Storage South Ruislip Privacy Policy
This Privacy Policy explains how Storage South Ruislip collects, uses, stores, and protects personal data of its customers and prospective customers in the surrounding area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
By using our services, visiting our premises, or otherwise interacting with us as a customer or prospective customer, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage South Ruislip customers and prospective customers in our service area who use or enquire about our storage services, including in person, by post, or through any digital or electronic communication channels that we may make available. It covers personal data processed in connection with storage unit hire, customer support, billing, access control, security, and general business administration.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identity and contact details, such as your name, postal address, and any other contact details you choose to provide. Customer account information, such as account numbers, contract details, unit number, and records of services you have purchased or enquired about. Payment and billing information, such as payment confirmations, billing history, and information necessary to allocate payments, subject to the safeguards of our payment processors. Security and access information, such as records of unit access times and security logs, including any recorded images where CCTV is in operation at our premises. Communication records, such as enquiries, complaints, feedback, and correspondence with our customer service team. Technical and usage data, such as basic information about how you interact with any online tools or platforms we may operate, to the extent this involves personal data.
We may collect this information directly from you, from your use of our services, and from our security and access control systems. We do not intentionally collect personal data of children for the purpose of entering into storage contracts, and our services are directed to adults.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process personal data as necessary to enter into and perform a contract with you, including to set up and manage your storage unit, process payments, provide customer support, and administer your account.
Legal obligation: We may process personal data to comply with applicable legal and regulatory obligations, such as record keeping, tax or accounting obligations, and responding to lawful requests from public authorities.
Legitimate interests: We may process personal data where it is necessary for our legitimate interests, or those of a third party, and where your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises and units, preventing fraud and misuse, maintaining and improving our services, and managing our business operations.
Consent: In limited cases where required by law, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before your withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your account, preparing documentation, managing access to your unit, and providing customer support. To process payments, manage billing, send statements, and handle queries relating to charges or fees. To maintain security and safety on our premises, including operating access control systems, monitoring units, and maintaining security logs and any CCTV recordings. To communicate with you about your contract, service updates, changes to terms, or other important information relating to your storage unit. To respond to your enquiries, complaints, or feedback and to resolve disputes. To manage our business operations, including audit, risk management, and reporting. To meet legal and regulatory requirements and cooperate with regulators or law enforcement when required to do so under applicable law.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law. Such third parties may include:
Payment processors and financial service providers who help us process payments securely and manage billing. IT and systems providers who supply, host, or support our business systems, access control systems, and data storage solutions. Professional advisers such as accountants, auditors, and legal advisers, to the extent necessary for them to provide their services. Security service providers who assist with the security and monitoring of our premises and systems. Public authorities, law enforcement agencies, and regulators, where required by law or where necessary to protect our rights, property, or safety or that of our customers or others.
Where we engage third parties to process personal data on our behalf, they act as our processors. We require all such processors to respect the security of your personal data and to process it only in accordance with our written instructions and applicable data protection law.
International Data Transfers
We aim to store and process your personal data within the United Kingdom or other locations that provide an equivalent level of data protection. If personal data is transferred to a country that does not have the same level of data protection, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, as required by data protection law.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes by other means.
In general, we keep customer account and contract information for the duration of your relationship with us and for a period thereafter to deal with any queries, disputes, or legal claims. Security and access records, including CCTV footage where used, are kept for shorter periods unless a longer retention period is required in connection with an incident, investigation, or legal claim. When we no longer need personal data, we will delete it or anonymise it in a secure manner.
Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include physical security measures at our premises, access controls, secure storage systems, and staff training. While we take reasonable steps to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions. Subject to those, you may have the right to:
Access: Request confirmation as to whether we process your personal data and, if so, request a copy of that personal data.
Rectification: Request correction of any inaccurate or incomplete personal data we hold about you.
Erasure: Request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected and we have no overriding legitimate grounds to retain it.
Restriction: Request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
Data portability: Request that we provide you or a third party you have chosen with your personal data in a structured, commonly used, machine readable format, where the processing is based on consent or contract and carried out by automated means.
Object: Object to the processing of your personal data where we rely on legitimate interests, including profiling, and your particular situation gives rise to objections. You also have the right to object at any time to the processing of your personal data for direct marketing.
Withdraw consent: Where we rely on your consent as the lawful basis for processing, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, you may contact us using the contact methods made available to you as a customer. We may need to verify your identity before responding to your request.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any material changes will be communicated through appropriate channels. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
