Storage Wallington Privacy Policy
This Privacy Policy explains how Storage Wallington collects, uses and protects personal data relating to our customers and prospective customers in the Storage Wallington service area. It is designed to meet the requirements of the UK General Data Protection Regulation and related data protection legislation. By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Wallington customers and prospective customers within our service area, as well as individuals who contact us with enquiries, visit our premises, or use our website to request information or a quotation. It covers personal data we process in connection with the provision, administration and promotion of our storage services.
Data Controller
Storage Wallington is the data controller in relation to the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with UK data protection law.
Personal Data We Collect
We only collect personal data that is relevant to providing and managing our storage services, communicating with you and complying with our legal obligations. The categories of personal data we may collect include:
Identification and contact details, such as your full name, postal address, billing address, and general contact details necessary to communicate with you about your storage agreement.
Account and contract information, such as your customer or account number, details of storage units or services you have booked, contract dates and terms, payment history and related correspondence.
Payment details, including information necessary to process your payments, such as limited card details or transaction references. We do not retain full payment card details longer than necessary to complete the transaction unless required for legal or regulatory reasons.
Communication data, including information you provide when you contact us by phone, in person, or through our website, along with records of our communications with you for the purposes of handling enquiries, providing support and managing your account.
Usage and technical data, where applicable, such as basic information about your interactions with our website or online tools, including the pages you visit and the services you express interest in. This may involve the use of cookies or similar technologies where permitted by law.
Security and access information, such as log details relating to access to our premises or storage units, and any incident or security reports relevant to your use of our services.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis to do so under UK GDPR. Depending on the context, we may rely on the following lawful bases:
Performance of a contract. We process your data where it is necessary to enter into and perform our contract with you, including setting up your storage unit, administering your account, managing payments and responding to your requests relating to the contract.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This includes managing and improving our services, responding to enquiries, preventing fraud or misuse of our facilities, maintaining security and pursuing and defending legal claims.
Legal obligation. We may process your personal data where necessary to comply with legal or regulatory requirements, such as tax and accounting rules, record-keeping obligations and requirements imposed by law enforcement or regulatory authorities.
Consent. In limited circumstances, we may rely on your consent to process certain personal data, for example for certain types of marketing communications where required. Where we rely on consent, you may withdraw it at any time, and we will stop the relevant processing unless another lawful basis applies.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including setting up your account, preparing and administering your storage contract, managing access to storage units, handling payments and providing customer support.
To communicate with you, including responding to your enquiries, sending you information about your bookings or account, and providing important updates regarding your storage unit, service changes or policy updates.
To manage our business operations, including maintaining accurate records, carrying out internal reporting and analysis, managing risks, handling complaints, and exercising or defending legal claims.
To comply with legal and regulatory requirements, including fulfilling financial, tax and accounting obligations, responding to lawful requests from public authorities and upholding health, safety and security standards.
To conduct marketing and service improvement activities, including informing you about relevant services or offers where we are permitted to do so and improving our services based on aggregated or anonymised data.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data only where necessary and in line with this Privacy Policy and applicable law.
Service providers and processors. We may engage carefully selected third parties to perform certain functions on our behalf, such as payment processing, customer relationship management, secure data storage, IT support, accounting and professional advisory services. These third parties act as data processors and are only permitted to process your data in accordance with our documented instructions. We require them to implement appropriate technical and organisational measures to protect your data and to maintain confidentiality.
Legal and regulatory disclosures. We may disclose your personal data where required to comply with applicable laws, regulations or legal processes, or in response to lawful requests from public authorities, including law enforcement bodies.
Business transfers. In the event of a reorganisation, merger or transfer of our business or assets, personal data may be shared with relevant third parties as part of the process, subject to appropriate safeguards and in accordance with data protection law.
International Transfers
Where we use processors or service providers located outside the United Kingdom or the European Economic Area, or where data may be accessed from such locations, we take steps to ensure that an adequate level of protection is in place. This may involve relying on adequacy regulations, entering into standard contractual clauses approved by the relevant authorities, or using other lawful transfer mechanisms.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting or reporting requirements. When determining appropriate retention periods, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data and whether those purposes can be achieved by other means.
In general, we retain customer account and contract information for the duration of your relationship with Storage Wallington and for a reasonable period thereafter to resolve any outstanding issues, comply with record-keeping obligations and exercise or defend legal claims. When personal data is no longer required, we will securely delete or anonymise it.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption or pseudonymisation where appropriate, regular security reviews, staff training and procedures for handling any suspected data breaches.
Your Data Protection Rights
Under UK data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal limitations, but we will always respond to your requests in accordance with applicable law.
Right of access. You have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data, together with certain additional information.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing. You may have the right to request that we restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or assessing an objection you have raised.
Right to object. You may have the right to object to processing based on our legitimate interests, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims.
Right to data portability. In certain cases, you may request that we provide you with personal data you have provided to us in a structured, commonly used and machine-readable format, or that we transmit it directly to another controller where technically feasible.
Rights relating to consent. Where we rely on your consent to process personal data, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before it was withdrawn.
Exercising Your Rights
If you wish to exercise any of your rights, please contact us using your usual Storage Wallington contact channels and provide sufficient information to verify your identity and understand your request. We may need to request additional information to confirm your identity before acting on your request. We aim to respond without undue delay and within the time limits set by law.
Complaints
If you are concerned about how we handle your personal data, we encourage you to contact us in the first instance so that we can address your concerns. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe that your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. Any updated version will be made available through our usual customer communication channels or at our premises, and the effective date will be indicated. We encourage you to review this Privacy Policy periodically to remain informed about how we process your personal data.
