Storage Upminster Bridge Privacy Policy
This Privacy Policy explains how Storage Upminster Bridge collects, uses, stores and shares personal data relating to customers and prospective customers in the Upminster Bridge area. It is designed to comply with the UK General Data Protection Regulation and related data protection laws. By using our storage services, visiting our premises, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Scope and who this policy applies to
This Privacy Policy applies to all Storage Upminster Bridge customers, as well as individuals who make enquiries or otherwise engage with our services, in the Upminster Bridge area. It covers personal data processed in connection with the provision of storage services, associated administrative activities, and our general business operations.
Data controller responsibility
Storage Upminster Bridge is the data controller in respect of the personal data we collect and use about you. This means that we determine the purposes and means of processing that data and are responsible for ensuring that it is handled in accordance with applicable data protection laws.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identification data such as full name, title, date of birth and a copy of identification documents where required for security or verification purposes.
Contact details such as billing address, storage unit address details, previous address where needed for verification, and other contact information you provide to us.
Contract and account data such as details of your storage agreement, move in and move out dates, unit number, payment history, correspondence with us and any preferences you tell us about.
Payment and billing information such as payment method details and records of payments made. We do not retain full payment card information where this is processed securely by a payment processor.
Security and access data such as CCTV images captured at our premises, access control logs, vehicle registration numbers where relevant, and records of visits to the site.
Communication data such as records of telephone calls where applicable, written correspondence and other communications relating to our services.
How we collect your data
We collect personal data directly from you when you sign up for a storage unit, complete forms, contact us with an enquiry, make a payment, or otherwise communicate with us. We may also collect data automatically through security systems and access control equipment used at our premises. In some cases, we may receive personal data from third parties such as payment processors or other service providers involved in managing your contract.
Lawful basis for processing
We will only process your personal data where we have a lawful basis under data protection law. Depending on the circumstances, we rely on the following lawful bases:
Contractual necessity when we need to process your data to enter into, manage or perform a contract with you, including setting up your storage unit, taking payment and managing your account.
Legal obligations when we are required to process certain information to comply with laws and regulations, for example for tax, accounting, fraud prevention or safety requirements.
Legitimate interests when we have a legitimate business interest in processing your data and this is not overridden by your rights and interests. This includes maintaining site security, managing access to our premises, improving our services, pursuing and defending legal claims and maintaining business records.
Consent where we rely on your explicit agreement to use your data for a specific purpose, such as certain types of optional marketing communications. When we rely on consent, you may withdraw it at any time.
Purposes for which we use your data
We use your personal data for the following purposes:
To provide and manage storage services including setting up, administering and terminating storage agreements, allocating units and handling customer service queries.
To process payments and manage billing including collecting fees due, handling direct debits or other recurring payments, and maintaining financial records.
To communicate with you including responding to enquiries, sending important notices about your storage unit, and maintaining records of our interactions.
To ensure safety and security including monitoring access to the premises, operating CCTV systems, preventing and detecting crime, and supporting any related investigations.
To comply with legal and regulatory requirements including tax and accounting rules and obligations to law enforcement or regulatory authorities.
To protect our rights and manage business operations including handling complaints, resolving disputes, enforcing our contract terms and maintaining accurate business records.
To conduct limited marketing and service improvement activities such as informing you of relevant service updates or improvements, where permitted by law and subject to your preferences.
Data retention and storage
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting or reporting requirements. When determining retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and our legal obligations.
Generally, we will retain core contract and billing information for a period required under applicable tax and financial regulations after your contract ends. Security footage and access logs are retained for shorter periods unless required for an ongoing investigation or legal claim. When data is no longer needed, we will securely delete or anonymise it.
Use of processors and third parties
We use carefully selected third party service providers to support our operations. These may include payment processing providers, IT and system support companies, security and CCTV maintenance providers, cloud storage and backup providers and professional advisers such as accountants or legal advisers.
Where these third parties process personal data on our behalf, they act as data processors and are only permitted to process your data in accordance with our instructions, for the purposes we specify and subject to contractual obligations to protect your data. We do not sell your personal data to third parties.
In certain circumstances, we may also need to share personal data with law enforcement agencies, regulatory bodies, courts or other authorities where required by law or where necessary to protect our rights or the rights of others.
International data transfers
In some cases, personal data may be stored or processed outside the United Kingdom, for example where our service providers use servers located in other countries. Where this happens, we will ensure that appropriate safeguards are in place to protect your data, such as using countries recognised as providing an adequate level of protection or relying on contractual safeguards approved under data protection law.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, access controls, secure storage systems and procedures designed to restrict access to personal data to those who need it for legitimate business purposes.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
Right of access You have the right to request confirmation as to whether we process your personal data and to receive a copy of that data, together with information about how it is used.
Right to rectification You have the right to ask us to correct inaccurate or incomplete personal data about you.
Right to erasure In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent.
Right to restriction You may ask us to restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to object You may object to processing based on our legitimate interests, including certain types of marketing, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds to continue.
Right to data portability Where processing is based on your consent or on a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used format and, where technically feasible, transmit it to another controller.
Right to withdraw consent Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any updated version will take effect from the date it is made available and will apply to all Storage Upminster Bridge customers in the Upminster Bridge area from that date onwards.
