Storage Silvertown Privacy Policy
This Privacy Policy explains how Storage Silvertown collects, uses, stores, and protects personal data relating to customers and prospective customers. It applies to all Storage Silvertown customers and users of our services in our operating area, whether you contact us online, by post, or in person at our facilities.
We are committed to processing personal data in accordance with the UK General Data Protection Regulation and other applicable data protection laws. This Privacy Policy is intended to provide clear and transparent information about our data processing activities and about your rights.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identification and contact data such as full name, postal address, billing address, current address, previous address where relevant, and other contact details such as online identifiers provided through our contact forms.
Customer account and contract data such as unit numbers, contract start and end dates, rental terms, payment status, correspondence related to your booking, and details of services you have requested or purchased from us.
Payment and billing data such as payment method details, billing history, invoices, credit and debit transaction information, and records of payments made through our chosen payment providers. We do not store full card details where this is not necessary for the processing of payments.
Verification and security data such as copies or details of identification documents, date of birth where required by law or for fraud prevention, vehicle registration numbers used on site, and records related to access control systems such as entry logs.
Communication data such as enquiries, complaints, feedback, and any other communications you send to us, including messages submitted through contact forms or recorded during telephone conversations where applicable.
Technical and usage data such as device information, approximate location data, and usage information relating to our website or online booking tools, to the extent that this data constitutes personal information under data protection law.
Closed Circuit Television CCTV images may be collected in and around our facilities to promote the security of our sites, our customers, and their property. Signage will inform you where CCTV is in operation.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. The main purposes and corresponding lawful bases are:
To provide storage services and manage your account. This includes setting up and administering your contract, processing bookings, organising access to your unit, managing payments, and providing customer service. The lawful basis is performance of a contract and taking steps at your request before entering into a contract.
To comply with legal and regulatory obligations. We may process your data to meet tax, accounting, and reporting obligations, to assist law enforcement where required, and to meet record keeping requirements relating to security and safety. The lawful basis is compliance with a legal obligation.
To protect our legitimate interests. We may process data to protect the security of our premises, property, staff, and customers, to prevent and investigate fraud, to manage disputes and recover debts, to improve our services, and to manage our business operations. The lawful basis is our legitimate interests, balanced against your rights and freedoms.
To communicate with you about your account and services. We will use your contact details to send important information about your contract, access to your unit, payment reminders, or changes to our terms and policies. The lawful basis is performance of a contract and legitimate interests in keeping you informed.
To send you marketing communications about our services where you have agreed to receive them or where we are permitted to do so by law. You can object to or opt out of marketing at any time. The lawful basis is consent or legitimate interests, depending on the circumstances.
Where we rely on consent as the lawful basis for processing, you may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or to meet legal, accounting, or reporting requirements. The length of time we keep your data will depend on the type of information and the basis on which it is processed.
Contract and billing records relating to your storage agreement are usually retained for a number of years after the contract ends to comply with tax and accounting regulations, to handle any legal claims, and to respond to queries about past services.
Identification and verification records may be kept for a period after the end of your contract where this is required for fraud prevention, security, or legal compliance.
Security and access information such as CCTV recordings and entry logs are generally retained for a shorter period, unless they are required in connection with an incident or investigation, in which case they may be kept for longer.
Marketing preference data and basic contact details may be kept until you object or unsubscribe, or for a period after your last interaction with us, in accordance with applicable direct marketing rules.
When we no longer need personal data, we will securely delete or anonymise it so that it can no longer be linked to an identifiable person.
Sharing of Personal Data and Use of Processors
We do not sell your personal data. We may share personal data with trusted third parties where this is necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place.
We may use external service providers as data processors to support our operations. These may include payment processing providers, customer management system providers, IT hosting and support providers, document storage providers, and security service providers including CCTV and access control system operators.
Data processors act only on our documented instructions and are contractually required to implement appropriate technical and organisational measures to protect personal data and to assist us in meeting our data protection obligations.
We may also share data with professional advisers such as legal and accounting professionals, insurers, and with law enforcement or regulatory authorities where required by law or in connection with the prevention or investigation of crime or fraud.
If personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other recognised transfer mechanisms, and that your rights are protected.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data that we hold about you. These rights apply in many situations, although they may be subject to certain conditions or exemptions.
You have the right of access. This means you can request confirmation of whether we process your personal data and receive a copy of that data, along with information about how it is processed.
You have the right to rectification. You can request that inaccurate or incomplete personal data is corrected or updated.
You have the right to erasure in certain circumstances. This is sometimes known as the right to be forgotten. It applies, for example, where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis to continue processing.
You have the right to restrict processing in specific situations, such as where you contest the accuracy of the data or object to our legitimate interests and we are considering your request.
You have the right to object to processing based on our legitimate interests, including profiling based on those interests, and to object to direct marketing at any time.
You have the right to data portability in relation to certain data that you have provided to us, where the processing is based on consent or on a contract and is carried out by automated means. You can request to receive this data in a commonly used, machine readable format or for it to be transmitted to another controller where technically feasible.
Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, the supervisory authority is the Information Commissioners Office. We encourage you to contact us first so that we can try to resolve your concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our processing activities, or applicable law. The updated version will be made available through our usual communication channels and will take effect from the date of publication. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
By using our services after any changes to this Privacy Policy, you acknowledge that you have been informed of the updated terms.
