Storage Willesden Privacy Policy
This Privacy Policy explains how Storage Willesden collects, uses, stores, and protects personal data of all Storage Willesden customers in our service area. It also explains your rights under the United Kingdom General Data Protection Regulation and the Data Protection Act. By using our services, visiting our premises, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Scope and who this policy applies to
This Privacy Policy applies to all Storage Willesden customers in the area served by our storage facilities, as well as prospective customers, website visitors, and any individuals who contact us with enquiries about our services. It covers personal data processed in connection with the provision, management, and marketing of our storage services.
Types of personal data we collect
We may collect and process the following categories of personal data about you:
Identification information such as full name, date of birth, and a form of identification when required for security or contractual purposes.
Contact details such as postal address, billing address, and other contact information you choose to provide so that we can manage your account and communicate with you.
Account and contract information such as storage unit details, contract start and end dates, payment history, and correspondence related to your use of our services.
Payment information such as limited payment card or bank details used to process payments, subject to appropriate security and in line with payment industry standards. In some cases, third party payment processors may handle this information directly.
Usage and technical data such as records of your interactions with us, including enquiries, call notes, appointment bookings, and website usage data such as pages visited, time and date of access, and the type of device or browser used.
Security and access data such as access codes, entry and exit logs, and recordings from any closed circuit television systems in and around our premises where these are used for security and safety purposes.
Marketing preferences such as your choices about receiving information about our services, promotions, and updates.
How we collect your personal data
We collect personal data in various ways, including:
Directly from you when you sign up for a storage unit, request a quote, complete a form, visit our facilities, or contact us by post or online.
Automatically when you use our website, through the use of cookies and similar technologies, which may collect technical and usage information as described above.
From third parties where lawful, such as payment service providers, referral partners, or credit reference agencies, when this is necessary for contract, fraud prevention, or compliance purposes.
Lawful basis for processing your data
We process your personal data only where we have a lawful basis to do so. Depending on the context, the lawful basis may be:
Contract performance to take steps at your request prior to entering into a storage agreement, to set up and manage your account, to provide storage services, process payments, and handle customer service enquiries and complaints.
Legal obligation to comply with legal and regulatory requirements, such as tax, accounting, law enforcement requests, or obligations to maintain certain records.
Legitimate interests to operate, manage, and improve our business, for example to secure our premises, monitor use of facilities, prevent fraud, manage customer relationships, and understand how our website and services are used, provided these interests are not overridden by your rights and freedoms.
Consent where you have given us clear and informed consent to process your data for a specific purpose, such as certain marketing communications. You can withdraw consent at any time, but this will not affect the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services, including creating and administering your account, managing bookings, handling payments, and sending service communications relevant to your contract.
To communicate with you, respond to enquiries, provide customer support, and send important service updates or notifications relating to safety, access, or changes to our terms.
To maintain security and safety, including monitoring access to our premises, preventing unauthorised entry, and protecting people, property, and assets.
To manage our business operations, including audits, billing, financial planning, and internal reporting.
To improve and develop our services and website, for example by analysing aggregated usage data and feedback to enhance customer experience.
To carry out direct marketing, where lawful, to inform you about services, offers, or related products that may be of interest to you, respecting your marketing preferences and rights to opt out.
Data sharing and processors
We may share your personal data with carefully selected third parties who act as processors on our behalf. These service providers help us operate our business and deliver our services. Categories of processors may include:
Information technology and hosting providers who support our websites, systems, and data storage.
Payment processors and financial service providers who facilitate secure payment transactions and related services.
Customer service and communication tools used to manage enquiries, bookings, and account communications.
Professional advisers such as accountants or legal advisers where necessary to comply with legal obligations or to protect our legitimate interests.
Security service providers where we use third parties to manage security systems or access control.
We require all processors to process personal data only on our documented instructions, to implement appropriate security measures, and to respect the confidentiality and integrity of your data. We do not sell your personal data to third parties.
We may also disclose personal data where required by law, regulatory authorities, or law enforcement agencies, or in connection with legal proceedings, or where necessary to protect our rights, safety, or property.
International transfers
If we transfer personal data outside the United Kingdom to countries that do not provide the same level of data protection, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses or other mechanisms recognised by data protection law. You can request more information about any such safeguards where relevant.
Data retention and storage
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. In determining appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and applicable legal obligations.
Typically, we retain contract and billing records for a period required by tax and accounting laws after the end of your relationship with us. Access logs and security recordings may be kept for shorter periods unless required longer for investigation or legal reasons. Marketing data is generally retained while you remain an active customer or have not withdrawn consent or objected to such processing.
When data is no longer required, we will delete it securely or anonymise it so that it can no longer be associated with you.
Data security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, staff training, and regular review of our security practices. While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure.
Your data protection rights
Under data protection law, you have several rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access you can request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you, along with information about how we use it.
Right to rectification you can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure you can request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction you can ask us to restrict our processing of your personal data in certain situations, such as while we verify the accuracy of the data or consider an objection.
Right to object you can object to processing based on our legitimate interests or for direct marketing. We will then stop processing your data for these purposes unless we have compelling legitimate grounds or need it for legal claims.
Right to data portability you can request that we provide certain personal data to you or another controller in a structured, commonly used, machine readable format, where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so that we can try to resolve any issues.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Updated versions will be made available and the date of the latest revision will be indicated. You should review this policy periodically to stay informed about how we protect your personal data.
