Privacy Policy - Leabridge Storage

This Privacy Policy explains how Leabridge Storage collects, uses, stores, shares, and protects personal data in connection with the provision of storage services. It applies to all Leabridge Storage customers in area, including individuals and business customers using any storage unit, related service, or administrative function provided by Leabridge Storage.

1. Introduction

Leabridge Storage is committed to handling personal data in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy describes the categories of data we collect, the purposes for which we process personal data, the lawful bases we rely on, how long we keep personal information, the types of processors and service providers we may use, and the rights available to individuals under data protection law.

By using our services, entering into a storage agreement, or otherwise interacting with Leabridge Storage, you acknowledge that your personal data may be processed as described in this policy.

2. Data We Collect

We collect only the personal data necessary to manage our services, maintain security, and meet legal and operational requirements. The data we collect may include:

Identity information such as your name, date of birth, and, where applicable, business name and authorized representative details.
Contact information such as postal address, email address, and telephone number.
Account and contract information including storage unit details, agreement dates, billing records, payment status, and communication preferences.
Verification information such as identity documents, proof of address, or other information required for fraud prevention, compliance, or contract setup.
Financial information including limited payment details necessary to process transactions, issue invoices, or manage refunds.
Security and access information such as CCTV recordings, access logs, gate entry records, and incident reports where these are used to protect property, customers, staff, and premises.
Communication records including emails, letters, complaint details, and customer service notes.
Website or technical data where relevant, such as IP address, device information, and cookies used for operational or security purposes.

We do not intentionally collect special category data unless it is necessary and permitted by law. If such information is provided to us incidentally, we will process it only where we have a lawful basis and an appropriate safeguard.

3. How We Use Personal Data

We use personal data for the following purposes:

to create and manage storage agreements;
to identify customers and verify eligibility where needed;
to provide access to storage units and related services;
to issue invoices, collect payments, and manage account balances;
to communicate service updates, notices, or administrative information;
to prevent, detect, and investigate fraud, misuse, theft, or security incidents;
to maintain the safety and security of customers, staff, assets, and premises;
to comply with legal, tax, accounting, and regulatory obligations;
to resolve disputes, enforce agreements, and establish or defend legal claims;
to improve service quality, operations, and internal record management.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Leabridge Storage may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a storage contract, manage your account, provide access to a unit, and handle billing or service administration.

Legal obligation

We may process data to comply with statutory obligations, including accounting, tax, record-keeping, law enforcement requests, and other legal requirements.

Legitimate interests

We may process data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include fraud prevention, site security, CCTV monitoring, access control, business administration, service improvement, and debt recovery.

Consent

In limited circumstances, we may rely on your consent, such as for specific optional communications or non-essential cookies where required. When consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

Leabridge Storage may share personal data with trusted processors and other third parties who perform services on our behalf. These parties are permitted to process personal data only according to our instructions and are required to implement appropriate security measures.

Examples of processors and service providers may include:

IT and hosting providers that support our systems, storage records, and communications;
payment service providers that process transactions securely;
accounting and bookkeeping providers that help with invoicing and financial administration;
security providers supporting CCTV, alarm systems, or access management;
customer support or administrative service providers assisting with records and correspondence;
professional advisers such as lawyers, auditors, insurers, or consultants where necessary;
public authorities or law enforcement where disclosure is required by law or necessary to protect rights, property, or safety.

We do not sell personal data. Where personal data is transferred outside the European Economic Area or United Kingdom, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision, where applicable.

6. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law, contract, or legitimate business needs. Retention periods may vary depending on the type of data and the reason for processing.

In general:

contract and account records are kept for the duration of the agreement and for a reasonable period afterward;
billing, tax, and accounting records are retained for the period required by applicable law;
security records such as access logs or CCTV footage are kept only as long as needed for security, investigation, or incident management;
customer service communications are kept for the time needed to handle queries, disputes, or complaints;
data used for legal claims may be retained until the relevant limitation period expires or the matter is fully resolved.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

7. Security of Personal Data

We apply appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access restrictions, encryption where appropriate, secure storage, staff confidentiality obligations, and monitoring of systems. Although no method of transmission or storage is completely secure, we work to maintain a level of protection appropriate to the risk.

8. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access to obtain confirmation and a copy of the personal data we hold about you;
Right to rectification to correct inaccurate or incomplete data;
Right to erasure in certain circumstances, sometimes called the right to be forgotten;
Right to restriction of processing in certain situations;
Right to data portability for data processed by automated means based on consent or contract;
Right to object to processing based on legitimate interests or for direct marketing;
Right to withdraw consent where consent is the lawful basis;
Right not to be subject to automated decision-making where applicable.

These rights are not absolute and may be subject to legal exceptions or limitations. If you exercise any of these rights, we may need to verify your identity before responding.

9. Children’s Data

Our services are generally intended for adults or persons acting on behalf of a business. We do not knowingly collect personal data from children unless required in connection with a lawful contract or where a parent, guardian, or authorised representative provides information on their behalf.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it takes effect. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Final Statement

This Privacy Policy is intended to provide clear information about how Leabridge Storage processes personal data in a GDPR-compliant manner. We are committed to processing information lawfully, fairly, and transparently, and to respecting the rights of all Leabridge Storage customers in area. If any provision of this policy is interpreted inconsistently with applicable law, the relevant law will prevail.