Storage Aldborough Hatch Privacy Policy
This Privacy Policy explains how Storage Aldborough Hatch collects, uses, stores and shares personal data of its customers located in the Aldborough Hatch area. It is designed to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. By using our storage services, visiting our premises, or otherwise interacting with us, you acknowledge that your personal data will be handled in accordance with this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all customers and prospective customers of Storage Aldborough Hatch in the surrounding area, including individuals, sole traders and representatives of business customers. It covers personal data collected through our contracts, bookings, payments, customer service interactions, and any other method by which you provide information to us in the course of using our storage facilities and related services.
Data Controller
For the purposes of data protection law, Storage Aldborough Hatch is the data controller for the personal data described in this policy. This means we determine the purposes and means of processing your personal data. Where we engage third parties to process data on our behalf, they act as data processors and must follow our documented instructions.
Personal Data We Collect
We may collect and process the following categories of personal data about you as part of our relationship with you as a customer of Storage Aldborough Hatch:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and identification documents where required for verification purposes.
Contact information such as email address, mobile number, and alternative contact details you choose to provide.
Contract and account information such as storage unit details, contract start and end dates, payment history, correspondence relating to your booking or contract, and records of any changes you request.
Payment details such as payment method, payment status, and limited transactional information processed in connection with invoices and receipts. Card payment details are handled via secure payment processors and are not stored in full by us.
Security and access information such as vehicle registration numbers used to access our site, access logs relating to your entry and exit from the premises, and CCTV footage recorded at and around our facilities.
Communication data including records of emails, letters, and notes from phone or in-person discussions, as well as any complaints, queries or feedback you raise.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, make a booking, sign a storage agreement, visit our premises, make a payment, contact us by telephone, in person or in writing, or otherwise interact with us in relation to our services.
We may also receive some information from third parties where this is necessary to verify your identity, process payments, or comply with our legal obligations, for example from payment service providers and, where relevant, credit reference agencies or law enforcement authorities.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Performance of a contract. We process personal data to enter into and perform our storage contracts with you, including managing bookings, providing access to your storage unit, administering your account, issuing invoices, and handling queries arising from the contract.
Compliance with legal obligations. We process personal data where this is necessary to comply with our legal and regulatory obligations, such as tax, accounting and reporting requirements, and obligations to assist law enforcement bodies when required by applicable law.
Legitimate interests. We process personal data where necessary to pursue our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes monitoring access to our premises for security and safety, maintaining and improving our services, protecting our property and preventing fraud, and managing our relationship with you as a customer.
Consent. In limited cases, we may rely on your explicit consent, for example if we wish to send you certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data to provide and manage storage services to you, including creating and managing your account, allocating a storage unit, processing bookings, and handling access to our premises.
We use personal data to process and manage payments and billing, including issuing invoices, collecting outstanding amounts, and maintaining accurate financial records.
We use personal data to ensure the security and safety of our premises, customers, staff and property. This includes the use of CCTV, access control systems, and records of site visits as necessary for crime prevention and detection, and the protection of people and property.
We use your information to respond to your queries, handle complaints, and provide general customer support in relation to our storage services.
Where permitted, we may use personal data to inform you of service updates, changes to terms, or information essential to your continued use of our facilities.
Data Sharing and Processors
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These processors may include payment processing providers, IT and cloud storage providers, security and CCTV system providers, professional advisers such as accountants or auditors, and customer management or billing system providers.
All processors are required to process personal data only in accordance with our instructions, to implement appropriate technical and organisational measures to protect your data, and to ensure that their staff are subject to confidentiality obligations.
We may also share your personal data with third parties where this is required by law or where we believe it is necessary to protect our rights, property or safety, or those of our customers, employees, or others. This can include sharing information with law enforcement or regulatory authorities when we are legally obliged to do so.
We do not sell your personal data to third parties.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or store data in other jurisdictions, we take steps to ensure that your personal data receives an adequate level of protection. This may involve the use of appropriate safeguards such as standard contractual clauses approved by relevant data protection authorities or ensuring that the destination country has been formally recognised as providing an adequate level of data protection.
Data Retention
We keep your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with legal, accounting, or reporting requirements.
Customer account and contract information is generally retained for a period after the end of your contract to enable us to respond to queries, manage any disputes, and meet our legal obligations. Payment records and invoices are kept for the period required by tax and accounting laws.
CCTV footage and access records are kept for a shorter period, typically only as long as necessary for security, safety, and incident investigation, unless a longer retention is required in connection with a specific incident, claim, or legal obligation.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data held by Storage Aldborough Hatch, subject to certain conditions and exceptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification. You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data or consider an objection you have raised.
Right to object. You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis, and we will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or where the processing is needed for legal claims.
Right to data portability. In certain circumstances, you can request that we provide your personal data in a structured, commonly used and machine readable format and that we transmit it to another controller where this is technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the data protection supervisory authority if you consider that our processing of your personal data infringes data protection law.
Security of Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or damage. These measures include secure storage systems, controlled access to premises and systems, and regular review of our security practices. However, no system can be completely secure and we cannot guarantee absolute security of your data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply to all personal data held by Storage Aldborough Hatch at the time of the update and will replace previous versions. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
