Storage New Addington Privacy Policy
This Privacy Policy explains how Storage New Addington collects, uses, stores, and shares personal data relating to customers and prospective customers in the New Addington area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act. By using our services, visiting our premises, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage New Addington customers and prospective customers in the New Addington area, including individuals, sole traders, and representatives of business customers. For the purposes of data protection law, Storage New Addington acts as the data controller in relation to the personal data described in this Privacy Policy. This means that we determine the purposes and means of processing your personal data.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you as part of providing storage services and related activities:
Identity data, such as your full name, title, and date of birth where required for verification checks. Contact data, such as your billing address, storage unit address details, and preferred contact details. Contract and account data, such as your storage unit number, contract start and end dates, services selected, access permissions, and communication preferences. Payment and transaction data, such as payment method, payment history, invoices, and information relating to late or missed payments. Security and access data, such as CCTV recordings on our premises, access logs for storage units and entrances, and records of visits. Communication data, such as emails, letters, and notes of telephone discussions with our staff relating to your account. Technical and usage data, such as information about how you use our services and any online tools we provide, including basic log information generated when you visit our website.
How We Collect Your Personal Data
We collect personal data directly from you when you enquire about our services, obtain a quote, sign a storage agreement, make a payment, contact us with a query or complaint, visit our premises, or update your details. We may also collect personal data from third parties where lawful to do so, such as credit reference agencies when assessing credit risk, payment service providers when confirming transactions, and law enforcement or regulatory bodies where necessary for legal purposes. We may collect limited data automatically when you visit our website, such as technical logs needed for security and performance monitoring.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so under data protection law. Depending on the specific activity, we rely on one or more of the following lawful bases:
Contract performance. We process your personal data to take steps at your request before entering into a contract, and to perform our contract with you. This includes setting up your storage unit, managing access, processing payments, and responding to requests about your account. Legal obligation. We process personal data where necessary to comply with legal and regulatory requirements, such as tax and accounting rules, anti money laundering obligations, and law enforcement requests. Legitimate interests. We process some personal data where it is necessary for our legitimate interests or those of a third party, and where your interests and fundamental rights do not override those interests. These legitimate interests may include ensuring the security of our premises and property, preventing and detecting fraud, managing our business operations, and improving our services. Consent. In limited circumstances, we may rely on your consent, for example for certain types of optional marketing or where law requires consent for particular uses. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use personal data to provide, manage, and improve our storage services; to communicate with you about your account, payments, and contract changes; to manage bookings, renewals, and terminations; to maintain the safety and security of our customers, staff, and property; to handle complaints, disputes, and queries; to meet our legal and regulatory obligations; and to send you information about services that are similar to those you already use, where permitted by law. We do not carry out automated decision making or profiling that produces legal or similarly significant effects solely based on automated processing.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including meeting any legal, accounting, or reporting requirements. In general, we retain contract and billing information for the duration of your agreement with us and for a period afterwards as required by tax and limitation laws. CCTV and access data are retained for a shorter period, typically only as long as needed for security, incident investigation, and crime prevention purposes. Communication records are retained for a reasonable period to respond to queries, manage disputes, and improve our services. When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Party Recipients
We use selected third party service providers to help us deliver our services and run our business. These providers act as data processors and process your personal data on our behalf and under our instructions. Examples include payment processing providers that handle card and direct debit transactions, IT and cloud service providers that host our systems and store data, security and CCTV maintenance providers that support the protection of our premises, and professional advisers such as accountants and legal advisers. We require all processors to implement appropriate technical and organisational measures to protect your personal data and to process it only in accordance with our instructions and applicable law.
We may also share personal data with third parties acting as independent data controllers where necessary, such as law enforcement agencies, courts, or regulatory authorities when we are legally required to do so, credit reference agencies and fraud prevention bodies, or potential buyers or partners in the context of a business reorganisation, subject to appropriate safeguards. We do not sell your personal data.
International Transfers
Where we use service providers located outside the United Kingdom or where personal data is processed in other countries, we ensure that appropriate safeguards are in place. These may include the use of contracts approved for use in international transfers, together with additional technical and organisational measures where needed, or other mechanisms recognised under data protection law as providing an adequate level of protection for personal data.
Security of Your Personal Data
We take reasonable and proportionate steps to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Measures include access controls and authentication for our systems, physical security at our premises, reasonable restrictions on who can access particular types of personal data, staff training on data protection and information security, and routine monitoring and testing of our systems and procedures. While we take security seriously, no system is completely secure and we cannot guarantee absolute security of your data.
Your Data Protection Rights
You have a number of rights in relation to the personal data we hold about you, subject to certain conditions and exemptions under data protection law. These rights include the right to request access to your personal data and receive information about how we process it, the right to request correction of inaccurate or incomplete data, the right to request erasure of your personal data where there is no good reason for us continuing to process it, the right to request restriction of the processing of your personal data in certain circumstances, the right to object to processing based on our legitimate interests, including direct marketing, the right to data portability, which allows you to obtain certain personal data in a structured, commonly used, machine readable format and to transmit it to another controller, and the right to withdraw consent where we rely on consent as the lawful basis for processing.
If you exercise any of these rights, we may need to ask you for information to help us confirm your identity and ensure your right to access or amend the data. We will respond to all legitimate requests within the timeframes required by law.
Complaints and Further Information
If you are concerned about how we handle your personal data, you can contact us to raise your concerns and we will do our best to resolve them. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe your data protection rights have been infringed. This Privacy Policy is kept under regular review and may be updated from time to time to reflect changes in our practices or in applicable law. Any updates will apply from the date they are posted. We encourage you to review this Policy periodically so that you remain informed about how we handle your personal data at Storage New Addington.
