Storage Cricklewood Privacy Policy
This Privacy Policy explains how Storage Cricklewood collects, uses, stores and protects personal data relating to customers and prospective customers in the Storage Cricklewood service area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Cricklewood customers and prospective customers located in our operating area, including individuals and business clients who use or enquire about our storage facilities, whether in person, by phone, online, or through any other communication channel we make available.
Data Controller
Storage Cricklewood is the data controller in respect of the personal data processed in connection with our storage services. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data: name, title, date of birth, proof of identity details contained in documents you present to us for verification purposes.
Contact details: postal addresses, billing addresses, service addresses, and other address information, as well as any contact details you choose to provide, such as your preferred communication channel.
Contract and account information: information relating to your storage unit, rental agreements, invoices, payment history, correspondence with us, and records of your interactions with our staff.
Payment and transaction data: information relating to your payments such as transaction records and billing amounts. We do not store full payment card details; where payment is made by card, limited card information may be processed by our payment service providers.
Security and access information: information captured for site safety and security purposes, including vehicle registration numbers, access control logs, and CCTV footage captured at or near our premises.
Communication data: information provided when you contact us, make an enquiry, submit a complaint, request a quote, or give feedback regarding our services.
Technical data: limited technical information relating to your use of our online services, such as IP address and basic device or browser information, to support service delivery, troubleshooting and security.
Lawful Bases for Processing
We will only process your personal data where we have a valid lawful basis, which may include the following:
Contract: We process personal data when it is necessary to enter into or perform a contract with you, including setting up your storage account, managing your booking, administering your storage unit, handling payments, and providing customer service.
Legal obligation: We may process and retain personal data where necessary to comply with legal and regulatory obligations, for example, relating to tax, accounting, fraud prevention, crime prevention, or responding to lawful requests from public authorities.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your data protection rights. These interests may include the operation and improvement of our storage facilities, ensuring site security and safety, protecting our property and that of our customers, managing our business relationships, and maintaining accurate records.
Consent: In limited cases, we may rely on your consent, such as where we choose to send you certain types of marketing communications or where we retain optional information you provide. When we rely on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services: including processing enquiries and bookings, setting up and managing your account, granting and managing access to units, issuing invoices, processing payments, and handling renewals or terminations.
To communicate with you: including responding to your questions, sending administrative messages about your account or contract, informing you of changes to our policies or services, and sending service-related notices.
To manage our premises and security: including operating access control systems, monitoring CCTV for safety, security, and crime prevention, protecting our staff and customers, and ensuring compliance with site rules.
To manage our business: including maintaining internal records, conducting audits, managing financial and accounting processes, and improving our services based on feedback and usage patterns.
To comply with legal requirements: including maintaining records for tax and accounting purposes, responding to lawful requests from authorities, and cooperating with law enforcement when required.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Customer account and contract records: retained for the duration of your contract and for a defined period afterwards to address queries, handle disputes, and comply with legal and accounting obligations.
Financial and transaction records: retained for the period required by tax and accounting laws.
CCTV and access control logs: retained for a limited period necessary for security and incident investigation, unless a longer retention period is justified due to a specific incident or legal requirement.
Marketing and enquiry data: retained for a reasonable period after your last interaction with us or until you opt out or object, whichever occurs first, unless a longer period is required by law or appropriate for the defence of legal claims.
When personal data is no longer required, we will take appropriate steps to delete it securely or anonymise it so that it can no longer identify you.
Data Processors and Third Parties
We may share your personal data with carefully selected service providers who act as data processors on our behalf. These processors may provide services such as payment processing, secure data storage, IT and system support, CCTV system maintenance, accounting support, and other operational services enabling us to deliver our storage services.
Processors are only permitted to process your personal data in accordance with our written instructions and for the purposes described in this Privacy Policy. We require all processors to implement appropriate technical and organisational measures to protect your data and to comply with applicable data protection laws.
We may also share your personal data with other third parties in the following circumstances:
Where required by law or regulation, or in response to a lawful request from a public authority or law enforcement body.
Where necessary for the establishment, exercise, or defence of legal claims, or in connection with legal proceedings.
In the context of a business reorganisation, sale, or transfer of all or part of our business, in which case your personal data may be disclosed to prospective or actual purchasers, subject to appropriate confidentiality obligations.
We do not sell your personal data.
International Transfers
Where we engage service providers located outside the United Kingdom or the European Economic Area, or where data may be accessed from such locations, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent measures, to protect your personal data and ensure compliance with applicable data protection laws.
Your Data Protection Rights
Under data protection law, you have certain rights regarding your personal data. Subject to applicable legal conditions and exemptions, these may include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected or updated.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You can request that we restrict the processing of your personal data in specific situations, for example while we assess a request for rectification or objection.
Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
Right to object: You can object at any time to the processing of your personal data based on our legitimate interests, including profiling on that basis, and we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is needed for legal claims. You also have the right to object at any time to processing for direct marketing, in which case we will stop such processing.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
Security of Your Personal Data
We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include physical security controls at our premises, access controls to our systems, staff training, and regular review of our security practices. However, no system is completely secure and we cannot guarantee absolute security of your data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any revised version will be made available through our usual communication channels and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
Contact and Further Information
If you have any questions about this Privacy Policy or how Storage Cricklewood processes your personal data, or if you wish to exercise any of your data protection rights, you can contact us using our published contact details. We will respond to your request in accordance with applicable data protection laws.
