Storage Lea Bridge Privacy Policy
This Privacy Policy explains how Storage Lea Bridge collects, uses, stores and shares personal data relating to its customers. It is intended to provide clear information about our data protection practices and your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Lea Bridge customers in our service area, including prospective customers who make enquiries, existing customers, and former customers.
Who we are and scope of this policy
Storage Lea Bridge operates self-storage and related services to individuals and businesses. For the purposes of data protection law, Storage Lea Bridge is the controller of the personal data described in this policy. This means we decide how and why your personal data is processed when you interact with us and use our services.
This policy applies to personal data collected in person at our premises, by telephone, by post, and through any online forms or digital tools we make available for enquiries, bookings, payments or account management.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and the services you use. The categories of personal data we may collect include:
Identification data such as full name, title, date of birth, and proof of identity or address where required for verification.
Contact data such as home or business address, billing address, and any contact details you choose to provide, such as email address.
Account and contract data such as customer reference numbers, storage unit details, contract dates, access permissions, and records of your communications with us.
Payment and transaction data such as payment method, billing history, and records of invoices and payments. We do not store full card details when payments are processed by secure payment providers.
Security and access data such as vehicle registration numbers, entry and exit logs, access control identifiers, CCTV footage within and around our premises, and incidents or reports related to safety and security.
Usage and communication data such as enquiries, feedback, complaints, and records of your preferences for receiving service messages and administrative information.
How we collect your personal data
We collect personal data directly from you when you make an enquiry, request a quotation, sign a storage agreement, set up or manage an account, make a payment, or communicate with us about our services.
We may also collect information automatically when you visit our premises, such as CCTV footage and access control records, and when you use any online account tools or forms we provide.
In some cases, we may receive personal data from third parties, for example from other people you authorise to act on your behalf, from payment service providers confirming that a payment has been made, or from law enforcement or regulatory authorities where this is lawful and necessary.
Lawful bases for processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the specific processing activity, we rely on one or more of the following lawful bases:
Contract. We process personal data where it is necessary to enter into a storage agreement with you, to provide our services, to manage your account, to handle payments, and to communicate with you about your contract and any changes to our services or terms.
Legal obligation. We process personal data where it is necessary to comply with our legal obligations, for example in relation to taxation, accounting, financial reporting, fraud prevention, security incident reporting and responding to lawful requests from public authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or those of a third party, and where your interests and fundamental rights do not override those interests. These legitimate interests include operating and improving our storage facilities, maintaining the security and integrity of our premises and systems, managing business risks, handling customer queries and complaints, and maintaining appropriate records of our business activities.
Consent. In limited situations, we may rely on your consent to process certain categories of data or for specific purposes. Where we rely on consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use the personal data we collect for the following purposes:
To respond to enquiries, provide quotations and explain our services.
To assess and manage applications for storage units or related services.
To prepare, enter into and perform storage agreements and any related contracts.
To manage billing, process payments, maintain financial records and recover any sums owed.
To operate, monitor and protect our premises, assets, staff, customers and visitors, including through access control systems and CCTV.
To manage your account, update your details, and communicate essential information about your storage unit, access arrangements, maintenance, safety, or changes to our services or terms.
To handle feedback, queries, complaints and disputes, and to enforce our contractual rights.
To comply with legal and regulatory requirements and to cooperate with law enforcement and regulators where required.
To analyse and improve how we operate our facilities and deliver our services, including internal reporting, quality assurance and staff training.
Data sharing and processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this policy and where we have an appropriate legal basis.
We may share personal data with service providers who act as processors on our behalf. These may include providers of payment processing services, accounting and invoicing systems, storage management software, access control and security systems, CCTV maintenance services, document storage or shredding services, and professional advisers such as accountants or legal advisers who support our business operations.
Where we use processors, we ensure that they are subject to appropriate contractual obligations relating to confidentiality, data protection and security, and that they only process personal data in accordance with our instructions and for the agreed purposes.
We may also disclose personal data where required to do so by law or where we reasonably believe this is necessary to protect our rights, safety or property, or the rights, safety or property of our customers, staff or the public.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, customer account and contract information is kept for a period after the end of your storage agreement, to enable us to respond to queries, manage any disputes, and comply with tax and accounting obligations. Security and access data, including CCTV footage and access logs, is retained for shorter periods unless a longer retention is required for the investigation of incidents or for legal reasons.
When personal data is no longer required for the purposes for which it was collected, we will securely delete it or irreversibly anonymise it so that it can no longer be linked to you.
International transfers
Where we use service providers or systems that involve the transfer of personal data outside the United Kingdom, we take steps to ensure that any such transfer is lawful and that your personal data is protected to a standard consistent with UK data protection laws. This may include reliance on adequacy regulations or the use of appropriate safeguards such as standard contractual clauses.
How we protect your data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, staff training, security procedures for our premises and systems, and regular review of our data protection practices.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain legal conditions and exemptions.
You have the right to request access to the personal data we hold about you and to receive information about how we process it.
You have the right to request that we correct any inaccurate or incomplete personal data relating to you.
You have the right to request the erasure of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
You have the right to object to processing that is based on our legitimate interests, including profiling related to those interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where the processing is required for legal claims.
You have the right to request the transfer of certain personal data to you or to another controller in a structured, commonly used and machine readable format where the processing is based on consent or contract and carried out by automated means.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data protection practices, or legal requirements. We will make the updated version available and indicate the date of the most recent revision. We encourage you to review this policy periodically so that you remain informed about how we handle your personal data.
