Storage Grange Park Privacy Policy
This Privacy Policy explains how Storage Grange Park collects, uses, stores, and protects personal data relating to individuals who use our services or otherwise interact with us. It applies to all Storage Grange Park customers in the area, as well as prospective customers, past customers, and any individuals whose personal data we process in connection with our storage services.
We are committed to handling your personal data lawfully, fairly, and transparently, in accordance with applicable data protection laws including the UK General Data Protection Regulation and the Data Protection Act.
1. Data Controller
Storage Grange Park is the data controller in respect of the personal data described in this Privacy Policy. This means that we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with data protection law.
2. Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identity and contact details such as name, postal address, billing address, email address and any other contact details you provide to us.
Account and contract information such as customer account numbers, contract details, storage unit number, start and end dates of your agreement, payment terms, and records of your communications with us.
Payment and transaction information such as payment method, payment status, invoices, and records of transactions made in connection with your storage services. We do not store full payment card details where we use secure payment processors.
Verification and security information such as copies of identification documents when required for verification, vehicle registration details, access codes, and logs of entry and exit to the storage facility if applicable.
Usage and communication data such as your preferences for communication, feedback, complaints, and records of enquiries made in person, by post, or through other communication channels you choose to use.
Technical information such as basic device and usage information where you access any of our online services, including IP address, browser type and settings, and information about how you use our website where relevant.
3. How We Collect Your Personal Data
We collect personal data from you directly when you:
Enquire about our storage services.
Enter into a storage agreement with us.
Communicate with us in person, by post, or through other communication channels.
Visit our premises and use access systems or security features that record limited personal data.
We may also receive personal data about you from third parties, such as payment processors and professional advisers, where this is necessary to manage your contract or comply with legal obligations.
4. Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so. Depending on the context, we may rely on the following lawful bases:
Performance of a contract. We process personal data to set up and manage your storage agreement, take payments, provide access to your storage unit, respond to queries, and provide customer service.
Compliance with legal obligations. We process personal data where this is necessary to comply with legal and regulatory requirements, such as record-keeping, tax obligations, and responding to lawful requests from authorities.
Legitimate interests. We process personal data for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. These legitimate interests may include maintaining security at our premises, preventing fraud or misuse of our services, managing and improving our operations, and handling complaints or disputes.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of optional communication. Where we rely on consent, you have the right to withdraw it at any time.
5. How We Use Your Personal Data
We may use the personal data we collect for the following purposes:
To provide storage services, including setting up and managing your account, operating your storage agreement, handling access to your unit, and arranging any additional services you request.
To process payments, issue invoices, and maintain financial and transaction records.
To communicate with you regarding your account, renewals, price changes, operational notices, and service updates.
To ensure the safety and security of our premises, staff, and customers, including managing access controls and monitoring for unauthorised use or suspected criminal activity, where such measures are in place.
To manage our business operations, including internal administration, auditing, compliance checks, quality assurance, and staff training.
To handle complaints, enquiries, and disputes, and to enforce any terms and conditions that apply between us.
To comply with applicable laws, regulations, and lawful requests from public authorities.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations.
In general, we will retain your personal data:
For the duration of your storage agreement and for a period afterwards where required for legal, accounting, or reporting purposes.
For any period necessary to resolve disputes, enforce our agreements, or defend legal claims.
For records that must be kept by law, for the period required by that law.
When your personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
7. Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process personal data in accordance with our instructions and for the purposes described in this Privacy Policy.
Types of processors and recipients may include:
Payment processing and billing service providers.
IT, hosting, and cloud service providers that support our systems and data storage.
Professional advisers, such as accountants or legal advisers, where necessary for our business operations.
Security and access control providers where they support the operation of entry systems or surveillance systems, if used.
Where required by law or where necessary to protect our rights, we may also share personal data with public authorities, regulators, or law enforcement agencies.
We do not sell your personal data to third parties.
8. International Transfers
Where we use service providers that process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses or equivalent measures required by data protection law.
9. Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Grange Park customers in the area whose data we process, subject to certain legal conditions and exceptions. Your rights include:
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that personal data, along with information about how and why we process it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data be corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and we have no other lawful basis for processing.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to its processing and we are considering your request.
Right to object. You have the right to object to our processing of your personal data where the processing is based on our legitimate interests, including for direct marketing purposes, if applicable.
Right to data portability. In certain circumstances, you may have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transfer it to another controller.
Where we rely on your consent as a lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
10. Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures are designed to ensure a level of security appropriate to the risks associated with the processing of your personal data.
While we take reasonable steps to protect your information, no system can be completely secure. You are also responsible for keeping any access credentials relating to your account safe and informing us promptly of any suspected misuse.
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will revise the date of the latest version. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
By continuing to use our services after any changes are made, you acknowledge that you have read and understood the updated Privacy Policy.
