Storage Limehouse Privacy Policy
This Privacy Policy explains how Storage Limehouse collects, uses, stores, and protects the personal data of all our customers in the area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our storage services, visiting our premises, or interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Who This Policy Applies To
This Privacy Policy applies to all Storage Limehouse customers in the area, including individuals and businesses, as well as any authorised users, guarantors, or emergency contacts associated with a customer account. It also applies to prospective customers who make enquiries about our services and to visitors to our premises where personal data is collected.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identity and contact details such as name, postal address, billing address, identification documents where legally required, and any other contact or identification information you choose to provide.
Account and contract information such as unit number, storage agreement details, access permissions, payment history, and communication records relating to your account or enquiries.
Payment and billing details such as information needed to process payments and issue invoices. We do not store full payment card details where third-party payment processors are used; they process this data securely on our behalf.
Usage and access information such as dates and times of entry to the facility, electronic access records, and information relating to the security of our premises where this involves personal data.
Security and CCTV data such as video imagery of customers, visitors, and vehicles in and around the facility. CCTV is used to help ensure the security and safety of customers, staff, and property.
Communication information such as records of correspondence with you by post or other means, including enquiries, complaints, and feedback.
Lawful Bases for Processing Your Data
We rely on one or more of the following lawful bases under the UK GDPR for processing your personal data:
Contractual necessity: We process personal data when it is necessary to enter into or perform a contract with you, such as to set up and manage your storage agreement, process payments, provide access to your storage unit, and communicate with you about your contract.
Legal obligations: We process personal data where this is necessary to comply with legal and regulatory requirements, including financial record-keeping, tax obligations, fraud prevention, and responding to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and freedoms. This includes managing and improving our services, ensuring the security and safety of our premises through CCTV and access systems, preventing and detecting crime or misuse of our facilities, and handling queries and complaints.
Consent: In limited circumstances, we may rely on your consent, for example for certain types of marketing or optional communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your account, verifying identity where required, administering contracts, and managing access to units.
To handle payments, issue invoices, manage arrears and debt collection where necessary, and maintain accurate financial records.
To maintain the safety and security of our customers, staff, and premises, including through CCTV monitoring, access control systems, and incident management.
To respond to your enquiries, requests, and complaints, and to provide customer support.
To manage our relationship with you, including sending important information about your contract, changes to our terms, service updates, and any matters that may affect your use of our services.
To comply with legal and regulatory obligations, cooperate with law enforcement where lawful and necessary, and protect our legal rights, for example in the event of disputes or enforcement of contractual terms.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting obligations.
Customer account and contract data are generally kept for a period following the end of your agreement, to respond to any questions, deal with disputes, and comply with legal requirements. Financial records, including information related to payments, are retained for the period required by applicable tax and accounting laws.
CCTV footage is retained for a limited period, which is typically a short duration unless a longer retention period is required in connection with a specific incident, investigation, or legal claim.
Where data is no longer required for any lawful purpose, it will be securely deleted, anonymised, or otherwise removed from our systems.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions and are required to implement appropriate security measures.
Such processors may include providers of information technology services, storage management systems, payment processing services, customer relationship tools, and security or CCTV maintenance providers.
In some cases, we may also share personal data with other third parties acting as independent controllers where this is necessary and lawful. This may include professional advisers such as accountants or legal advisers, debt collection agencies in the event of non-payment, or law enforcement and regulatory bodies where we are required or permitted to do so by law.
We do not sell your personal data to third parties.
International Transfers
Where we use processors or service providers located outside the United Kingdom, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. These safeguards may include the use of approved standard contractual clauses or reliance on an adequacy decision, where available.
How We Protect Your Data
We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or damage. Measures may include secure access controls, encryption, restricted access to personal data, staff training, and regular review of our security procedures.
While we take reasonable steps to protect your data, no system can be completely secure. We therefore cannot guarantee absolute security, but we are committed to responding promptly and transparently to any suspected data incidents and complying with our obligations to notify individuals and authorities where required.
Your Data Protection Rights
Under the UK GDPR, you have several rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation that we hold your personal data and to receive a copy of that data, together with information about how we use it.
Right to rectification: You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data. This right is not absolute and may not apply where we need to retain data for legal or contractual reasons.
Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we are verifying the accuracy of data or responding to an objection.
Right to object: You have the right to object to processing that is based on our legitimate interests, including certain profiling activities. We will stop processing unless we can demonstrate compelling legitimate grounds or where processing is necessary for legal claims.
Right to data portability: In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent: Where we rely on consent as a lawful basis, you have the right to withdraw that consent at any time. This will not affect processing that has already taken place.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any changes will apply from the date they are published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
