Storage Charing Cross Privacy Policy
This Privacy Policy explains how Storage Charing Cross collects, uses, stores and protects personal data of all Storage Charing Cross customers in the local area. It also explains your rights under the UK General Data Protection Regulation and other applicable data protection laws. By using our services, visiting our premises, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Charing Cross customers and prospective customers in our service area, including individuals, sole traders and representatives of corporate clients. It covers personal data collected through our storage facilities, written and verbal communications, invoices and contracts, as well as any other lawful interactions related to our services.
Data Controller
Storage Charing Cross is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. The categories of data we may collect include:
Identification data such as full name, title, date of birth and, where required for verification, identification document details.
Contact details such as billing address, storage unit address, postal address and, where provided, other contact information used for invoicing and service communication.
Account and contract details such as customer reference number, contract start and end dates, storage unit details, access permissions, payment history, arrears information and communication records relating to your contract.
Financial and transaction data such as information relating to payments, bank transfers, card transactions and refunds, processed through our chosen payment processors.
Security and access data such as CCTV recordings on and around our premises, access logs for entry systems, incident records, and information relating to lost keys or access devices.
Correspondence and enquiry data such as information you provide when you contact us, raise a query, submit a complaint, request a quote or give feedback about our services.
How We Collect Your Data
We collect personal data directly from you when you request information about our services, enter into a storage agreement, make a payment, visit our premises or communicate with us by any channel. We may also receive data indirectly from third parties, for example from payment providers, debt collection partners, or corporate clients who authorise you to access a storage unit.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are:
To provide storage services and manage your contract, including setting up your account, allocating your storage unit, managing access rights, processing payments and communicating with you about your contract. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To meet our legal and regulatory obligations, for example maintaining accounting records, complying with tax rules, responding to lawful requests from authorities and assisting with the prevention and detection of crime on our premises. The lawful basis is compliance with a legal obligation.
To protect the security of our premises, customers, staff and property, including the use of CCTV, access logs and incident records. The lawful basis is our legitimate interests in maintaining a safe environment and preventing fraud and crime.
To manage our business operations, such as handling complaints, collecting unpaid invoices, exercising or defending legal claims, maintaining records and improving our services. The lawful basis is our legitimate interests in efficiently running our business and protecting our rights.
To send you relevant service communications, including notices about changes to your contract, terms and conditions, or this Privacy Policy. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about important information relating to your storage services.
Where we rely on legitimate interests, we balance those interests against your fundamental rights and freedoms and only proceed where we consider the impact on your privacy to be minimal and proportionate.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements. The specific retention periods may vary according to the type of data and the applicable legal obligations.
In general, we retain core contract, billing and payment information for a period necessary to comply with financial and tax regulations and to handle any legal claims related to your contract. CCTV recordings and access logs are retained for shorter periods, unless an incident has occurred that requires us to keep them longer for investigation or legal purposes.
When we no longer need your personal data, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services necessary for the operation of our business, such as payment processing, accounting, secure data storage, CCTV system maintenance and debt collection services.
All processors are required to process your personal data only on our instructions, to keep it confidential, to implement appropriate technical and organisational security measures, and to comply with data protection law.
We may also share your personal data with other third parties acting as independent controllers where this is necessary, for example with professional advisers, insurers, courts, law enforcement authorities and regulators. Such sharing will take place only where there is a lawful basis and when it is strictly necessary for the purpose in question.
International Data Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or where data is accessed from such locations, we will ensure that appropriate safeguards are in place to protect your personal data. These may include entering into data transfer agreements based on recognised standard contractual clauses or relying on other lawful transfer mechanisms as permitted by data protection law.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures include controlled access to our premises, CCTV monitoring, secure storage systems, restricted access to personal data for authorised staff and processors only, and regular review of our security arrangements.
While we take reasonable steps to protect your personal data, no system can be completely secure. We therefore cannot guarantee absolute security, but we are committed to responding promptly and transparently to any suspected personal data breach in line with legal requirements.
Your Data Protection Rights
Under data protection law, you have several rights in relation to your personal data. These rights apply to all Storage Charing Cross customers in our area, subject to certain legal limitations and exemptions.
You have the right of access, which allows you to request confirmation of whether we process your personal data and to receive a copy of that data along with certain information about how we process it.
You have the right to rectification, which allows you to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
You have the right to erasure, sometimes known as the right to be forgotten, which allows you to request that we delete your personal data where there is no longer a lawful basis for us to keep it.
You have the right to restrict processing, which allows you to request that we limit the way we use your personal data in certain circumstances, for example while we are investigating a concern you have raised about its accuracy.
You have the right to data portability, which allows you to request that we provide certain personal data to you or to another controller in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
You have the right to object to processing based on our legitimate interests, including processing for security or business management purposes, where you believe your rights and interests outweigh our reasons for processing. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is necessary for legal claims.
Where we rely on consent for any processing activity, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. The current version will always be available at our premises or through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
