Storage West Drayton Privacy Policy
This Privacy Policy explains how Storage West Drayton collects, uses, stores and shares personal data relating to individuals who use or enquire about our storage services. It applies to all Storage West Drayton customers and prospective customers in the Storage West Drayton service area, including anyone who contacts us, visits our premises, or accesses our online services.
Who We Are and Scope of This Policy
Storage West Drayton is a self storage provider operating in the West Drayton area. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, Storage West Drayton is the controller of your personal data. This means we decide why and how your personal data is processed when you interact with us as a customer, prospective customer, supplier, visitor to our premises, or user of our services.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you interact with us:
Identification and contact details, such as your name, postal address, billing address, and other contact details you provide to us.
Account and contract information, such as unit numbers, storage agreement details, move in and move out dates, payment history and communications relating to your account.
Payment and billing information, such as limited payment card details or bank account information processed through secure payment providers, and records of invoices and receipts.
Verification and security information, such as copies of identification documents where required for anti fraud or security checks, vehicle registration numbers used to access the premises, and access records.
Technical and usage data, such as information about your interactions with our website or online systems, including log data, device information and basic analytics.
Communications data, such as enquiries, complaints and feedback which you submit in person or by other means, and any records of our correspondence with you.
On site security data, such as CCTV footage collected at our premises for the purposes of crime prevention and safety.
How We Collect Your Personal Data
We obtain personal data directly from you when you request a quote, sign a storage agreement, make a payment, contact us with a query, visit our site or otherwise communicate with us. We may also receive data about you from third parties such as payment processors, credit reference agencies, fraud prevention agencies or online platforms you use to find self storage services. In addition, we may generate personal data about you in the course of providing our storage services and managing your account.
Lawful Bases for Processing Your Data
We only process your personal data where we have a lawful basis to do so under applicable data protection law. Depending on the particular activity, we rely on one or more of the following lawful bases:
Contract. We process your data where it is necessary to enter into or perform a contract with you, for example to set up your storage unit, manage your account, process payments, send essential service communications and respond to your requests.
Legal obligation. We process certain data because we are required to do so by law, for example to maintain proper financial records, comply with tax and accounting requirements, respond to lawful requests from public authorities, or meet health and safety obligations.
Legitimate interests. We process some personal data where it is necessary for our legitimate business interests, provided these are not overridden by your data protection rights. This includes ensuring site and system security, preventing and detecting fraud, managing and improving our services, conducting basic analytics, and protecting our property and customers.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional communications or specific uses of data not covered by other lawful bases. Where we rely on consent, you may withdraw it at any time.
Purposes for Which We Use Personal Data
We use the personal data we collect for the following main purposes:
To provide and manage storage services, including handling enquiries, creating and administering storage contracts, allocating units, managing access, and responding to customer service requests.
To process payments and manage billing, including issuing invoices, processing transactions through secure payment providers, and dealing with arrears or disputes.
To maintain security and safety, including monitoring access to our premises, operating CCTV systems, verifying identity where appropriate, and preventing or investigating fraud, theft or damage.
To communicate with you, including sending service related notices, important updates about your storage agreement, and responding to questions and complaints.
To operate and improve our business, including internal record keeping, staff training, service development, reviewing usage patterns and running basic analytics.
To comply with legal and regulatory requirements, including record retention rules, lawful requests from authorities and other obligations under applicable laws.
Data Retention and Storage
We keep your personal data only for as long as is reasonably necessary for the purposes for which it was collected and to fulfil our legal, accounting or reporting obligations. The specific retention period depends on the type of information and the context in which it is processed.
In general, we retain core customer account data and contract information for a number of years after your relationship with us ends, to comply with tax and financial reporting requirements and to enable us to respond to any queries or disputes. CCTV footage and some access records are retained for a shorter period, unless a longer retention period is required for the investigation of an incident or for legal reasons. When data is no longer required, we will securely delete or anonymise it.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. However, we may share it with selected third parties where this is necessary for the purposes set out in this policy, always in line with data protection requirements.
Service providers and processors. We use third party providers to help us deliver our services, for example payment processing companies, IT and system support providers, cloud hosting services, document storage providers and security service providers. These organisations act as processors and may only process your personal data on our documented instructions. We require them to keep your data secure and to comply with applicable data protection laws.
Professional and legal advisers. We may share data with professional advisers such as auditors, insurers, legal advisers and accountants where this is necessary for our business operations or to protect our legal interests.
Authorities and law enforcement. We may disclose personal data where required to do so by law or where necessary to protect our rights, property, safety, or the rights, property and safety of others. This may include responding to lawful requests from public authorities or law enforcement.
Business transfers. If we consider a sale, merger or other reorganisation of our business, we may share relevant personal data with prospective or actual buyers or other third parties involved, subject to appropriate confidentiality and data protection safeguards.
International Transfers
Where we use third party service providers located outside the United Kingdom or the European Economic Area, or where personal data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection law. These safeguards may include the use of standard contractual clauses or reliance on adequacy regulations where available.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights include:
The right of access. You have the right to obtain confirmation as to whether we process personal data about you and to request a copy of your personal data, together with certain information about how we use it.
The right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
The right to erasure. You may ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and there is no legal requirement for us to retain it.
The right to restrict processing. You may request that we restrict the processing of your personal data in specific situations, for example while we are investigating a concern about its accuracy.
The right to data portability. In some cases, you have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transfer it to another controller where this is technically feasible.
The right to object. You may object to certain types of processing, including processing based on our legitimate interests, where your particular situation gives rise to objections. We will stop processing unless we have compelling legitimate grounds or we need to continue for legal reasons.
The right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction or damage. These measures include access controls, physical security at our premises, staff training and secure handling of payment information. While we strive to protect your personal data, no system can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any updated version will apply to all Storage West Drayton customers and prospective customers in our service area from the date it is published. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
