Storage Bayswater Privacy Policy
This Privacy Policy explains how Storage Bayswater collects, uses, stores and protects personal data relating to customers and prospective customers in the Bayswater area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Bayswater customers and prospective customers located in the Bayswater area, as well as visitors who contact us to enquire about our storage services. It covers personal data we collect in person at our premises, over the phone, through electronic communications, and in connection with the performance of our storage contracts.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us. This may include:
Identification and contact details, such as your name, postal address, billing address, and other basic contact details you provide to us.
Account and contract information, such as storage unit number, contract dates, payment history, agreed services, and records of correspondence relating to your contract.
Payment and billing information, such as payment method details and transaction records. We do not store full card details if processed through a secure payment provider.
Usage and access data, such as access logs to the storage facility, time and date of entry, CCTV recordings for security and safety purposes, and any incident reports.
Communication data, such as enquiries, complaints, feedback and other communications you send to us, including information you provide when you ask for a quote or request information about our services.
How We Collect Personal Data
We may collect your personal data directly from you when you sign up for storage services, request a quote, make a payment, visit our facility, or contact us with an enquiry. We may also collect personal data from third parties where this is necessary and lawful, for example from payment service providers for fraud prevention checks or from publicly available sources to verify identity where required.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis to do so. Depending on the context, this may include:
Contract performance. We process your personal data when it is necessary to enter into or perform a contract with you, such as to provide you with storage services, manage your account, handle payments, and communicate with you about your booking.
Legal obligations. We may process your personal data where we are required to comply with legal and regulatory obligations, such as tax, accounting, record-keeping, security, and health and safety requirements.
Legitimate interests. We may process your personal data where it is necessary for our legitimate interests and those interests are not overridden by your rights. This can include ensuring the security of our premises, preventing fraud, improving our services, and managing our business operations.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of marketing. When we rely on consent, you are free to withdraw it at any time, and this will not affect the lawfulness of processing based on consent before it was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, manage and administer your storage contract and account, including preparing agreements, managing access to your unit, and communicating with you about your bookings.
To process payments, issue invoices, handle refunds, and undertake financial reporting and audits.
To ensure the safety and security of our premises, including by operating access control systems, maintaining access logs and using CCTV monitoring.
To provide customer service and support, respond to enquiries, deal with complaints, and handle any disputes or claims.
To comply with applicable laws, regulations and guidance, including in relation to taxation, fraud prevention, and security.
To improve our services, including by analysing how customers use our facilities and by maintaining internal records required for business management.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting obligations. When deciding how long to keep personal data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
In general, we keep customer records and billing information for a period required by relevant tax and accounting laws following the end of your contract. CCTV footage and access logs are retained for a limited period necessary for security and incident investigation, unless a longer retention period is required in connection with a specific investigation or legal claim. After the applicable retention period, personal data is securely deleted or anonymised.
Data Processors and Third Parties
We may share your personal data with trusted third-party service providers who process data on our behalf. These processors assist us with services such as secure payment processing, IT infrastructure and maintenance, data storage, and professional advisory services.
When we use processors, we ensure that appropriate data protection agreements are in place and that they only process your personal data in accordance with our documented instructions, maintain confidentiality, and implement appropriate technical and organisational measures to protect your data.
We may also share personal data with other third parties where required by law, to protect our legal rights, to assist law enforcement, or in connection with a business restructuring or transfer of assets, to the extent permitted by data protection laws.
International Data Transfers
Where we use processors or service providers located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is afforded a level of protection essentially equivalent to that provided by the UK GDPR. This may include relying on an adequacy regulation, or using approved standard contractual clauses together with additional safeguards where necessary.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. Measures may include secure access controls, restricted access to personal data on a need-to-know basis, staff training on data protection, and regular review of our security procedures. However, no system can be guaranteed to be completely secure, and you are also responsible for keeping any access credentials safe and notifying us promptly if you suspect any unauthorised use of your account.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights may include:
The right of access. You can request confirmation as to whether we process your personal data and obtain a copy of the personal data we hold about you, together with information about how we process it.
The right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis for processing.
The right to restriction of processing. You can ask us to restrict our processing of your personal data in certain situations, for example while we verify the accuracy of data you contest.
The right to data portability. In certain cases, you have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller where technically feasible.
The right to object. You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including for certain types of direct marketing, and we will cease processing unless we have compelling legitimate grounds to continue.
Where we rely on consent as the lawful basis, you also have the right to withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Children
Our storage services are not directed to children, and we do not knowingly collect personal data of individuals under the age required to enter into contracts in the relevant jurisdiction. If we become aware that personal data has been collected from a child without appropriate consent or authority, we will take reasonable steps to delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any updated version will be made available to you and will take effect from the date of publication, unless otherwise stated. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
