Storage Addington Privacy Policy
This Privacy Policy explains how Storage Addington collects, uses, stores, and protects your personal data when you use our storage services. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Addington customers in our service area, as well as prospective customers and website visitors who interact with us.
Who we are
Storage Addington is a provider of storage units and related services. When we refer to we, us or our in this Privacy Policy, we are referring to Storage Addington as the organisation responsible for deciding how and why your personal data is used, in its role as data controller.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us. The information we may collect includes:
Identity and contact details such as full name, postal address, residential address, billing address, and other similar contact details you provide to manage your account or booking.
Account and contract information such as storage unit number, contract start and end dates, rental terms, payment status, notices you give us, and communications relating to your storage agreement.
Payment and billing information such as payment method details, partial card details depending on how you pay, transaction history, invoices, and details needed for refunds or adjustments. We do not store full card details where the payment is processed via a secure payment provider.
Verification and security information such as proof of identity, proof of address, copies of identification documents where required by law or for fraud prevention, and security information relevant to access to our premises.
Communication data such as enquiries, complaints, feedback, and any correspondence you have with us in person, by post, or online.
Technical and usage data such as information about how you use our website, anonymised or aggregated usage statistics, and log data collected through our online services. This may include IP address, browser type, and device identifiers, where permitted by law.
CCTV and site access information such as video footage captured by our CCTV systems on and around our premises and logs of access to the site or storage units, used for security and safety purposes.
How we collect your personal data
We collect personal data from you directly when you enquire about our services, request a quote, make a booking, enter into a storage agreement, or contact us for support. We may also collect data when you visit our premises, use our website, or participate in surveys or promotions.
We may receive personal data from third parties where this is necessary to provide our services or comply with law, for example from payment service providers, credit reference agencies where applicable, or law enforcement bodies.
Purposes and lawful bases for processing
We process your personal data only where we have a lawful basis to do so. The main purposes and lawful bases are:
To provide storage services and manage your contract. We use your identity, contact, payment, and account data to set up your account, provide you with access to storage units, issue invoices, take payments, manage renewals, and handle queries relating to your agreement. The lawful basis is performance of a contract and taking steps at your request before entering into a contract.
To comply with legal obligations. We may process your data to comply with financial, tax, accounting, and other regulatory obligations, and to respond to requests from public or law enforcement authorities. The lawful basis is compliance with legal obligations.
To maintain security and prevent fraud. We use CCTV, access logs, verification data, and certain account information to protect our customers, premises, and staff, and to prevent, detect, and investigate fraud or other unlawful activity. The lawful bases are our legitimate interests in ensuring the security of our services and, where applicable, compliance with legal obligations.
To manage our relationship with you. We process communication data to respond to your enquiries, handle complaints, notify you about changes to our terms or this Privacy Policy, and ask you for feedback on our services. The lawful bases are performance of a contract and our legitimate interests in maintaining good customer relations and improving our services.
To improve and develop our services. We may use aggregated or anonymised usage data to understand how our website and services are used, and to improve usability, service quality, and customer experience. Where data can identify you, the lawful basis is our legitimate interests in running and developing our business.
Marketing communications. We may use your contact details to send you information about similar services you have previously used or asked about. The lawful basis is our legitimate interests in promoting our services. Where required by law, we will obtain your consent before sending marketing communications, and you can opt out at any time.
Data retention
We keep your personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by law. In deciding how long to retain data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and our legal, regulatory, and operational needs.
Customer account and contract information is generally retained for the duration of your storage agreement and for a period afterwards, typically up to six years to comply with tax and accounting requirements and to handle any legal claims.
Payment and billing records are retained for the periods required under financial and tax legislation.
CCTV footage is stored for a limited period, usually only long enough to investigate incidents or comply with law enforcement requests, after which it is securely deleted or overwritten.
Where data is no longer required, we will securely delete or anonymise it.
Data processors and sharing of personal data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may provide services such as payment processing, secure data storage, customer relationship management, email or communication services, IT support, website hosting, and security and access control systems.
We require all processors to act only on our documented instructions, to keep your data secure, and not to use it for their own purposes. We ensure appropriate contractual and technical safeguards are in place in accordance with data protection law.
We may also share your personal data with other organisations acting as independent controllers where required by law or where necessary to protect our rights or the rights of others. This may include law enforcement agencies, regulatory bodies, professional advisers such as lawyers or accountants, insurers, or courts and tribunals.
We do not sell your personal data. If we are involved in a business reorganisation, merger, or transfer of all or part of our business, your personal data may be transferred as part of that transaction, in which case we will ensure that your rights are protected.
International transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that an appropriate safeguard is in place, such as using countries with an adequacy decision, putting in place standard contractual clauses, or applying other legally recognised mechanisms. You can contact us for more information about such safeguards.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions.
Right of access. You can request confirmation of whether we hold personal data about you and request a copy of your personal data.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing. You can request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to object. You can object to our processing of your personal data where we are relying on legitimate interests as our lawful basis, including profiling, or where we process your data for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests or for the establishment, exercise, or defence of legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request to receive your personal data in a structured, commonly used, machine readable format and have it transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so we can address your concerns directly.
Security of your personal data
We implement appropriate technical and organisational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, staff training, and regular review of our procedures. While we take reasonable steps to protect your personal data, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, operational needs, or legal requirements. Any significant changes will be communicated where appropriate. The latest version will always be available from us and will apply to all Storage Addington customers in our area from the date it is published.
