Storage Belgravia Privacy Policy
This Privacy Policy explains how Storage Belgravia collects, uses, stores, and protects personal data relating to customers and prospective customers. It applies to all Storage Belgravia customers and users of our services in the area in which we operate. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Who this Privacy Policy applies to
This Privacy Policy applies to individual customers, prospective customers, and any authorised persons acting on behalf of a customer of Storage Belgravia in our local service area. It governs the personal data we process in connection with the provision of storage units, related services, enquiries, bookings, and account management.
What personal data we collect
We only collect personal data that is necessary for the purposes set out in this Privacy Policy. The types of personal data we may collect include:
Identification data, such as full name, title, date of birth, and proof of identity details as required for verification.
Contact data, such as correspondence address, billing address, and other contact details you provide.
Account and contract data, such as customer account numbers, contract details, storage unit numbers, and records of your interactions with us regarding your storage services.
Payment and billing data, such as payment method details and billing history. We do not store full card details when payments are processed through secure payment services provided by our payment processors.
Usage and interaction data, such as records of your enquiries, complaints, feedback, and any communications you have with us regarding our services.
Security and access data, such as access logs to our storage facility, vehicle registration information where relevant for site access management, and information relating to incidents or security events at our sites.
Technical data, where applicable, such as basic device and connection information when you visit our website, to ensure the proper functioning and security of our online services.
How we collect personal data
We collect personal data directly from you when you request a quote, make a booking, sign a contract, visit our facility, make a payment, or contact us with an enquiry. We may also collect personal data when you interact with our website or other digital tools we operate, and from records we keep to administer your storage arrangements.
In limited cases, we may receive personal data from third parties, such as identity verification services, payment service providers, or other parties you have authorised to share information with us.
Lawful bases for processing your data
We process personal data only where we have a lawful basis under the UK General Data Protection Regulation and related data protection laws. Depending on the context, we rely on the following lawful bases:
Contract: We process personal data to enter into and perform our contract with you, including setting up your account, managing your storage unit, processing payments, and providing customer support.
Legal obligation: We process personal data where this is necessary to comply with our legal obligations, for example, obligations relating to tax, accounting, fraud prevention, and other regulatory requirements.
Legitimate interests: We process personal data where this is necessary for our legitimate business interests, and where your interests and fundamental rights do not override those interests. This may include ensuring the security of our facilities, managing our relationship with you, improving our services, and handling complaints and disputes.
Consent: In specific circumstances, we may ask for your consent to process your personal data for particular purposes, such as certain types of marketing communications. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes, as appropriate to your relationship with us:
To provide, administer, and manage our storage services, including operating your account, organising access to your storage unit, arranging billing, and responding to enquiries.
To verify your identity, carry out eligibility and risk checks where required, and help prevent fraud or misuse of our facilities.
To maintain the safety and security of our premises, customers, and staff, including monitoring access to our facilities and investigating security incidents.
To manage our relationship with you, including notifying you of important changes to your contract, terms of service, or this Privacy Policy.
To maintain business records, including accounting, auditing, and tax records, and to comply with applicable laws and regulations.
To improve our services and operations, including for training, quality assurance, and service development purposes, using aggregated or de-identified data where possible.
Data retention and storage
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In determining appropriate retention periods, we consider the nature of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal obligations.
As a general guideline:
Customer account and contract data are kept for the duration of your contract and for a reasonable period afterwards to handle any queries, disputes, or legal claims.
Financial and transaction records are retained for the period required under tax and accounting laws.
Security and access logs are retained for a limited period necessary to investigate incidents, ensure site security, and comply with legal obligations.
Where we no longer need personal data for the purposes described, we will securely delete or anonymise it.
Data processors and third parties
We may share personal data with third party service providers who act as data processors on our behalf. These processors are engaged to perform functions such as payment processing, identity verification, IT hosting and maintenance, customer relationship management tools, and security services for our facilities.
We only share personal data with processors that provide sufficient guarantees to implement appropriate technical and organisational measures to protect your data and to process it only in accordance with our written instructions and applicable data protection laws.
We may also share personal data with other third parties in the following circumstances:
Where we are under a legal obligation to do so, for example to law enforcement, regulatory bodies, or public authorities.
Where it is necessary to establish, exercise, or defend legal claims.
In connection with a business sale, merger, or restructuring, in which case personal data may be transferred to the relevant parties subject to appropriate safeguards.
International transfers
Where we use data processors or service providers located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include entering into contracts incorporating standard data protection clauses approved by relevant authorities or relying on other lawful transfer mechanisms permitted under data protection laws.
How we protect your data
We take the security of your personal data seriously. We implement technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, and regular review of our security practices. While we strive to protect your personal data, no system can be guaranteed to be completely secure.
Your data protection rights
Under data protection laws, you have several rights in relation to your personal data, subject to certain conditions and exceptions. These rights include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the personal data we hold about you, along with information about how we use it.
Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain situations, such as while we are verifying the accuracy of the data or considering an objection you have raised.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling based on those interests. We will stop processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.
Right to data portability: You can request that we provide certain personal data to you or to another controller in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and is carried out by automated means.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
