Storage Penge Privacy Policy
This Privacy Policy explains how Storage Penge collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Penge area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, making an enquiry, or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Penge customers, prospective customers, and users of our services in the Storage Penge area. It covers personal data we collect in the course of operating our storage services, including when you contact us, make a booking, enter into a storage agreement, make payments, or visit our premises.
Data Controller
For the purposes of data protection law, Storage Penge is the data controller in respect of personal data collected and processed in connection with our storage services. This means Storage Penge determines the purposes and means of processing your personal data.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details such as your name, postal address, billing address, and any other contact details you choose to provide.
Account and contract information such as customer numbers, storage unit numbers, contract start and end dates, and details about the services you have agreed with us.
Financial and payment information such as payment records, billing history, and limited payment method details where necessary to administer your account. We do not store full payment card details where payments are processed via secure third-party providers.
Communication data such as information contained in enquiries, complaints, feedback, or other correspondence you send to us, as well as records of our communications with you.
Usage and operational data such as records of access to our premises where access control systems are in use, records of unit entry where applicable, and general information needed to manage the safe and lawful operation of our facilities.
Security and CCTV data where we operate CCTV systems at our premises for security and safety. This may include images of you and your vehicle when you visit or move around our site.
How We Collect Your Personal Data
We collect personal data directly from you when you enquire about our services, request a quotation, make a booking, enter into a storage agreement, set up or manage an account, make a payment, or otherwise communicate with us.
We may also collect personal data indirectly where it is provided by someone acting on your behalf, such as a family member or business representative, or where it is generated in the course of providing our services, such as from access control or CCTV systems at our premises.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the context, we may rely on the following lawful bases:
Contractual necessity. We process personal data as needed to enter into and perform our contract with you, including to manage your booking, provide storage services, administer your account, and handle payments and invoices.
Legal obligations. We process personal data to comply with applicable legal and regulatory requirements, for example record-keeping, tax, accounting, and health and safety obligations, and to assist law enforcement or regulatory authorities where we are legally required to do so.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or the legitimate interests of a third party, provided these are not overridden by your interests or fundamental rights and freedoms. This includes managing and improving our services, ensuring site security and safety, preventing fraud, protecting our property, and handling queries or complaints.
Consent. In limited circumstances, we may rely on your consent, for example where you request optional communications that are not strictly necessary for operating your account. Where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to your enquiries, provide quotations, and help you select appropriate storage services.
To set up and manage your customer account, including verifying your identity where appropriate and maintaining accurate records of your storage agreement.
To administer payments, issue invoices, process refunds where applicable, and maintain accounting and financial records.
To provide, operate, and manage storage units and related services, including monitoring access where access control technology is in use.
To ensure the safety and security of our customers, staff, and premises, including the use of CCTV and access logs where in place.
To communicate with you about your contract, any changes to our terms, operational updates, and important information relating to your storage unit or our facilities.
To manage queries, feedback, complaints, and disputes, and to enforce our contractual rights.
To comply with legal and regulatory obligations and to cooperate with law enforcement or other authorities where required.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting, and reporting requirements.
In general, we retain customer and contract data for a period after the end of your storage agreement to enable us to respond to queries, manage any disputes, meet tax and accounting obligations, and demonstrate compliance with our legal duties. CCTV images and access control logs, where used, are retained for a shorter period, unless they are required for the investigation of an incident or legal claim, in which case they may be retained for longer as necessary.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
Data Sharing and Processors
We may share your personal data with trusted third parties who process data on our behalf and under our instructions. These third parties are known as data processors and may include:
IT and system support providers who host or maintain our software and storage of electronic records.
Payment and billing service providers who process payments and help us manage invoices and arrears.
Professional advisers such as accountants or legal advisers where necessary for legitimate business purposes.
Security and facility service providers who assist with access control, CCTV maintenance, or site operations.
Where we use data processors, we ensure that appropriate data protection agreements are in place and that they are required to keep your personal data secure and to use it only in accordance with our instructions and applicable law.
We may also disclose personal data where required by law, for example to law enforcement agencies, courts, or regulatory authorities, or where necessary to establish, exercise, or defend legal claims.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors, we will take steps to ensure that appropriate safeguards are in place, such as standard contractual clauses or other measures recognised under data protection law to ensure your data remains protected.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you have the right to:
Access your personal data and obtain a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the original purpose and we have no legal obligation to retain it.
Request restriction of processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
Object to processing based on our legitimate interests, on grounds relating to your particular situation, where we do not have compelling legitimate grounds to continue such processing.
Request the transfer of your personal data to you or to another controller in a structured, commonly used, and machine-readable format where the processing is based on contract or consent and carried out by automated means.
Where we rely on consent, withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so that we can address any concerns.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include access controls, secure storage of records, and limiting access to personal data to those staff and service providers who need it for legitimate business purposes.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply to all personal data from the date on which it is published. You should review this Privacy Policy periodically to stay informed about how we handle your personal data.
