Storage Croydon Privacy Policy
This Privacy Policy explains how Storage Croydon collects, uses, stores and protects personal data relating to customers and prospective customers in the Storage Croydon service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Croydon customers and to anyone who contacts us, requests a quote, makes a booking, or otherwise uses our services in the area we operate.
Who this Privacy Policy applies to
This Privacy Policy applies to individuals who use or enquire about Storage Croydon services in the local area, including self storage customers, business storage customers, prospective customers, and people acting on behalf of a business customer such as directors, employees or contractors.
By using our services or by providing your personal data to us, you acknowledge that you have read this Privacy Policy and understand how we process your information, subject always to your rights under data protection law.
Types of personal data we collect
We collect and process different categories of personal data, depending on how you interact with us and which services you use. These may include identification and contact details such as full name, residential or business address, billing address, and contact details including mobile or landline number and any other contact information you provide. We also collect customer account and contract information such as storage unit details, start and end dates, rental terms, payment history, communications with us, and records of your interactions with our staff.
We may collect payment related information, such as limited card details made available to us by our payment service providers, payment status and transaction references. We do not store full card numbers or security codes. Operational and security data may include CCTV footage in and around our premises, access control data such as key fob or access code logs, and vehicle registration details if provided for security or access purposes.
When you visit our website, we may collect technical and usage data such as IP address, browser type and version, device information, pages visited, time and date of visits, and other diagnostic data through the use of cookies or similar technologies where permitted by law. In some cases we may collect special category or sensitive information such as health related information if you choose to share it with us where it is relevant to reasonable adjustments or specific needs, and we will only use this when we have a clear lawful basis to do so.
How we collect your personal data
We collect personal data directly from you when you contact us by any communication method to request a quote or information, make a booking, sign a storage agreement, make a payment, visit our premises, create or manage an account, send us a query or complaint, or request support. We may also receive information indirectly from third parties, such as payment service providers, referencing or credit check providers where relevant, business partners that refer you to us, and publicly available sources, for example to verify address or company information.
Lawful basis for processing
We process your personal data only where we have a lawful basis under data protection law. The main lawful bases we rely on are performance of a contract, which allows us to process your data where it is necessary to enter into or fulfil a storage, service, or related agreement with you. This includes setting up your account, managing your contract, taking payments, providing access and security, and communicating with you about your use of our services.
We also rely on compliance with a legal obligation, where we are required to process certain information by law, for example to comply with tax, accounting, anti money laundering, or law enforcement requirements. Our legitimate interests form another lawful basis. We may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This may include improving our services, maintaining security, preventing fraud, managing our business operations, and handling queries or complaints.
In some cases we rely on your consent. Where the law requires consent, for example for certain marketing activities or certain categories of cookies, we will only process your data when you have given your clear and specific consent, and you can withdraw it at any time. Where we process special category data that you provide to us, such as health related information, we will do so only where you have given explicit consent or where another specific legal condition applies.
How we use your personal data
We use the personal data we collect to provide and manage storage and related services you request, including setting up your account, managing access, taking payments and providing customer support. We use it to maintain the safety and security of our premises, customers and staff, including the use of CCTV and access logs, and for the prevention and detection of crime. We also use your data to manage our relationship with you, such as notifying you about changes to our terms, policies, or services, communicating about your contract, or reminding you about payments.
We may use your information for service improvement and business operations, including analysing usage patterns, monitoring performance, training staff, and planning capacity. Where permitted by law, we may use your data for marketing and promotions related to Storage Croydon services, using contact details you have provided. You can object to or opt out of such communications at any time.
Data retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements. In general, customer account and contract information is retained for a period after the end of your contract to allow us to answer queries, manage any disputes, and comply with financial record keeping obligations. CCTV recordings and access logs are kept for shorter periods, unless required for the investigation of an incident or legal claim. Marketing related data is kept for as long as you remain subscribed or until you object or opt out.
When personal data is no longer required, we will securely delete or anonymise it in line with our data retention procedures and applicable law.
Data sharing and processors
We may share your personal data with carefully selected third parties who act as data processors on our behalf and who are bound by contractual obligations to keep your information confidential and secure. These may include payment processing providers, information technology and hosting service providers, security and access control system providers, and professional advisers such as accountants or legal advisers where reasonably necessary for our legitimate interests and compliance obligations.
We may also share information with third parties where required by law or where we believe sharing is necessary to protect the rights, property or safety of Storage Croydon, our customers or others. Where we use data processors located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection laws.
Security of your personal data
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include controlled access to systems and premises, encryption or pseudonymisation where appropriate, staff training and confidentiality obligations, and regular review of our security arrangements. While we take reasonable steps to protect your data, no system can be guaranteed as completely secure.
Your data protection rights
Under data protection law, you have a range of rights in relation to your personal data. These may include the right to access your personal data and to obtain a copy of the information we hold about you, the right to request correction of inaccurate or incomplete data, and the right to request erasure of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected and there is no legal reason to keep it.
You also have the right to restrict the processing of your data in certain situations, for example while we are verifying its accuracy or considering an objection you have raised. You may have the right to data portability, which allows you to request that we provide certain information to you or to another controller in a commonly used, machine readable format. You have the right to object to processing based on our legitimate interests and to object to direct marketing at any time.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn. We will respond to your requests under these rights in accordance with legal time limits and may need to verify your identity before acting on a request.
How to raise questions or concerns
If you have any questions about this Privacy Policy or how Storage Croydon handles your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the usual contact methods shown on our website or in your agreement. You also have the right to raise a concern or lodge a complaint with the relevant data protection supervisory authority if you believe that your data has been handled in a way that does not comply with data protection law. We would, however, welcome the opportunity to address your concerns directly in the first instance.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how Storage Croydon protects your information.
