Storage Farringdon Privacy Policy
This Privacy Policy explains how Storage Farringdon collects, uses, stores, and protects personal data in connection with our storage services. It applies to all Storage Farringdon customers and prospective customers in our service area, as well as visitors who interact with us online or offline.
We are committed to handling your personal data in accordance with the UK General Data Protection Regulation and other applicable data protection laws.
Data Controller
Storage Farringdon is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data in relation to our storage services and related activities.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. The types of personal data we may collect include:
Identification and contact details such as name, postal address, billing address, date of birth, and identification numbers included on official documents, for example passport or driving licence details where required for verification.
Contact information such as email address, correspondence address, and any other contact details you provide so that we can communicate with you about enquiries, bookings, contracts, and support.
Contract and account information such as storage unit number, contract start and end dates, services selected, payment terms, pricing, correspondence relating to your contract, and records of communications with our customer service team.
Payment and billing information such as billing history, payment status, and anonymised or tokenised information provided by payment processors. We do not store full payment card details on our own systems; these are handled securely by our payment processing partners.
Technical and usage data such as information about how you use our website or online tools, including access time, pages visited, device type, and basic diagnostic information, collected through server logs or similar technologies.
Security and access data such as access logs to the storage facility, entry and exit times, and where in use, vehicle registration numbers recorded for site security. We may also operate CCTV at our premises for security and safety purposes.
Marketing preferences such as whether you have consented to receive marketing communications and your stated preferences regarding how we contact you.
How We Collect Personal Data
We collect personal data in several ways, including when you contact us to make an enquiry, request a quote, visit our premises, complete a booking form, sign a storage agreement, use our website, or communicate with our team by post or other channels that you choose to use.
We may also receive personal data from third parties, such as identity verification services, payment providers, or business partners that introduce you to our services, where this is necessary to perform a contract or comply with the law.
Lawful Bases For Processing
We only process your personal data where we have a lawful basis to do so. Depending on the circumstances, we rely on the following lawful bases:
Performance of a contract to process data that is necessary to enter into or fulfil our storage agreement with you, including setting up your account, managing your booking, processing payments, and providing customer support.
Compliance with legal obligations to process data required to comply with laws, regulations, and regulatory requirements, including tax and accounting rules, anti money laundering legislation, and health and safety obligations.
Legitimate interests to process data necessary for our legitimate business interests, provided these are not overridden by your rights and interests. These interests include managing our operations, securing our premises, preventing fraud, improving our services, and maintaining accurate records.
Consent where you have given clear consent for us to process your personal data for a specific purpose, such as receiving certain marketing communications. You may withdraw your consent at any time, which will not affect the lawfulness of processing based on consent before it was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including handling enquiries, preparing quotes, setting up and administering contracts, operating accounts, issuing invoices, processing payments, and providing ongoing customer support.
To manage site access and security, including verifying identity where appropriate, controlling access to units, maintaining access logs, and operating CCTV at our premises in order to protect customers, staff, and property.
To communicate with you about your contract, including service updates, changes to terms, payment reminders, and information relevant to the use of your storage unit.
To manage our business operations, including internal record keeping, accounting, auditing, and reporting, as well as service improvement, staff training, and quality control.
To send you marketing communications about our services where permitted by law and in line with your preferences. You can opt out of marketing at any time by following the instructions in our communications or by contacting us using your preferred channel.
To comply with legal and regulatory obligations and to establish, exercise, or defend legal claims, including cooperating with law enforcement or regulatory authorities where required.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
In general, we keep records relating to your contract for a period after the end of the contract to address potential queries or disputes and to comply with statutory retention periods. Payment and financial records are typically kept for the period required by tax and company law.
Security and access logs, including CCTV footage and entry records, are kept for shorter periods, unless a longer retention period is required in connection with an investigation, dispute, or legal proceedings.
Where we rely on your consent for marketing, we will retain your contact details for this purpose until you withdraw your consent, opt out, or we otherwise determine that the data is no longer accurate or necessary.
When personal data is no longer required, we will securely erase or anonymise it in accordance with our data retention and deletion procedures.
Data Processors and Sharing
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors provide services such as payment processing, identity verification, secure data storage, customer relationship management, accounting support, IT and security services, and facility management systems.
These processors are required to process your personal data only in accordance with our instructions, to keep it secure, and to comply with applicable data protection laws and contractual obligations.
We may also share personal data with professional advisers, including lawyers, auditors, and insurers, where necessary to obtain advice, manage risks, or handle disputes.
In certain circumstances, we may need to disclose personal data to public authorities, regulators, law enforcement agencies, or courts where we are legally required or permitted to do so.
We do not sell your personal data to third parties.
International Transfers
Where our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These may include standard contractual clauses or other legally recognised mechanisms to ensure an adequate level of data protection.
Your Data Protection Rights
Under data protection law, you have various rights in relation to your personal data. Subject to certain conditions and exceptions, you may have the right to:
Access your personal data and receive a copy of the information we hold about you.
Rectify inaccurate or incomplete personal data that we hold about you.
Erase your personal data where there is no longer a lawful basis for us to retain or use it.
Restrict the processing of your personal data in certain circumstances, for example while we consider a request to rectify data.
Object to processing that is based on our legitimate interests, including profiling based on those interests, and to processing for direct marketing purposes.
Data portability, by requesting that certain personal data you have provided to us is transferred to you or another controller in a structured, commonly used, and machine readable format where the processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where we rely on your consent for processing. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures are designed to ensure a level of security appropriate to the risks associated with the data we process.
Access to personal data is limited to staff and service providers who need it for legitimate business purposes and who are subject to confidentiality obligations.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any significant changes will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
