Storage Surrey Quays Privacy Policy
This Privacy Policy explains how Storage Surrey Quays collects, uses, discloses, and protects personal data relating to customers and prospective customers. It applies to all Storage Surrey Quays customers and users of our services in the Surrey Quays area, including individuals, sole traders, and business customers where personal data is involved.
Storage Surrey Quays is committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. We respect your privacy and process your personal data lawfully, fairly, and transparently.
Scope of this Privacy Policy
This Privacy Policy covers personal data we collect in connection with:
• Enquiries about our storage services and related offerings
• Quotations, bookings, and contracts for storage or associated services
• On-site visits to our storage facilities in the Surrey Quays area
• Communications with us by any channel, including in person, by post, or online
• Our management of accounts, billing, and customer support
By using our services or providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We may collect and process the following categories of personal data, where relevant to the services you use:
• Identity data, such as name, title, and identification details where required for security or verification
• Contact data, such as correspondence address and any other contact details you choose to provide
• Contract and account data, such as storage unit details, lease or licence information, move-in and move-out dates, payment history, and correspondence records
• Financial and payment data, such as payment transaction details and billing information (we do not store full card details if processed through a secure payment provider)
• Security and access data, such as access logs, entry times, CCTV footage on and around the premises, and records of incidents or security checks
• Technical and usage data, where applicable, such as your interactions with any of our online tools or platforms relating to quotes, bookings, or account management
• Marketing preferences, such as your choices about receiving service updates or marketing communications from us
We generally obtain personal data directly from you when you contact us, request a quote, enter into a contract, visit our premises, or communicate with us. In some cases, we may receive personal data from third parties acting on your behalf, such as colleagues, family members, or business partners involved in the storage arrangements.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under UK GDPR. Depending on the context, we may rely on the following lawful bases:
• Contract: where processing is necessary to enter into or perform a storage or service contract with you, including taking steps at your request before entering into a contract.
• Legal obligation: where we must process data to comply with legal requirements, such as tax, accounting, security, or regulatory obligations, or to cooperate with law enforcement when required by law.
• Legitimate interests: where we have a legitimate business interest in operating and improving our storage services, ensuring site security and safety, preventing fraud, managing customer relationships, and handling enquiries or complaints, provided that these interests are not overridden by your rights and interests.
• Consent: where you have given clear consent for a specific purpose, for example, certain types of marketing communications. You may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
• To provide and manage storage services, including handling enquiries, quotations, bookings, and contractual arrangements
• To operate and secure our storage facilities, including the use of CCTV and access control systems
• To manage billing, payments, refunds, and account administration
• To communicate with you about your storage arrangements, including notices, updates, and service messages
• To respond to your questions, requests, and complaints
• To maintain accurate business and financial records
• To improve our services, processes, and customer experience
• To send you information about services that may be relevant to you, where permitted by law and your preferences
• To comply with legal or regulatory requirements and to establish, exercise, or defend legal claims
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include:
• Payment processing providers to handle card payments or other electronic payments securely
• IT and cloud service providers who host or support our systems, databases, and communications
• Security and facilities management providers assisting with CCTV, access control, and site safety
• Professional advisers, such as accountants or legal advisers, where reasonably necessary for our business operations and compliance
These processors are only permitted to process your personal data in accordance with our instructions and for the purposes set out in a written contract. They are required to implement appropriate technical and organisational measures to protect your data.
We may also share personal data with other third parties where required by law, for example with law enforcement, regulatory authorities, or government bodies, or where necessary to protect our rights, property, or the safety of our customers and staff.
International Transfers
If we transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. This may include using jurisdictions that have been recognised as providing an adequate level of data protection, or implementing approved standard contractual clauses with the relevant recipients.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
In general:
• Contract and account data relating to your storage agreement will be retained for a period after the end of the contract to enable us to respond to queries, manage disputes, and meet legal obligations.
• Financial and transaction records will be retained for the periods required by tax and accounting laws.
• CCTV footage and security logs are retained for a limited period, unless a longer retention is required in relation to an incident, investigation, or legal claim.
• Marketing preference records may be retained while you remain subscribed or until you object or withdraw consent.
When personal data is no longer required, we will securely delete or anonymise it.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include controls over access to systems and premises, secure storage of records, and the use of trusted service providers with suitable security standards.
Your Data Protection Rights
Under UK data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Subject to those, you have the right to:
• Access: request confirmation that we process your personal data and obtain a copy of that data.
• Rectification: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion of your personal data where there is no longer a lawful basis for us to continue processing it.
• Restriction: request that we restrict the processing of your personal data in certain circumstances.
• Objection: object to processing based on our legitimate interests, including profiling, and object to processing for direct marketing purposes at any time.
• Portability: request that we provide certain personal data to you or to another controller in a structured, commonly used, and machine-readable format, where technically feasible and where the processing is based on consent or contract and carried out by automated means.
• Withdraw consent: where we process your personal data based on your consent, you may withdraw that consent at any time.
We will respond to requests to exercise these rights in accordance with legal time limits. We may need to verify your identity before acting on a request, to protect your data and the data of others.
Children
Our services are not intended for children and we do not knowingly collect personal data relating to individuals under the age required to enter into a contract in the United Kingdom, except where necessary and authorised in connection with a family or guardian arrangement.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any significant changes will be applied prospectively. The most recent version of the policy will describe how we currently handle your personal data.
Contact and Complaints
If you have questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us using the contact channels published on our official materials or by approaching our team at the Storage Surrey Quays premises.
You also have the right to raise a concern or lodge a complaint with the Information Commissioner's Office in the United Kingdom if you believe your data protection rights have been infringed.
