Storage St Mary Cray Privacy Policy
This Privacy Policy explains how Storage St Mary Cray collects, uses, stores and protects personal data belonging to its customers, prospective customers, and website users in the local area. It also explains the rights you have under UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all services and facilities provided by Storage St Mary Cray to customers in the St Mary Cray area and to anyone who contacts us or interacts with us in relation to those services.
Data Controller
Storage St Mary Cray is the data controller in relation to the personal data it processes about customers and other individuals. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We may collect, use, store and process the following categories of personal data, depending on how you interact with us and which services you use:
Identification data such as full name, title, date of birth and a copy or details of identification documents where required for security or verification.
Contact details such as residential or correspondence address, billing address, and details you provide when communicating with us.
Account and contract information such as customer reference numbers, storage unit details, move-in and move-out dates, service preferences, and communication history.
Payment and billing information such as payment method details and records of payments made and due. We do not store full card details where a third-party payment processor is used; in such cases, limited tokenised or reference data may be retained.
Access and security data such as CCTV images captured on our premises, records of access to storage units, vehicle registration numbers provided to us for access purposes, and incident logs where relevant.
Technical and usage data such as information about how you interact with our website or online tools, including log data and basic device information where applicable.
Any other information you choose to provide to us when you make an enquiry, enter into a contract, or communicate with us in any way regarding our services.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment, visit our facilities, or communicate with us by any means. We may also receive personal data from third parties where this is necessary to provide our services or comply with legal obligations, for example from law enforcement or regulatory bodies.
Lawful Basis For Processing
We will only process your personal data where we have a lawful basis to do so under the UK GDPR. The main lawful bases we rely on are:
Performance of a contract: We process personal data to provide storage services, manage your account, take payments, communicate with you about your booking, and fulfil our contractual obligations to you.
Legal obligation: We process personal data where this is necessary to comply with legal and regulatory requirements, such as record keeping, tax and accounting rules, security and safety obligations, and responding to lawful requests from public authorities.
Legitimate interests: We process personal data where this is necessary for our legitimate business interests or those of a third party, and where your rights and freedoms do not override those interests. This includes managing and improving our services and facilities, maintaining security, preventing and detecting fraud or misuse, handling customer enquiries and complaints, and maintaining appropriate records of our operations.
Consent: In limited circumstances, we may process certain personal data based on your consent, for example where required for specific types of optional marketing communications. Where we rely on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To set up, manage and terminate storage agreements and any related services you request.
To process payments, deal with billing queries, recover debts and maintain financial records.
To verify your identity where necessary and maintain the safety and security of our premises, customers, staff and property.
To operate and monitor access control systems and CCTV on our premises to prevent unauthorised access, deter and investigate incidents, and support any required security investigations.
To respond to your questions, requests, enquiries and complaints and to communicate with you about your account, services, changes to terms, or relevant service information.
To manage our business operations, including audits, quality control, training, and ensuring the effective running of our facilities and services.
To comply with legal obligations and to cooperate with law enforcement and regulatory authorities where required.
Data Retention
We keep personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy and to meet our legal, accounting and reporting requirements.
Customer account and contract data, including core identification and contact information, are generally retained for a period after the end of your relationship with us, to enable us to respond to queries, handle potential disputes, and meet legal obligations.
CCTV recordings are kept for a limited period appropriate to security and operational needs and are then overwritten or securely deleted, unless specific footage is required to be retained for investigation or legal purposes.
Payment and billing records are retained in line with applicable tax and financial record-keeping requirements.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors And Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include providers of payment processing services, IT and system support, data storage, security and access control solutions, and professional advisers who assist us in operating our business.
Where we use data processors, we ensure that appropriate contracts are in place requiring them to process personal data only in accordance with our instructions, to keep it secure, and to comply with applicable data protection laws.
We may also share personal data with third parties who act as separate controllers where required by law, such as law enforcement agencies, regulatory bodies, or government authorities, or in connection with legal claims.
We do not sell your personal data to third parties.
International Transfers
Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place to protect it in accordance with data protection law. These safeguards may include the use of standard contractual clauses or other approved mechanisms. Further information about international transfers can be provided upon request.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and regular review of our information security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and legal exceptions. They include:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
Right to rectification: You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data.
Right to restriction of processing: In certain circumstances, you have the right to ask us to restrict the processing of your personal data.
Right to data portability: In certain circumstances, you have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to request that we transmit that data to another controller where technically feasible.
Right to object: You have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis, including profiling based on those interests.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before it was withdrawn.
Area Covered By This Policy
This Privacy Policy applies to all Storage St Mary Cray customers and users of our services within the St Mary Cray area, including those who store items at our facilities, contact us regarding storage services, or otherwise interact with us in connection with our operations in this area.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, the way we handle personal data, or applicable laws and guidance. Any updates will apply from the time they are made available. You should review this Privacy Policy periodically so that you understand how we process and protect your personal data.
