Storage De Beauvoir Town Privacy Policy
This Privacy Policy explains how Storage De Beauvoir Town collects, uses, stores and protects personal data of its customers and prospective customers in the local area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all personal data processed by Storage De Beauvoir Town about individuals who enquire about, use, or have used our storage services in the De Beauvoir Town area. It covers data collected in person, by phone, through our website, through social media, or any other method of communication we use to provide or promote our services.
Data Controller
For the purposes of data protection law, Storage De Beauvoir Town is the data controller. This means we decide how and why your personal data is used and are responsible for ensuring that your data is processed in accordance with applicable legislation.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details such as full name, postal address, billing address, and preferred contact details.
Account and contract information such as customer reference number, unit number, contract details, rental period, payment history, and correspondence related to your account.
Payment and billing information such as payment method, billing history, and transaction records. We do not store full card details; payment information is processed by third-party payment processors.
Access and security information such as access codes, entry and exit logs, CCTV images around the facility, and records of any incidents or security reports.
Communication records such as emails, letters, and notes from phone calls or in-person discussions, including queries, feedback, and complaints.
Marketing and preferences information such as your communication preferences, records of marketing messages sent to you, and information on whether you have opted in or out of receiving such messages.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so. These bases include:
Contract: We process data that is necessary for entering into, administering, and performing our storage contract with you. This includes processing your identification, contact, payment, and access information.
Legal obligation: We process data where we are required to comply with legal and regulatory obligations, such as tax, accounting, and security requirements. This may include retention of invoices and access records for specified periods.
Legitimate interests: We process certain data where it is necessary for our legitimate interests and where these interests are not overridden by your rights. Our legitimate interests include operating and securing our storage facility, preventing fraud and criminal activity, improving our services, and managing customer relationships.
Consent: In limited circumstances, we may rely on your consent, for example for certain types of direct marketing. Where we rely on consent, you can withdraw it at any time, and we will stop processing your data for that purpose.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services, including setting up your account, managing your unit, processing payments, and responding to your enquiries.
To manage our relationship with you, including communicating important information about your contract, changes to our terms, and service-related updates.
To maintain safety and security at our premises, including managing access, monitoring CCTV in and around the facility, and investigating security incidents or suspected fraud.
To comply with legal and regulatory obligations, including record-keeping, accounting, and responding to lawful requests from regulatory bodies or law enforcement.
To improve and develop our services, including quality control, staff training, service optimisation, and internal analysis to understand how our services are used.
To send you marketing communications about our storage services where we are permitted to do so by law, and to respect your communication preferences and opt-out choices.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting requirements. The length of time we keep your data depends on the type of data and the purpose of processing:
Customer account and contract data is generally retained for the duration of your contract plus a period afterwards to resolve any disputes, deal with queries, and comply with tax and accounting obligations.
Financial and billing records are retained for the period required by applicable tax and financial regulations.
Access logs and CCTV footage are retained for a limited period necessary for security and incident investigation, unless longer retention is required due to an active investigation or dispute.
Marketing and preference data is retained while you remain a customer or prospect and until you object to or opt out of marketing communications, or until it is no longer needed.
When personal data is no longer required, we will securely delete or anonymise it in line with our data retention procedures.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as our data processors, meaning they process data on our behalf and under our instructions. These can include:
Payment processing providers who handle card and electronic payments.
IT and system providers who host and support our customer databases, security systems, and communication tools.
Security and CCTV system providers who support the operation and maintenance of our access control and surveillance systems.
Professional advisers such as accountants, auditors, or legal advisers where necessary for legitimate business purposes and to comply with legal obligations.
These processors are required by contract to keep your data secure, to use it only in accordance with our documented instructions, and to comply with applicable data protection law. We do not sell your personal data to third parties.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place before transferring your personal data. These safeguards may include standard contractual clauses or other mechanisms approved by data protection authorities.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply subject to certain conditions and exemptions:
Right of access: You can request confirmation of whether we hold personal data about you and receive a copy of the data we hold, together with certain information about how we process it.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete data we hold about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data. This right is not absolute and may not apply where we have a legal obligation or overriding legitimate interest to retain the data.
Right to restriction: You can ask us to restrict the processing of your data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object: You can object to our processing of your personal data based on legitimate interests, and we will stop processing unless we can demonstrate compelling legitimate grounds. You always have the right to object to direct marketing.
Right to data portability: For data you have provided to us and which we process by automated means on the basis of consent or contract, you can request that we provide that data in a structured, commonly used, machine-readable format or transfer it directly to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
How to Exercise Your Rights
If you wish to exercise any of your data protection rights, or if you have questions about how your personal data is used, you can contact us using the contact details provided on our website or in your contract documentation. We may need to verify your identity before responding to certain requests to protect your privacy and security. We aim to respond to all valid requests within one month, or within any extended period permitted by law where requests are complex or numerous.
Complaints
If you are concerned about how we handle your personal data, we encourage you to contact us first so that we can try to resolve your concern. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will be made available through our usual communication channels, and the revised policy will apply from the date it is published.
