Storage Upton Privacy Policy
This Privacy Policy explains how Storage Upton collects, uses, stores, and protects personal data relating to our customers and prospective customers in our service area. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all Storage Upton customers and individuals who enquire about or use our storage and related services in our operating area, whether you interact with us in person, by phone, or online.
Who We Are and Scope of this Policy
Storage Upton is a provider of storage and related services to residential and business customers. For the purposes of data protection law, Storage Upton is the controller of the personal data described in this Privacy Policy. This means that we determine the purposes and means of processing your personal data.
This Privacy Policy covers personal data relating to individual customers, individuals acting on behalf of business customers, prospective customers, and any other individuals who contact or interact with Storage Upton in connection with our services.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details such as your name, postal address, billing address, contact address, and any other addresses you choose to provide, together with information such as your date of birth where required, and your communication preferences.
Account and contract information such as customer account numbers or references, details of your storage unit or service plan, start and end dates of your contract, access permissions, correspondence about your account, and records of your communications with us.
Payment and billing information such as amounts owed and paid, payment methods you use, invoices, payment confirmations, and related transaction records. Where necessary, we may receive limited information from payment service providers or banks about your transactions.
Usage and access information such as records of when you access our premises or storage units, access control data, and any key or code allocation information that is linked to your account.
Security and CCTV information such as images captured on CCTV systems located at or around our premises, used for security, safety, and crime prevention purposes, together with logs of any security incidents or accidents recorded on our systems.
Communication information such as emails, letters, and other communications you send to us, as well as notes of conversations, enquiries, complaints, or feedback you provide and our responses to you.
Marketing information such as your marketing preferences and records of whether you have opted in or out of receiving certain types of marketing communication about our services.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the circumstances, this may include:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, such as to set up and administer your storage agreement, take payment, provide access to your unit, manage your account, and handle your enquiries related to your contract.
Legal obligation: We process certain information where we are required to do so by law, such as for tax and accounting purposes, for responding to lawful requests from authorities, and to comply with health and safety, security, and other regulatory obligations.
Legitimate interests: We process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include maintaining and improving our storage services, ensuring the safety and security of our premises, investigating potential fraud or misuse, defending legal claims, and managing our business operations and records.
Consent: In some cases, we may rely on your consent, for example for certain types of direct marketing, where this is required by law. Where we rely on consent, you may withdraw your consent at any time, without affecting the lawfulness of any processing carried out before you withdrew it.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage our storage and related services, including setting up and managing accounts, allocating units, facilitating access, communicating about bookings and renewals, and providing customer support.
To handle payments and billing, including issuing invoices, taking payments, processing refunds where applicable, managing payment plans, and maintaining financial records.
To ensure security and safety at our premises, including monitoring and controlling access, using CCTV systems where in place, investigating incidents, and taking steps to protect our customers, staff, property, and assets.
To manage our relationship with you, including responding to your enquiries, complaints, and feedback, notifying you of important changes to our services or terms, and keeping your contact details up to date.
To comply with legal and regulatory requirements, including maintaining financial and tax records, responding to lawful requests from public authorities, and meeting our responsibilities relating to health, safety, and security.
To conduct business administration and planning, including internal reporting and analysis, auditing, quality assurance, and where appropriate, to help improve our services and customer experience.
To send you marketing communications, where permitted by law and in line with your preferences, about our services and any offers that we believe may be of interest to you. You may opt out of marketing communications at any time.
Data Retention
We retain your personal data only for as long as it is reasonably necessary for the purposes set out in this Privacy Policy and to meet our legal, regulatory, and reporting obligations.
In general, we retain customer account and contract information for a period after your contract or last interaction with us, to deal with any queries, disputes, or legal claims, and to comply with legal and tax requirements. CCTV images, where used, are retained for a limited period unless they are needed for the investigation of an incident, in which case they may be kept for longer.
When personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymise it.
Sharing Your Personal Data and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties, where necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so.
We may use third party service providers as processors to carry out certain processing activities on our behalf. These may include providers of payment processing and banking services, IT and cloud storage services, customer management systems, security and CCTV system providers, maintenance and support services, and professional advisers such as accountants or legal advisers.
Where we engage processors, they act only on our instructions, are bound by contractual obligations to protect personal data, and are not permitted to use the data for their own purposes.
We may also share personal data with public authorities, law enforcement, or regulators where required by law or where we reasonably believe it is necessary to protect our rights, your safety, or the safety of others.
International Transfers
Where we use service providers located outside the United Kingdom or where data may be stored or accessed from outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place, such as relying on an adequacy decision or using legally approved standard contractual clauses, together with additional measures where required to protect your personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:
The right of access: You have the right to request confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you, together with certain information about how we use it.
The right to rectification: You have the right to request that we correct any inaccurate personal data we hold about you and to have incomplete data completed.
The right to erasure: In certain circumstances, you may request that we delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
The right to restriction: In certain situations, you may request that we restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.
The right to object: You may object at any time to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. You also have the right to object at any time to the use of your personal data for direct marketing.
The right to data portability: In some cases, you may request that we provide your personal data in a structured, commonly used, and machine readable format and that we transmit it to another controller where this is technically feasible.
Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your rights or have questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our website or at our premises. We will respond to your request in accordance with applicable data protection laws.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your privacy rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any updates will be made available where you normally access this Privacy Policy, and the revised version will apply from the date it is posted.
We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data at Storage Upton.
