As controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. The categories of personal data we may collect include the following.
Identification details, such as your full name, date of birth and identification document details where required for security or verification purposes.
Contact details, such as your postal address, billing address, and, where you provide them, your contact channels such as electronic contact details.
Contract and account information, such as unit number, contract start and end dates, access permissions, communications with you about your storage agreement and any changes to your account.
Payment and billing information, such as records of payments, payment method used and related billing information. We do not store full card details where payments are processed using secure payment providers.
Usage and security information, such as access logs to the facility, entry and exit times, and records from on-site security systems which may include video recordings where in operation.
Communication data, such as records of enquiries, complaints, requests for information and any correspondence between you and Storage Chingford.
How We Collect Your Data
We collect personal data in a number of ways.
Directly from you, when you make an enquiry, complete a booking, sign a storage agreement, make a payment, communicate with us, or visit our premises.
Automatically, for example through access control systems, security measures at our site and other technical logs relating to the use of our facilities.
From third parties, where lawful and appropriate, such as payment service providers or debt collection agencies engaged to support payment processing or recover outstanding amounts.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the specific processing activity, we rely on one or more of the following lawful bases.
Performance of a contract, where processing is necessary for us to provide storage services, manage your account, take steps at your request prior to entering into an agreement and administer your contract.
Compliance with legal obligations, where we must process data to comply with legal and regulatory requirements, such as tax, accounting and health and safety obligations, or to respond to lawful requests from authorities.
Legitimate interests, where the processing is necessary for our legitimate business interests or those of a third party, and these interests are not overridden by your rights and freedoms. This includes maintaining site security, preventing and detecting crime or fraud, managing our business operations and improving our services.
Consent, where we rely on your explicit agreement for specific processing not covered by the grounds above. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes.
To manage enquiries, bookings and storage contracts, including providing quotes, confirming reservations, administering your account and handling renewals or terminations.
To process payments and manage billing, including recording payments, issuing invoices or statements and addressing payment queries or disputes.
To maintain safety and security at our premises, including managing access rights, monitoring access logs and operating security systems where installed.
To provide customer support, respond to questions, handle complaints, and communicate important information relating to your contract, our services or changes to this Privacy Policy.
To manage our business operations, including record keeping, audit, reporting, and the improvement of our services.
To comply with legal and regulatory requirements and cooperate with law enforcement or regulatory bodies where required by law.
Data Sharing and Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged under written contracts and may only process your data in accordance with our instructions and for the purposes described in this Privacy Policy.
Typical categories of processors include payment service providers that process payments securely, professional advisers such as accountants or legal advisers who support our business, providers of secure storage and management systems for customer data, and security service providers that support the operation of on-site security systems.
We may also share personal data where we are legally required to do so, for example with law enforcement, regulatory bodies or government authorities, or where it is necessary to protect our rights, property or safety or that of our customers or others.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include using standard contractual clauses or relying on other appropriate safeguards in line with data protection law.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet our legal, accounting and regulatory obligations.
Contract and account data is generally kept for the duration of your agreement and for a defined period afterwards to deal with any queries, disputes or legal claims and to meet our statutory retention obligations.
Payment and billing records are retained for the periods required by tax and accounting regulations.
Security and access records are kept for a limited period that reflects our legitimate interest in ensuring site security and investigating incidents, after which they are securely deleted or anonymised.
When personal data is no longer required for any lawful purpose, we will securely delete it or anonymise it so that it can no longer identify you.
Your Rights Under Data Protection Law
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Chingford customers and prospective customers in the Chingford area, subject to certain conditions and exemptions.
You have the right to access your personal data and to receive information about how we process it.
You have the right to request correction of inaccurate or incomplete personal data that we hold about you.
You have the right to request the deletion of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis for processing.
You have the right to request that we restrict the processing of your personal data in certain situations, such as when the accuracy of the data is contested or where you have objected to our legitimate interest processing.
You have the right to object to processing of your personal data where we rely on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims.
You have the right to data portability in certain circumstances, allowing you to receive personal data you have provided to us in a structured, commonly used and machine readable format and to transmit that data to another controller where technically feasible.
Where we rely on consent as our lawful basis for processing, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Keeping Your Data Secure
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, security procedures at our facility and practices designed to ensure that personal data is processed only by individuals who need to do so and are subject to confidentiality obligations.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation or how we operate our business. When we make changes, we will update the date of the revised policy and make the updated version available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
