Storage Perivale Privacy Policy
This Privacy Policy explains how Storage Perivale collects, uses, stores and protects personal data relating to customers and prospective customers in the local area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using Storage Perivale services, you acknowledge that your personal data will be processed as set out in this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Perivale customers, former customers and prospective customers in the area who enquire about, use, or have used our storage services. It covers data collected in person at our premises, over the phone, and through any other communication channels we use to provide our services or respond to enquiries.
Data Controller
Storage Perivale is the data controller for the personal data described in this Privacy Policy. As data controller, Storage Perivale determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in a lawful, fair and transparent manner.
Personal Data We Collect
We collect and process different types of personal data depending on your relationship with Storage Perivale and how you interact with us. This may include the following categories of data.
Identification data, such as your full name, date of birth, proof of identity details and, where relevant, proof of address details.
Contact data, such as your home or business address, billing address and other addresses used in connection with your storage unit, together with any contact preferences you communicate to us.
Account and contract data, such as your customer account number, contract start and end dates, unit number, access permissions you grant to other people, payment history, and records of your communications with us.
Financial and payment data, such as partial payment card details where required for processing, records of payments made and the method of payment used. We do not store full card details when processed by a recognised payment provider acting as our processor.
Usage and access data, such as records of when you enter and exit the site, access control system logs, and information from any on-site security devices used to protect the premises.
Technical data, where applicable, such as your internet protocol address, device identifiers and basic information about how you navigate any online tools we use to manage enquiries or bookings.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, obtain a quote, sign a storage agreement, make a payment, update your details or otherwise communicate with us. We may also receive personal data indirectly from third parties where this is necessary to verify identity, confirm payment or manage a dispute, always in line with data protection law.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis to do so under the UK General Data Protection Regulation. Depending on the circumstances, we rely on the following lawful bases.
Contract performance. We process your personal data when it is necessary to enter into or perform a contract with you, for example to provide storage services, manage your account, take payment and communicate with you about your booking.
Legal obligation. We may process your data where we are required to do so by law, for example to keep certain financial records for tax purposes, to assist law enforcement with properly authorised requests, or to comply with health and safety requirements.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. These may include ensuring the security of our premises, preventing fraud, managing customer relationships, improving our services and handling enquiries or complaints.
Consent. In limited circumstances, we may rely on your consent, for example in relation to certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time by contacting us, and this will not affect the lawfulness of any processing carried out before you withdrew your consent.
Purposes for Which We Use Your Data
We use personal data for the following purposes.
To manage enquiries, provide quotes, confirm availability and respond to questions about our services.
To set up, administer and manage your storage contract, including unit allocation, access arrangements and customer service communications.
To take, process and record payments, manage arrears and administer refunds where applicable.
To protect the security and integrity of our premises, units and customers belongings, including monitoring access, detecting unauthorised activity and supporting the proper use of the site.
To comply with applicable laws and regulations, respond to legally valid requests from public authorities and maintain accurate business records.
To improve our services, understanding how customers use our facilities and improving the way we deliver our services.
To send you direct marketing about our services only where permitted by law and where you have not opted out. You can ask us to stop sending such communications at any time.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting or reporting requirements. Retention periods vary depending on the type of data and our statutory obligations.
Customer contract and billing records are generally kept for a period required under applicable tax and financial regulations after the end of your relationship with us. Security and access logs are kept for a shorter period, only for as long as they are needed to ensure the safety and security of the site and to investigate any incidents. Where data is no longer required, it is securely deleted or anonymised.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as our data processors, meaning they process personal data on our behalf and only in accordance with our instructions.
Such processors may include payment processing providers, providers of customer management or booking systems, secure data storage and backup providers, and professional advisers such as accountants, auditors or legal advisers where necessary. These processors are chosen for their ability to provide appropriate security measures and are bound by contractual obligations to protect your personal data and not to use it for their own purposes.
We may also share personal data with other third parties where required by law, to protect our rights or the rights of others, or in connection with a business restructuring. In all such cases we will ensure that appropriate safeguards and legal bases are in place.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom, we will only transfer personal data where suitable safeguards are in place. These may include using a country that has been recognised as providing an adequate level of protection, or putting in place standard data protection clauses approved by the relevant authorities. We will ensure that your rights and protections travel with your data.
Security of Your Personal Data
We take the security of your personal data seriously. We implement technical and organisational measures designed to protect your data from unauthorised access, loss, misuse or disclosure. These measures include restrictions on access to systems and records, use of secure storage and training for staff handling personal data. While no system can be completely secure, we regularly review our security measures and aim to maintain an appropriate level of protection in line with industry standards.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data.
You have the right to be informed about how your personal data is collected and used, which is the purpose of this Privacy Policy.
You have the right of access to obtain confirmation of whether we process your personal data and to receive a copy of that data, subject to certain limitations.
You have the right to request rectification of inaccurate or incomplete personal data we hold about you.
You have the right to request erasure of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
You have the right to request restriction of processing in specific situations, such as where you contest the accuracy of the data or object to processing based on our legitimate interests.
You have the right to object to processing of your personal data where we are relying on legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests and rights or the processing is for the establishment, exercise or defence of legal claims.
You have the right to data portability in respect of certain data you have provided to us, which you can request in a structured, commonly used and machine readable format where the processing is based on consent or contract and is carried out by automated means.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns where possible.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any changes will be made available through our usual communication channels and the updated policy will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
