Storage Feltham Privacy Policy
This Privacy Policy explains how Storage Feltham collects, uses, stores, and protects personal data relating to customers and prospective customers in the Feltham area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Feltham customers and anyone who makes enquiries about our services within the Feltham area, whether in person, by phone, or online.
Data Controller
Storage Feltham is the data controller for the personal data described in this Privacy Policy. This means that we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled in accordance with data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, service address, and other contact information you provide when you contact us or enter into a contract with us.
Account and contract information, such as details about the storage unit you rent, the duration of your contract, pricing, billing history, and correspondence relating to your account.
Payment information, such as partial payment card details or payment transaction references processed via our payment service providers. We do not store full card details on our own systems.
Access and security data, such as access codes, entry and exit logs, and information recorded by security systems at our storage facility, which may include CCTV footage.
Communication records, such as emails, letters, forms, or notes of telephone conversations you have with our staff.
Marketing preferences, such as your choices about receiving service updates or marketing information from Storage Feltham.
Technical information, where you interact with us online, such as the type of device and browser used, and basic usage data required to operate and secure our website. We do not knowingly collect more data than necessary for these purposes.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we may rely on one or more of the following lawful bases:
Contract: We process personal data where it is necessary to enter into or perform a contract for storage services with you, including taking steps at your request before entering into a contract.
Legal obligation: We process personal data where it is necessary to comply with legal and regulatory requirements, including tax, accounting, and health and safety laws, and obligations relating to security and crime prevention.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. Our legitimate interests include running and developing our storage business, ensuring the security of our site and property, preventing fraud and misuse, and maintaining accurate records.
Consent: In limited circumstances, we may rely on your consent, for example, where we send certain types of marketing communications by electronic means and the law requires consent. Where we rely on consent, you may withdraw it at any time, and we will stop processing your data for that purpose.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide you with storage services, including setting up and managing your account, handling bookings, access credentials, and payments.
To communicate with you about your contract, including confirmations, notices, service updates, and responses to your enquiries or complaints.
To maintain the security and safety of our premises, staff, customers, and property, including through access controls and CCTV monitoring.
To manage our business operations, including record keeping, financial management, and planning.
To comply with legal and regulatory obligations, including for tax, accounting, and insurance purposes, and to cooperate with law enforcement or regulatory authorities where required.
To send you information about services that may be of interest to you, where permitted by law and in accordance with your marketing preferences.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and where permitted by law. These third parties act either as independent controllers or as processors on our behalf.
Processors are organisations that process personal data on our instructions. Where we use processors, we put in place written contracts requiring them to handle your data securely, only in accordance with our instructions, and in compliance with data protection law.
We may share your data with the following categories of recipients:
Payment and billing service providers, to process payments and manage invoicing.
IT and cloud service providers, including providers of storage, backup, and communications systems used to run our business.
Security service providers, including providers that support access control and CCTV systems at our facility.
Professional advisers, such as accountants, auditors, and legal advisers, where necessary for the provision of their services.
Insurance providers and brokers, in relation to insurance policies connected to the use of our storage services.
Regulatory and law enforcement authorities, courts, or other third parties where required by law, regulation, or to protect our rights, property, or the safety of others.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, and personal data is transferred internationally, we take steps to ensure an appropriate level of protection is in place. This may include using standard contractual clauses approved by relevant authorities or ensuring that a similar legal framework for data protection applies in the destination country.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
In general, we keep customer account and contract records for a period after the end of your contract, to respond to queries, handle disputes, and meet our legal obligations. CCTV recordings and access logs are normally retained for a shorter period, unless required for the investigation of an incident or legal claim.
When we no longer need your personal data for the purposes for which it was collected, we will securely delete or anonymise it.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. These rights apply subject to certain conditions and exceptions. They include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the personal data we hold about you.
Right to rectification: You can request that we correct or complete inaccurate or incomplete personal data.
Right to erasure: You can request that we delete your personal data where there is no lawful reason for us to continue processing it.
Right to restriction: You can request that we restrict the processing of your personal data in certain circumstances, for example, while we verify its accuracy or consider an objection.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for direct marketing.
Right to data portability: You can request that we provide certain personal data to you or another organisation in a structured, commonly used, and machine readable format, where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we have the opportunity to address your concerns.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures include physical security controls at our premises, access controls for our systems, and staff training on data protection responsibilities.
Policy Scope and Updates
This Privacy Policy applies to all Storage Feltham customers and individuals who contact or interact with us in connection with our storage services in the Feltham area. It does not apply to third party services or websites that may be mentioned in our materials or communications.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any changes will apply from the date the updated version is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
