Storage Upton Park Privacy Policy
This Privacy Policy explains how Storage Upton Park collects, uses, stores and shares personal information about customers and prospective customers. It is intended to help you understand what data we hold, the lawful bases we rely on under the UK General Data Protection Regulation and how you can exercise your privacy rights.
This Privacy Policy applies to all Storage Upton Park customers, enquirers and users of our storage services in the local area, including those who contact us, visit our premises or otherwise interact with us in connection with our storage facilities.
1. Data Controller
Storage Upton Park is the organisation responsible for deciding why and how your personal data is processed. For the purposes of this Privacy Policy, Storage Upton Park is the data controller in respect of the personal data described here.
2. Personal Data We Collect
We collect and process different categories of personal information depending on how you use our services.
The categories of data we may collect include:
Identification and contact details: name, postal address, billing address, contact address, date of birth, and identification documents such as passport or driving licence details where required for verification.
Contact and communication data: email address, communication preferences, records of correspondence and enquiries, and any information you provide when you contact us or complete forms.
Contract and account information: storage unit number, rental start and end dates, payment terms, transaction history, and related contract documentation.
Payment and billing information: limited payment card details processed via secure payment providers, bank transfer references and payment status records. We do not store full card details when payments are processed through third party payment processors.
Security and access data: vehicle registration numbers where recorded for site access, access control card or code usage logs, CCTV footage recorded on and around our premises, and incident or accident reports.
Technical and usage data: information about how you access our services, such as time and date of visits to our premises, and basic device or browser information when you visit our online pages, where applicable.
You may choose not to provide certain personal data. However, if you fail to provide data that we need to enter into or perform a contract with you, we may not be able to provide you with storage services.
3. How We Collect Your Data
We collect personal data in a number of ways:
Directly from you when you make an enquiry, request a quote, sign a storage agreement, make a payment, visit our premises, or communicate with us by any means.
Automatically through security and monitoring systems, including CCTV around our facilities, and access control systems that record entry and exit activity.
From third parties such as identity verification providers, payment processors, banks or financial institutions involved in processing your payments, and where necessary from law enforcement or regulatory bodies.
4. Lawful Bases for Processing
We process your personal data only when we have a lawful basis to do so under the UK General Data Protection Regulation. Depending on the context, we rely on one or more of the following lawful bases:
Contract: to take steps at your request before entering into a storage agreement, to enter into a contract with you, and to perform our obligations under that contract. This includes setting up your account, managing your bookings, and providing customer service.
Legal obligation: to comply with legal and regulatory requirements, such as verifying identity where required, maintaining financial records, responding to lawful requests from authorities and ensuring health and safety at our premises.
Legitimate interests: to pursue our legitimate business interests, provided your interests and fundamental rights do not override those interests. Our legitimate interests include maintaining security of our facilities, preventing and detecting crime or fraud, monitoring the use of our premises, managing and improving our services, handling customer queries, and defending legal claims.
Consent: where we rely on your consent for specific processing activities, such as sending certain types of marketing communications where these are not covered by legitimate interests. You can withdraw your consent at any time, although this will not affect processing that has already taken place.
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide storage services, including setting up and administering your account, allocating storage units, managing access, and processing payments.
To communicate with you, respond to your enquiries, send service-related messages, and provide important updates about your contract or our facilities.
To manage our relationship with you, including handling feedback, resolving complaints or disputes, and maintaining accurate records.
To secure our premises and property, including using CCTV and access control systems to protect customers, staff and assets, and to investigate security incidents.
To comply with legal and regulatory obligations, such as record-keeping, tax, accounting, and responding to requests from authorities.
To improve and develop our services, by analysing usage patterns and customer feedback in order to maintain and enhance our facilities and operations.
To protect our business, for example to prevent fraud, pursue or defend legal claims and manage risk.
6. Data Retention
We only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
The specific retention period will depend on the category of data and our legal obligations. In general:
Contract and account information is retained for the duration of your contract and for a period thereafter to comply with legal obligations and to resolve queries or disputes.
Financial and transactional records are kept for the period required by tax and accounting laws.
CCTV recordings and access logs are retained for a limited period necessary for security and investigation purposes, unless a longer retention is required in connection with a specific incident, claim or legal requirement.
Marketing and communication preferences are kept until you opt out or request deletion, or until they are no longer needed for the purpose originally collected.
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a safe manner.
7. Data Processors and Sharing
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to perform services that support our operations and must only process your data in accordance with our instructions and applicable data protection laws.
Examples of processors include:
Payment processing providers and banks that handle payments and refunds.
IT and system support providers that host or maintain our customer management and security systems.
Security service providers responsible for maintaining CCTV, access control and alarm systems.
Professional advisers, such as accountants, auditors and legal advisers, where this is necessary for business administration and legal compliance.
We may also share personal data with other third parties where required by law, to protect our rights or the rights of others, in connection with legal proceedings, or in the event of a corporate transaction involving our business.
We do not sell your personal data to third parties.
8. International Data Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data may be stored or accessed from other countries, we take steps to ensure that appropriate safeguards are in place. This may include using contracts incorporating standard data protection clauses approved by relevant authorities, or ensuring that the destination country has been recognised as providing an adequate level of data protection.
9. Security of Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security controls at our premises, access controls to systems, staff training and procedures to handle and respond to potential data incidents.
While we take reasonable steps to safeguard your data, no system can be completely secure. You also have a role in protecting your information, such as keeping access codes or passwords confidential.
10. Your Rights Under GDPR
Under data protection law, including the UK General Data Protection Regulation, you have a number of rights in relation to your personal data. These rights include:
Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: in certain circumstances, you can request that we delete your personal data. This right is not absolute and may be subject to our need to retain data for legal or contractual purposes.
Right to restriction of processing: you can ask us to restrict the processing of your personal data in specific cases, such as when you contest its accuracy or object to processing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you can request a copy of your data in a structured, commonly used and machine-readable format and ask us to transfer it to another controller where technically feasible.
Right to object: you can object to processing based on our legitimate interests, including profiling, and to direct marketing at any time. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests or where processing is required for legal claims.
Rights in relation to automated decision-making: you have rights in respect of decisions based solely on automated processing that produce legal or similarly significant effects, although we do not typically carry out this type of processing in connection with our storage services.
To exercise any of these rights, you can contact us using the details provided on our main customer documentation or by using your usual contact channel with Storage Upton Park. We may need to verify your identity before responding to your request.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
By continuing to use Storage Upton Park services after any updates take effect, you acknowledge that you have read and understood the updated Privacy Policy.
