Storage Yiewsley Privacy Policy
This Privacy Policy explains how Storage Yiewsley collects, uses, stores and protects personal data relating to customers and prospective customers. It applies to all Storage Yiewsley customers and users of our services in the local area, whether you contact us online, by post or in person at our premises.
We are committed to handling your data in accordance with the UK General Data Protection Regulation UK GDPR, the Data Protection Act 2018 and all applicable data protection laws. This Privacy Policy describes the types of personal data we process, our lawful bases for processing, how long we keep data, who we share it with and your rights as a data subject.
Data Controller
For the purposes of data protection law, Storage Yiewsley is the data controller of the personal data described in this Privacy Policy. This means we decide why and how your personal data is processed when you use our self storage services or otherwise communicate with us.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. This may include:
Identity and contact details such as full name, postal address, billing address, contact address, date of birth, identification document details for verification purposes, and any other information you choose to provide when contacting us.
Contact and communication records such as email correspondence, letters, notes of telephone conversations and any messages you send to us through forms or other communication channels.
Account and contract information such as customer reference numbers, unit numbers, storage agreement details, rental period, payment history, deposit information, access permissions and authorised contacts linked to your unit.
Payment and billing information such as details required to process payment, including method of payment and transaction records. We do not store full payment card details, but we may receive and retain limited card details for verification and record keeping where necessary.
Access and security information such as access control system data, entry and exit logs, CCTV footage captured at our premises, vehicle registration numbers used to access the site and information relating to incidents or security investigations.
Usage and service information such as details of the services you have requested, your preferences, your feedback and any complaints or enquiries made to us.
In general we do not intentionally collect special category data such as health or biometric data. If you provide such information voluntarily, we will handle it with enhanced care and only where a lawful basis applies.
How We Collect Personal Data
We may collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment, visit our premises or contact us with a query. We may also obtain information from third parties where it is necessary for our contract with you or required by law, for example for identity verification and fraud prevention.
Purposes and Lawful Bases for Processing
We process your personal data only where there is a lawful basis under the UK GDPR. Depending on the situation, the lawful bases we rely on include:
Contractual necessity. We process data to take steps at your request before entering into a storage agreement and to perform our contract with you. This includes processing identity and contact details, account and contract information, payment records and related communications so that we can provide and manage storage units and related services.
Legal obligations. We process data where required by law, including obligations relating to tax and accounting, preventing fraud, verifying identity where required, responding to requests from law enforcement and maintaining appropriate security and safety records.
Legitimate interests. We process data for our legitimate business interests, provided your rights and interests do not override those interests. This includes using access control logs and CCTV to safeguard our premises, property and individuals, keeping records of communications, improving our services, managing disputes and enforcing our contractual rights.
Consent. In limited circumstances we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you may withdraw it at any time by contacting us, and this will not affect processing carried out before consent was withdrawn.
How We Use Personal Data
We use personal data for the following purposes in line with the lawful bases described above:
To provide self storage services, including processing enquiries, setting up and managing customer accounts, administering storage agreements, handling payments and deposits and communicating with you about your unit and services.
To protect our premises, our customers and their property, including managing access to the site, monitoring CCTV for security and safety, investigating incidents, preventing fraud and responding to emergencies or disputes.
To manage our business operations, including bookkeeping, invoicing, record keeping, audits, reporting, compliance with legal and regulatory requirements and the exercise or defence of legal claims.
To communicate with you, including responding to your questions or complaints, sending service updates, notice of changes to our terms or policies and, where permitted, providing information about products or services that may be of interest to you.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where this is necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place.
Service providers and processors. We may use third party companies to provide services on our behalf, such as payment processing, accounting support, secure data storage, IT and security systems, and professional advisers such as auditors and legal advisers. These providers act as data processors and are only permitted to process your personal data in accordance with our instructions and for the purposes we specify.
Authorities and legal recipients. Where required by law or in connection with legal proceedings, we may share personal data with law enforcement agencies, regulatory bodies, courts, insurers or other third parties. We will only disclose what is necessary and will, where lawful, seek to ensure that your rights are protected.
We do not sell your personal data to third parties. If we ever consider a change to our business structure, such as a sale or reorganisation, we may share relevant data with potential buyers or partners under appropriate confidentiality obligations and only where permitted by law.
International Transfers
Where our service providers or systems are located outside the United Kingdom, personal data may be transferred to countries that do not have the same level of data protection laws. In such cases we will implement appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms, to ensure that your personal data remains protected.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required to meet legal, accounting or reporting obligations.
As a general guideline, customer account and contract records, including identity and contact details, are kept for a period following the end of your storage agreement in order to deal with any queries, collect outstanding payments, resolve disputes and comply with legal requirements. Payment records and financial information are retained in line with statutory retention periods for financial and tax records.
CCTV footage and access logs are retained for a shorter period, unless an incident requires us to keep specific recordings or logs for longer for investigation or legal reasons. When personal data is no longer required, we will securely delete or anonymise it.
Your Data Protection Rights
Under the UK GDPR you have a number of rights in relation to your personal data. These rights apply in most circumstances and may be subject to certain limitations and exemptions under the law.
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that data, along with certain information about how it is used.
Right to rectification. You have the right to ask us to correct or complete personal data that you believe is inaccurate or incomplete.
Right to erasure. In certain situations you can ask us to delete your personal data, for example where it is no longer needed for the original purpose and there is no other legal ground for us to retain it.
Right to restriction of processing. You may request that we restrict the processing of your data in specific circumstances, for example while we are verifying its accuracy or considering an objection you have raised.
Right to object. You have the right to object to processing that is based on our legitimate interests, including some forms of profiling, on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it is transmitted to another controller where technically feasible.
Rights in relation to consent. Where we rely on your consent for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing that took place before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions about how we handle personal data at Storage Yiewsley, you can contact us using our usual contact channels or at our premises. We may need to verify your identity before responding to your request, to protect your privacy and security.
You also have the right to lodge a complaint with the relevant supervisory authority for data protection if you are concerned about how we process your personal data. We encourage you to contact us first, so that we have an opportunity to address your concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any updated version will apply to all Storage Yiewsley customers in the area from the date it is published. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
