Storage Newington Privacy Policy
This Privacy Policy explains how Storage Newington collects, uses, stores, and protects personal data relating to customers and prospective customers in our service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Newington customers and prospective customers in our operating area, including individuals and business contacts who enquire about, use, or have previously used our storage services. It also applies to visitors who contact us to request information, quotations, or support in relation to our services.
Who we are and our role under GDPR
Storage Newington is the data controller for the personal data described in this Privacy Policy. As data controller, we decide how and why your personal data is processed and are responsible for ensuring that any processing complies with applicable data protection laws.
Types of personal data we collect
We only collect personal data that is relevant and necessary for providing our services and managing our relationship with you. The categories of personal data we may collect include:
Contact details such as your name, postal address, billing address, and any other address you provide for correspondence or invoicing.
Identification and verification data such as date of birth, identification document details where required for security, and signatures on contracts or forms.
Communication data such as information you provide when you contact us, including enquiries, complaints, feedback, and any records of our communications with you.
Contract and account information such as storage unit details, agreement dates, pricing information, payment status, and information relating to services you have purchased or requested.
Payment information such as payment method, bank or card details where necessary for processing payments, and records of transactions. Card details may be processed by secure payment service providers acting on our behalf.
Technical and usage data such as information relating to how you use our services, facility access logs where applicable, and security or incident reports involving your storage unit.
Marketing preferences such as your choices regarding receiving marketing information and your communication preferences.
How we collect your personal data
We collect personal data directly from you when you contact us to make an enquiry, request a quotation, sign a storage agreement, make a payment, or otherwise interact with us. We may also collect data when you provide feedback or respond to surveys.
In some circumstances, we may receive limited personal data from third parties, such as business partners, referencing agencies, or payment processors, but only where it is lawful and necessary for us to provide our services or comply with legal obligations.
Lawful bases for processing your data
Under GDPR, we must have a lawful basis for each type of processing we carry out. Depending on the context, we may rely on the following lawful bases:
Contract. We process your personal data when it is necessary to enter into or perform a contract with you, such as when you rent storage space, manage your account, process payments, or respond to your service-related requests.
Legal obligation. We process data where necessary to comply with legal and regulatory requirements, including tax, accounting, record keeping, security, and health and safety duties.
Legitimate interests. We may process data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This can include maintaining the security of our facilities, improving our services, managing business operations, and pursuing or defending legal claims.
Consent. In limited circumstances, we may seek your consent, for example, for certain types of direct marketing. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing that took place before withdrawal.
How we use your personal data
We may use your personal data for the following purposes:
To provide, manage, and administer storage services, including setting up your account, issuing contracts, and communicating essential service information.
To process payments, manage invoices, handle refunds where applicable, and maintain accurate financial records.
To communicate with you regarding enquiries, bookings, support requests, and contract renewals or changes.
To manage the safety and security of our facilities, including access control, incident investigation, and prevention of fraud or misuse.
To manage our business operations, including reporting, auditing, training, and service quality monitoring.
To comply with legal and regulatory obligations, respond to requests from public authorities, and cooperate with law enforcement where required.
To send you information about our services that may be of interest, where permitted by law and respecting your marketing preferences.
Data retention and storage
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting requirements. The specific retention period for particular categories of data may vary depending on the nature of the data and the purposes of processing.
In general, we retain contract and account information for the duration of your agreement with us and for a reasonable period afterwards, to handle any questions, disputes, or legal claims. Financial and transaction records may be kept for longer periods where required by tax or accounting regulations.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
Data processors and sharing of personal data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to use your data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to implement appropriate security measures and to protect your personal data.
Examples of processors and recipients include payment service providers that process card and bank transactions, providers of IT and cloud storage services that host our systems and data, professional advisers such as auditors, accountants, or legal advisers where necessary, and security or facility management service providers who assist with the operation and safety of our sites.
We may also share personal data with public authorities, regulators, or law enforcement where required by law or necessary to protect our rights, property, or the safety of our customers and staff.
We do not sell your personal data to third parties.
International data transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Security of your personal data
We take the security of your data seriously and implement technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include access controls, secure storage, and staff training on data protection obligations.
Your data protection rights
Under GDPR and related legislation, you have several rights in relation to your personal data, subject to certain legal conditions and exceptions. These include:
Right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of that data.
Right to rectification. You can ask us to correct or update any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal requirement to retain it.
Right to restriction of processing. You may ask us to restrict the processing of your data in specific situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format, and that we transmit it to another controller where technically feasible.
Right to object. You have the right to object to processing that is based on our legitimate interests or for direct marketing purposes. We will stop processing your data for direct marketing when you object. For other legitimate interest processing, we will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before consent is withdrawn.
How to exercise your rights or raise concerns
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle personal data, you can contact us using the contact details provided on our website or in your service documents.
You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
