Storage Brunswick Park Privacy Policy
This Privacy Policy explains how Storage Brunswick Park collects, uses, stores, and protects personal data relating to customers and prospective customers. It applies to all Storage Brunswick Park customers and enquirers in the surrounding area who use or consider using our storage services.
We are committed to handling your personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. Please read this Privacy Policy carefully to understand how and why we use your personal information.
1. Data Controller
Storage Brunswick Park is the data controller in respect of the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law.
2. Personal Data We Collect
We may collect and process the following categories of personal data when you enquire about, enter into, or use our storage services:
Identification and contact details: name, postal address, billing address, contact address, and other basic identity details.
Account and contract information: unit number, contract start and end dates, products or services purchased, payment status, and related service history.
Payment and billing information: payment method, billing history, and information required for invoicing. We do not store full payment card details; where card payments are used, they are processed via a secure payment processor.
Communication data: information you provide when contacting us in person, by post, or through other channels, such as enquiries, feedback, and any correspondence with our team.
Security and access data: CCTV images captured on or around our premises for security and safety, entry and exit records, access logs, and incident reports.
Usage and preference data: information about how you use our storage services, your preferences regarding unit size, access times, and related service options.
3. How We Collect Your Data
We collect personal data directly from you when you:
Make an enquiry about our storage services.
Request a quotation or availability details.
Enter into a storage agreement with us.
Make a payment or set up a recurring payment arrangement.
Contact us with questions, feedback, or complaints.
Visit our premises where CCTV is in operation.
We may also receive personal data indirectly from third parties who support our services, such as payment processors, where this is necessary to administer your account and payments.
4. Lawful Basis for Processing
We only process your personal data where a lawful basis applies under data protection law. The main lawful bases we rely on are:
Contract: to take steps at your request before entering into a contract and to perform our contractual obligations to you, including providing and managing storage services, handling payments, and managing your account.
Legal obligation: to comply with applicable laws and regulations, including financial record keeping, tax obligations, and health and safety requirements.
Legitimate interests: to operate, improve, and protect our business and premises, including preventing and detecting crime, maintaining security through CCTV, managing customer relationships, and handling enquiries. We balance our legitimate interests against your rights and freedoms and will not process personal data where our interests are overridden.
Consent: in limited cases where we ask for your clear consent, for example for certain forms of marketing or optional communications. You can withdraw your consent at any time by contacting us using the details provided in this Privacy Policy.
5. How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide storage services to you, including setting up and managing your account, allocating storage units, and administering your contract.
To process payments, issue invoices, receipts, and statements, and manage any arrears or billing queries.
To communicate with you about your booking, contract, or account, including notices of renewal, changes to terms, or important service updates.
To ensure the security and safety of our premises, customers, staff, and stored items, including through the use of CCTV and access records.
To respond to your enquiries, feedback, or complaints and provide customer support.
To maintain our records and comply with legal and regulatory obligations.
To protect our legal rights, manage disputes, and enforce our contractual terms where necessary.
6. Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where this is necessary for the purposes described above or where we are legally required to do so.
Third parties who may receive your data include:
Service providers acting as data processors who support our operations, such as providers of storage management software, payment processing services, IT support, cloud hosting, and document storage.
Professional advisers such as legal or accounting advisers where necessary to obtain professional advice or manage legal obligations.
Law enforcement agencies, regulators, courts, or other public authorities where we are required to share personal data by law, to prevent or detect crime, or to protect our legal rights.
Where we engage processors, they process personal data only on our instructions, under a written contract, and with appropriate security and confidentiality obligations.
7. International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as using contracts that incorporate standard data protection clauses approved by the relevant authorities or ensuring that the destination country has an adequate level of data protection.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements.
In general, we will retain:
Customer account and contract information for the duration of your agreement with us and for a period afterwards, typically up to six years, to meet legal, tax, and accounting requirements and to respond to any queries or claims.
Financial records such as invoices and payment history in line with statutory retention periods.
CCTV footage for a limited period, normally up to a few weeks, unless a longer retention period is required as part of an investigation, legal process, or insurance claim.
When personal data is no longer required, we will take appropriate steps to securely delete or anonymise it.
9. Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include restricting access to personal data to staff and service providers who need it to perform their duties, using secure systems, and maintaining policies and training to promote data protection awareness.
10. Your Rights Under Data Protection Law
You have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions under data protection law, but we will respect and facilitate them wherever applicable.
Right of access: the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy and information about how we use it.
Right to rectification: the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure: the right to request that we delete your personal data where there is no lawful reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing: the right to request that we limit the processing of your personal data in certain circumstances, such as while we verify its accuracy or consider an objection you have raised.
Right to data portability: the right, in certain circumstances, to receive personal data you have provided to us in a structured, commonly used, and machine readable format and to have that data transmitted to another controller where technically feasible.
Right to object: the right to object to processing based on our legitimate interests, including for direct marketing, where we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where the processing is required for legal claims.
Right to withdraw consent: where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you consider that your rights have been infringed. We encourage you to contact us first so that we can address any concerns directly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any revised version will be made available through our usual communication channels and will take effect from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
