Storage Gidea Park Privacy Policy
This Privacy Policy explains how Storage Gidea Park collects, uses, stores and shares personal data relating to our customers and prospective customers in the local area. It also explains your data protection rights under the UK General Data Protection Regulation and related data protection laws. By using our storage services or contacting us about them, you acknowledge that you have read and understood this Privacy Policy.
Scope and who this applies to
This Privacy Policy applies to all Storage Gidea Park customers and prospective customers in our service area, including individuals, sole traders and representatives of business customers. It covers personal data that we collect directly from you, that we generate about you when providing our services, and that we receive from third parties in connection with your use of our services.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The main categories of personal data we may collect include:
Identification and contact details, such as your name, postal address, billing address, contact address, and other contact preferences.
Account and contract information, such as customer reference numbers, storage unit details, rental start and end dates, price and payment terms, and communication records relating to your contract.
Payment and billing information, such as payment method, billing history and details required for invoicing. We do not store full card details when payments are processed through secure payment providers, but we may retain transaction references and partial details necessary for reconciliation and records.
Usage and operational data, such as access logs to the facility, dates and times of entry, unit allocation, and records of customer service interactions, including enquiries, complaints and requests.
Security and safety information, which may include vehicle registration numbers and images captured by on-site security systems where installed, for the purposes of site security and the protection of property and persons.
Marketing and preference information, such as your preferences for receiving marketing communications from us and records of your consents or objections.
How we collect your data
We collect personal data in a number of ways, including:
Directly from you when you contact us, request a quotation, sign a storage agreement, make a booking, make a payment, raise a query, visit our premises or communicate with us by any means.
Automatically when you use our facilities, for example through access control systems, security systems where installed, and internal systems used to manage your account and your use of the storage units.
From third parties, such as payment service providers, credit checking services where used, and, in some cases, business partners who may refer you to us. In such cases, the third party will usually have their own legal basis for sharing your data with us.
Lawful basis for processing
We only process your personal data where we have a lawful basis to do so under data protection laws. The main lawful bases we rely on are:
Contract: We process personal data that is necessary to enter into, manage and fulfil our contract with you, including setting up your account, administering your storage agreement, taking payments and providing customer support.
Legal obligation: We process certain data in order to comply with legal requirements, such as tax and accounting rules, health and safety obligations, law enforcement requests and other regulatory duties.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This includes securing and managing our premises, preventing and detecting fraud or crime, defending legal claims, improving our services and maintaining accurate records.
Consent: Where required by law, we may rely on your consent to send you certain forms of marketing communication or to carry out specific activities that are not covered by another lawful basis. When we rely on consent, you may withdraw it at any time.
How we use your personal data
We use personal data for the following purposes:
To provide storage services, including processing enquiries, setting up and managing your account, issuing invoices, processing payments, managing access to your unit and communicating with you about your contract and our services.
To communicate with you, including responding to your questions or requests, providing service updates, and sending you information about changes to our terms, policies and facilities.
To manage our business operations, including scheduling, capacity management, financial planning, staff training, and internal reporting and administration.
To maintain the safety and security of our premises, customers and staff, including through access control systems, incident reporting and, where used, security systems designed to protect property and prevent crime.
To comply with legal and regulatory obligations, including retention of certain records for tax and accounting purposes and responding to lawful requests from public authorities.
To send you marketing communications about our services or related offerings, where permitted by law and in line with your marketing preferences. You have the right to opt out of marketing at any time.
Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, and in line with applicable legal, accounting and regulatory requirements.
In practice this means that we typically retain:
Contract and account records for a period after your storage agreement ends, in order to handle any disputes, queries or claims and to meet our legal obligations for tax and financial record keeping.
Payment and invoicing records for the statutory retention period required by tax and accounting laws.
Security and access records for a period that allows us to investigate incidents, enforce our terms and assist law enforcement where required. Retention periods for such data are set based on risk and legal requirements.
Marketing records and preference information until you opt out or until we determine that the data is no longer accurate or necessary. If you withdraw consent or object to marketing, we will retain limited information to record your preference.
When personal data is no longer required for the purposes set out in this Privacy Policy and is not required by law, we will securely delete or anonymise it.
Sharing your personal data and processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data according to our instructions and are required to keep it secure and confidential. Categories of processors we may use include:
Payment service providers that process card payments and other transactions.
IT and systems suppliers who provide hosting, maintenance, storage management software and other technical services.
Professional advisers such as accountants, auditors, legal advisers and insurers who assist us in running our business and managing risk.
Security service providers, where engaged, who support the security of our premises and systems.
We may also share personal data with other third parties in the following circumstances:
With public authorities, law enforcement bodies or regulators when required to comply with legal obligations or to protect our rights, property or safety, or those of our customers or others.
With debt recovery agencies or legal representatives in connection with the recovery of unpaid amounts or the enforcement of our rights under our contract with you.
With potential buyers or business partners in the event of a proposed merger, acquisition or other business transaction, in which case we will take steps to ensure that your data remains protected.
We do not sell your personal data.
International transfers
Where our use of processors or service providers involves transferring your personal data outside the UK or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses or other legally recognised mechanisms that ensure your data is afforded an equivalent level of protection.
Your data protection rights
Under data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These include:
Right of access: You have the right to obtain confirmation that we process your personal data and to request a copy of that data.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction: You may request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
Right to data portability: You may have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another controller, where technically feasible.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. You also have the right to object at any time to the use of your data for direct marketing.
Right not to be subject to automated decisions: You have the right not to be subject to a decision based solely on automated processing that significantly affects you, unless certain conditions apply.
To exercise any of these rights, you can contact us using the contact methods you normally use for dealing with Storage Gidea Park. We may need to verify your identity before responding to your request. We will respond within the time limits set by law.
Complaints and how to contact us
If you have any questions about how we handle your personal data, or if you wish to make a complaint about our use of your data, you can raise this with us using your usual Storage Gidea Park contact details. We will investigate and attempt to resolve any concerns you raise.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are not satisfied with our response or believe that your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in law and regulatory guidance. When we make significant changes, we will take appropriate steps to inform you, which may include updating the version on our website or providing you with a copy by other means. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal data.
