Storage Childs Hill Privacy Policy
This Privacy Policy explains how Storage Childs Hill collects, uses, stores, and protects personal data relating to our storage services. It applies to all Storage Childs Hill customers and prospective customers in our service area, including anyone who contacts us, visits our premises, or uses our services.
Storage Childs Hill is committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy explains our practices and your rights in a clear and transparent way.
Scope of this Privacy Policy
This Privacy Policy applies to personal data that we process in connection with:
Enquiries about our storage services, quotes, and bookings. The performance and management of storage contracts. Payments, invoicing, and account management. Security and access control at our facilities. Marketing communications, where permitted by law.
By using our services or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy.
Categories of Personal Data We Collect
We only collect personal data that is necessary for clearly defined purposes. The types of data we may collect include:
Identification and contact details, such as name, postal address, and any other contact details you choose to provide. Customer account information, including customer reference numbers, contract details, storage unit number, and communication preferences. Billing and payment information, such as payment method details and transaction history. Service-related information, such as dates of storage, type and size of unit, and any additional services you use. Security and access data, such as vehicle registration numbers recorded for site access and visit logs to our premises where relevant. Communication records, including enquiries, complaints, and correspondence related to your storage services.
We do not routinely collect special category data such as health information, and we ask that you do not provide such information unless it is strictly necessary for our dealings with you.
How We Collect Your Personal Data
We obtain personal data in a number of ways:
Directly from you when you request a quote, make a booking, sign a contract, or contact us with a query. During the course of providing storage services to you and managing your account. Indirectly through service providers acting on our behalf who assist with payments, customer relationship management, or security and access control. Automatically when you visit our premises, such as through access control systems and visitor logs.
Lawful Bases for Processing Your Data
We always ensure that we have a lawful basis for processing your personal data. Depending on the circumstances, we rely on one or more of the following legal bases:
Contract: Processing that is necessary to enter into or perform a contract with you, for example to provide storage services, manage your account, and handle payments. Legal obligation: Processing that is necessary to comply with legal or regulatory requirements, such as tax and accounting rules or obligations to law enforcement authorities. Legitimate interests: Processing that is necessary to pursue our legitimate business interests, such as maintaining site security, preventing fraud and misuse of our services, and improving our customer service, provided that your rights and interests do not override those interests. Consent: In limited cases where consent is required by law, such as for certain types of direct marketing, we will only process your data when you have given clear and explicit consent, which you may withdraw at any time.
Purposes for Which We Use Your Data
We use your personal data for the following purposes:
To provide, administer, and manage storage services, including handling bookings, renewals, and changes to your contract. To process payments, manage invoices, and keep accurate financial records. To communicate with you about your account, including sending important service updates, contract notices, and responses to your queries. To maintain security at our facilities, including verifying identity where necessary, managing access, and investigating incidents. To comply with legal and regulatory requirements, including the detection and prevention of fraud, theft, and other criminal activity. To improve our services and customer experience, including training staff and monitoring the quality of our interactions with you. To send marketing communications about our services where we are permitted to do so by law and where you have not opted out.
Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. The specific retention periods may vary, but we generally apply the following principles:
Customer and contract data is retained for the duration of your contract and for a period afterwards to deal with any queries, disputes, or legal obligations, such as record-keeping and tax requirements. Payment and financial information is retained in line with statutory requirements and standard accounting practices. Security and access data is kept for a limited period necessary to investigate incidents, ensure site security, and comply with legal obligations. Marketing preference information is retained until you withdraw consent or object to further marketing, whichever applies.
When personal data is no longer required for the purposes for which it was collected, we will take steps to securely delete or anonymise it.
Use of Data Processors and Third Parties
We may engage carefully selected third-party service providers to process personal data on our behalf. These organisations act as data processors and may provide services such as payment processing, customer relationship management, secure data storage, or security and access control.
Where we use data processors, we ensure that:
They only process personal data in accordance with our instructions and for the purposes we specify. They implement appropriate technical and organisational measures to protect personal data. They are bound by contractual obligations consistent with data protection laws.
In certain circumstances, we may also share personal data with third parties that act as independent controllers, for example:
Professional advisers such as accountants or legal advisers where necessary to protect our rights or comply with legal obligations. Public authorities, law enforcement agencies, or regulators, where required or permitted by law.
We do not sell your personal data to third parties.
International Data Transfers
Where any transfer of personal data outside the United Kingdom or the European Economic Area is necessary, we will ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses approved by relevant authorities or other legally recognised mechanisms to ensure your data is adequately protected.
How We Protect Your Personal Data
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, staff training, secure storage systems, and regular review of our security procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Childs Hill customers within our service area, subject to certain legal limitations. Your rights include:
The right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used. The right to rectification: You can ask us to correct inaccurate or incomplete personal data that we hold about you. The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it. The right to restrict processing: You can ask us to restrict the processing of your data in certain situations, such as where you contest its accuracy or object to our legitimate interests. The right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format so that you can reuse it for your own purposes. The right to object: You can object to processing that is based on our legitimate interests, including profiling, and we will stop processing your data unless we can demonstrate compelling legitimate grounds. You always have the right to object to direct marketing at any time. The right to withdraw consent: Where we rely on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your rights or raise concerns about how we handle your personal data, you can contact us using the usual contact details you use to reach Storage Childs Hill. We will respond to your request or complaint in accordance with applicable data protection laws.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is the Information Commissioner's Office. Details on how to raise a concern with the Information Commissioner's Office are available from that authority directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updates will be made available to customers, and the revised version will apply from the date it is issued. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data at Storage Childs Hill.
