Storage Shadwell Privacy Policy
This Privacy Policy explains how Storage Shadwell collects, uses, stores, and protects personal data relating to our self-storage services. It applies to all Storage Shadwell customers and prospective customers in our service area, as well as anyone who contacts us regarding our services.
We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This policy describes the categories of personal data we process, our lawful bases for processing, how long we keep the data, who we share it with, and the rights you have in relation to your personal data.
Who This Policy Applies To
This Privacy Policy applies to individuals who rent or enquire about storage units from Storage Shadwell, visit our premises, or otherwise interact with us as a private individual or on behalf of a business. By using our services or contacting us, you acknowledge that you have read and understood this policy.
Types of Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identification data such as full name, date of birth, identification document details, and signatures where required for verification and contract purposes.
Contact data such as postal address, preferred correspondence address, and general contact details that you provide when you make an enquiry, sign a contract, or update your account.
Account and contract data such as storage unit number, contract start and end dates, rental fees, payment history, and communication records relating to your contract, including any queries or complaints.
Payment and billing data such as partial payment card details processed through approved payment service providers, billing address, direct debit details, and transaction records. We do not store full card details when processed via secure payment processors.
Usage and operational data such as access records to the facility where access control systems are in place, CCTV footage for security and safety, incident reports, and information about compliance with our site rules.
Technical data such as IP address, device information, and basic usage data associated with visiting our website or online portals, where applicable, collected via standard logging and similar technologies.
How We Collect Your Personal Data
We collect personal data directly from you when you make an enquiry, reserve or rent a storage unit, sign a contract, set up or amend payment details, communicate with us by any means, or visit our premises where CCTV and access control are in operation.
We may also receive personal data from third parties where lawful, such as payment processors confirming transactions, credit reference agencies where checks are necessary, or law enforcement or regulatory bodies in the context of legal obligations.
Lawful Bases for Processing Your Data
We rely on one or more of the following lawful bases under data protection law when processing your personal data:
Contract performance. We process your personal data when it is necessary to enter into or perform a storage contract with you, including managing reservations, billing, payment collection, customer service, and day to day operation of your storage agreement.
Legal obligations. We process personal data to comply with legal and regulatory requirements, including tax and accounting obligations, identity verification and fraud prevention, responding to lawful requests from public authorities, and health and safety requirements.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and interests. These interests include securing our site and property via CCTV and access control, preventing non payment or misuse of storage units, managing business operations, handling enquiries and complaints, and improving our services.
Consent. In limited circumstances, we may rely on your consent, for example for specific types of optional communication. Where we rely on consent, you can withdraw it at any time by contacting us, and this will not affect the lawfulness of processing that took place before consent was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To create and manage your customer account, prepare quotations, and administer your storage agreement.
To process payments, manage billing, handle arrears, and address any related financial matters.
To operate and secure our facilities, including controlling access, monitoring for security incidents using CCTV, and investigating any incidents, damage, or breaches of contract.
To provide customer support, respond to enquiries or complaints, and keep records of our communications with you.
To comply with legal, regulatory, and law enforcement obligations, including record keeping and responding to requests from competent authorities.
To manage and improve our services and operations, including general business administration, reporting, and planning.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
In general, we keep contract and billing records for a period required by tax and accounting laws after the end of your contract. Security related data such as CCTV footage and access logs is retained for shorter periods, typically only long enough to investigate incidents, handle disputes, or comply with legal requirements, unless a longer retention period is justified in a specific case.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include:
Payment processing providers that handle card transactions and direct debits securely.
IT and system support providers that host or maintain our business systems, electronic storage, and security systems.
Professional advisers such as accountants, auditors, or legal advisers where reasonably necessary for the management of our business and the protection of our rights.
Security and maintenance service providers involved in operating and maintaining CCTV, access control, and facility security systems.
These processors are only permitted to process your personal data based on our instructions, for specified purposes, and with appropriate technical and organisational security measures.
We may also share personal data where required or permitted by law, for example with law enforcement agencies, courts, regulatory bodies, or debt recovery organisations where necessary to protect our rights or pursue claims.
International Transfers
Where any of our service providers process personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other legally recognised mechanisms, to protect your rights and personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal conditions and exemptions, but we will always respond to any request in accordance with applicable law.
Right of access. You can request confirmation of whether we hold personal data about you and request a copy of that data, along with information about how we use it.
Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal obligation to retain it.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You can object to processing of your personal data where we rely on legitimate interests as our lawful basis and your particular situation gives rise to an objection. We will stop processing unless we can demonstrate compelling legitimate grounds to continue or the processing is needed for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request to receive the personal data you provided in a structured, commonly used and machine readable format, and ask us to transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect any processing already carried out before withdrawal.
How to Exercise Your Rights or Raise Concerns
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using the usual contact details shown on our website or provided to you as part of your storage agreement.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly first.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will be made available through our usual communication channels and will apply from the date it is published. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
