Storage Paddington Privacy Policy
This Privacy Policy explains how Storage Paddington collects, uses, stores, and protects personal data relating to our self storage services. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This policy applies to all Storage Paddington customers and prospective customers in our service area, as well as individuals who contact us or visit our site or facilities in connection with our services.
By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time to reflect changes in law, guidance, or our business practices. The most recent version will always apply.
Who We Are And Scope Of This Policy
Storage Paddington is a self storage provider offering storage units and related services to individuals and businesses. For the purposes of data protection law, Storage Paddington is the data controller in respect of the personal data described in this policy. This Privacy Policy applies to all Storage Paddington customers and enquirers in the Storage Paddington service area.
As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, billing address, and other contact details you provide to us. Customer account details, including unit number, contract details, and communication preferences. Payment and billing information, such as payment method details and records of payments made to us. Verification information, including identification documents or information you provide for security or anti fraud checks, where required. Communications data, such as emails, letters, telephone or in person enquiries, and any feedback or complaints you submit. Usage and access information, including details of access to our storage facilities, security logs, and CCTV footage in and around our premises, where in place. Website and service usage data, including technical data and information about how you use our website and online services, such as pages visited and actions taken.
We will only collect personal data that is relevant and limited to what is necessary in relation to the purposes described in this policy.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, access our facilities, or communicate with us by any means. We may also collect data automatically when you use our website, such as technical and usage information.
In certain cases, we may receive personal data about you from third parties, for example where a business customer provides your details as an authorised contact or where a payment provider confirms that your transaction has been completed.
Lawful Bases For Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the specific processing activity, we may rely on one or more of the following bases:
Performance of a contract. We process your personal data to enter into and fulfil our contract with you, including providing storage services, managing your account, handling payments, and responding to your enquiries.
Compliance with legal obligations. We may process your data where this is necessary to comply with our legal obligations, such as tax, accounting, anti money laundering, health and safety, or to respond to lawful requests from public authorities.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This includes security and access control at our facilities, monitoring the proper use of our services, recovering debts, handling queries and complaints, improving our services, and managing and growing our business.
Consent. In some situations, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time, and this will not affect the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide storage services to you, including administering your storage agreement, managing unit access, and handling bookings and renewals. To process payments, issue invoices, handle refunds where applicable, and maintain our financial records. To provide customer service, including responding to enquiries, resolving issues, and handling complaints. To maintain the security of our premises, staff, customers, and assets, including the use of access control systems and CCTV where installed. To communicate with you about your account, notices relating to your storage unit, changes to our terms or this Privacy Policy, and any operational updates. To manage our business operations, such as auditing, risk management, reporting, and the development and improvement of our services. To comply with legal or regulatory obligations and to establish, exercise, or defend legal claims.
Data Retention
We will retain your personal data only for as long as is necessary for the purposes for which it was collected and in accordance with applicable laws and regulatory requirements.
In general, we retain customer and contract records for a period necessary to manage your relationship with us and for a reasonable period after your contract ends, for example to deal with any disputes or queries. Payment and accounting records are retained for periods required under tax and accounting legislation. CCTV recordings and access logs, where in place, are retained for a limited period necessary to maintain security and investigate incidents, unless a longer retention period is required for legal or regulatory reasons.
When personal data is no longer required, we will securely delete or anonymise it.
Data Processors And Third Party Recipients
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers are engaged under written contracts and process personal data only in accordance with our instructions and for specified purposes. They are required to implement appropriate technical and organisational measures to protect your data.
Examples of processing activities that may be carried out by third party processors include payment processing, secure data storage, customer relationship management systems, and providers of security or access control systems. We may also share necessary personal data with professional advisers such as accountants, auditors, legal advisers, and insurers where this is required for our legitimate business purposes and to meet our legal obligations.
In limited circumstances, we may disclose your personal data to public authorities, regulators, law enforcement bodies, or courts where we are required or permitted to do so by law, or where this is necessary to establish, exercise, or defend legal claims.
International Transfers
Where we use service providers or store data in countries outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data to a standard that is essentially equivalent to that provided under UK data protection law. These safeguards may include the use of recognised data transfer mechanisms and contractual obligations on the recipient.
Security Of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include physical security at our facilities, access controls, secure storage systems, and internal policies and training.
While we take reasonable steps to safeguard your data, no system can be completely secure. You should also take care to protect your own information, for example by keeping any access credentials confidential.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data, subject to applicable conditions and exemptions. These rights include:
Right of access. You can request confirmation as to whether we process your personal data and request a copy of the data we hold about you.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing. You can request that we restrict the processing of your personal data in certain situations, such as while we are investigating your concerns about its accuracy.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine readable format and to transmit it to another controller.
Right to object. You can object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. You also have the absolute right to object to direct marketing at any time.
Right to withdraw consent. Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can seek to resolve any concerns.
Contact And Updates
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your data protection rights, you should contact Storage Paddington using the contact details made available on our official customer communications or at our facility.
We may amend this Privacy Policy from time to time. Any changes will take effect when the updated version is made available. We recommend that you review this policy periodically to stay informed about how we protect your personal data.
