Storage Chislehurst Privacy Policy
This Privacy Policy explains how Storage Chislehurst collects, uses, stores and protects personal data relating to our customers and prospective customers in the Chislehurst area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Chislehurst customers and any individuals who make enquiries, obtain quotes, visit our premises, or otherwise interact with us in relation to our storage services in the area.
Who We Are And Scope Of This Policy
Storage Chislehurst is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data. This Privacy Policy covers all personal data we process in connection with providing self storage and related services to customers in the Chislehurst area, including when you contact us, request information, sign a storage agreement, access your storage unit, or make payments.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you interact with Storage Chislehurst in the area.
Identification and contact details. This includes your name, postal address, billing address, contact address, and any alternative contact details you choose to provide to us. It also includes any identification data you provide for security or verification purposes, such as a copy or details of a photographic ID document and proof of address, where required.
Account and contract information. This includes details about your customer account with Storage Chislehurst, your storage unit number, the term of your storage agreement, your access permissions, details of your bookings or reservations, and any correspondence relating to your contract or service requests.
Payment and transaction information. We may collect data relating to your payments and invoices for our storage services, such as transaction amounts, payment dates, payment methods, and relevant billing records. We do not retain your full card details when payments are processed by secure third party payment processors.
Security and access information. In order to protect the security of our site and your stored goods, we may collect records of access to the premises, including gate or door entry logs, time and date of access, key fob or code usage, and, where in operation, CCTV footage from cameras located in and around our premises.
Communication and enquiry records. When you contact Storage Chislehurst, we may keep records of your communications with us, including enquiries, complaints, feedback, quotations, and any information you voluntarily provide during those interactions.
Website and technical data. If you use our website, we may collect limited technical information such as your IP address, device or browser type, and details about how you use our website. This is used to help us maintain and improve our online services and ensure security.
Lawful Basis For Processing
Storage Chislehurst processes your personal data only where we have a lawful basis to do so under the UK GDPR. Depending on the context, we may rely on the following lawful bases.
Performance of a contract. We process personal data where it is necessary to enter into or perform a storage agreement with you, including to manage your booking, provide access to your storage unit, process payments, and communicate with you about your account and services.
Compliance with a legal obligation. We process certain personal data to comply with our legal and regulatory obligations, including record keeping, tax and accounting requirements, and obligations to law enforcement or other public authorities where applicable.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include securing our premises and property through access control and CCTV, preventing and investigating fraud or misuse, managing and improving our services, and communicating with existing customers about service-related matters.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes.
To provide storage services to you, including setting up your account, preparing your contract, arranging and managing your storage unit, processing your payments, and handling any service requests or queries.
To operate and secure our premises, including managing access control systems, maintaining records of site access, and operating CCTV systems where used for security, safety and incident investigation.
To manage our relationship with you, including notifying you of changes to our terms or policies, sending service and billing communications, responding to your enquiries, and dealing with complaints or disputes.
To manage our business operations, including internal administration, accounting, audit, reporting, and the improvement of our services and customer experience.
To comply with applicable laws and regulations, including responding to lawful requests from public authorities where we are legally obliged to do so.
Data Retention
Storage Chislehurst will retain your personal data only for as long as is necessary for the purposes for which it was collected, and in line with our legal and regulatory obligations.
Customer account and contract data, including your contact details, storage contract information, and billing records, will usually be kept for the duration of your contract and for a period after your contract ends, to comply with legal and tax requirements, to respond to queries or disputes, and to maintain accurate records. This retention period will generally not exceed six years after the end of your contract unless a longer period is required by law or necessary in connection with a legal claim.
CCTV footage and access records, where collected, are retained for a limited period that is appropriate for security and incident investigation purposes, unless a specific recording or record needs to be kept for longer due to an ongoing investigation, dispute, or legal requirement.
Enquiry and communication records that do not result in a contract may be retained for a reasonable period to manage our interactions with you and to understand demand for our services, after which they are securely deleted or anonymised.
Data Processors And Sharing Of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to support the operation of Storage Chislehurst services in the area and are required to process your data only in accordance with our instructions and to implement appropriate security measures.
Examples of such processors may include payment processing providers who handle card transactions, information technology service providers who host or support our systems, providers of access control and security systems, and professional advisers who support our legal and accounting obligations. We remain responsible for the acts and omissions of our processors in relation to your personal data.
We may also share your personal data with third parties where required by law, for example with law enforcement agencies, regulators, tax authorities, or courts, or where it is necessary to establish, exercise, or defend legal claims. We do not sell your personal data to third parties.
International Data Transfers
Where any of our processors or service providers are located outside the United Kingdom, or use data centres in other countries, we will ensure that appropriate safeguards are in place for any international transfers of personal data in accordance with the UK GDPR. This may include the use of standard contractual clauses or other legally recognised transfer mechanisms to ensure your data is adequately protected.
Your Data Protection Rights
Under the UK GDPR, you have several rights in relation to your personal data held by Storage Chislehurst.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data together with information about how it is used.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing. You may request that we restrict our processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Right to data portability. In certain circumstances, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before your withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Security Of Your Personal Data
Storage Chislehurst takes appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include physical security at our premises, access controls, secure storage of records, and the use of secure systems and protocols when handling your information. While we take reasonable steps to protect your personal data, no system can be guaranteed as completely secure.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other reasons. When we make material changes, we will take appropriate steps to inform you, such as updating the information at our premises or on our website. The most recent version of this Privacy Policy will always apply to the personal data that we hold about you.
