Privacy Policy - Redbridge Storage

Last updated: 2026

This Privacy Policy explains how Redbridge Storage collects, uses, shares, stores, and protects personal data in connection with its storage services, related facilities, and customer interactions. It applies to all Redbridge Storage customers in the area, including individuals, business customers, and any authorised representatives acting on their behalf. We are committed to handling personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Redbridge Storage provides storage services and associated customer support. For the purposes of data protection law, we act as the data controller for the personal data we collect and use about our customers, prospects, visitors, and other individuals whose data we receive in the course of operating our services.

This Policy applies where we decide why and how personal data is processed, including when we manage bookings, administer accounts, maintain security, respond to enquiries, and meet our legal obligations.

2. Personal data we collect

We collect only the information necessary for our business operations and legal compliance. Depending on your relationship with us, we may collect the following categories of personal data:

Identity data such as your name, date of birth, title, and identification details where required for verification.
Contact data such as postal address, email address, and telephone number.
Account and service data such as booking details, unit assignment, access records, payment status, and customer communications.
Financial data such as billing information, payment card details handled through secure payment processors, and transaction history.
Technical data such as IP address, device information, browser type, and log data when you interact with our digital systems.
Security data such as CCTV footage, access control records, incident reports, and visitor logs where relevant to the safety of our premises.
Correspondence data such as emails, complaints, feedback, or other communications you send to us.

We generally do not seek to collect special category data. If such information is provided to us incidentally, we will process it only where lawful and necessary.

3. How we use your data

We use personal data for the following purposes:

to set up and manage your storage account;
to verify identity and prevent fraud;
to provide access to storage facilities and maintain security;
to process payments, invoices, refunds, and arrears;
to communicate about bookings, service changes, and customer support matters;
to enforce contractual terms and manage disputes;
to comply with legal, regulatory, tax, and accounting obligations;
to protect the rights, property, and safety of Redbridge Storage, customers, staff, and visitors;
to improve our services, systems, and operational efficiency;
to maintain records and demonstrate compliance.

We will only use personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis to process personal data. We rely on the following lawful bases, depending on the context:

Contract

We process data where it is necessary to enter into or perform a contract with you, such as opening an account, providing storage services, and managing billing.

Legal obligation

We process data where we must comply with legal requirements, including tax, accounting, fraud prevention, regulatory record-keeping, and lawful requests from authorities.

Legitimate interests

We may process data where it is necessary for our legitimate interests or those of a third party, provided your rights and interests do not override those interests. This may include facility security, CCTV monitoring, customer administration, service improvement, and dispute management. We carry out assessments where required to ensure such processing is proportionate and fair.

Consent

Where we rely on your consent, we will make this clear at the time of collection. You can withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

Vital interests

In exceptional circumstances, we may process personal data to protect someone’s life or physical safety.

5. Sharing and processors

We do not sell personal data. We may share data with trusted third parties when necessary to operate our services, meet legal duties, or protect our legitimate interests. These parties may act as processors or independent controllers.

Examples of processors may include:

IT and cloud service providers that host our systems, email services, and data storage;
payment service providers that securely process card and online payments;
accounting and bookkeeping providers that support invoicing and financial administration;
security and surveillance providers that assist with premises protection and CCTV systems;
customer management software providers that help manage bookings and service records;
professional advisers such as lawyers, auditors, and insurers;
maintenance and facilities contractors where access or service records are required to complete work.

Where we use processors, they are required to act only on our instructions, maintain appropriate security, and comply with data protection law. We take steps to ensure that any sharing is necessary and proportionate.

We may also disclose personal data if required by law, to respond to lawful requests, to establish or defend legal claims, or to protect the rights and safety of others.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason we hold it.

Customer account records are usually retained for the duration of the relationship and for a period afterwards to handle queries, disputes, and audits.
Financial and tax records are retained for the period required by law and accounting standards.
Security records such as CCTV footage and access logs are kept for a limited period unless needed longer for incident investigation, legal claims, or safety purposes.
Correspondence is retained as needed to manage communications and resolve issues.

When personal data is no longer required, we will delete it securely or anonymise it so it can no longer identify you.

7. Data security

We use appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, encryption where appropriate, and regular review of our systems and procedures.

However, no method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.

8. Your rights

Depending on the circumstances and legal basis for processing, you may have the following rights under data protection law:

Right of access to request a copy of the personal data we hold about you;
Right to rectification to correct inaccurate or incomplete data;
Right to erasure in certain situations where we no longer need the data or where processing is unlawful;
Right to restriction of processing in certain circumstances;
Right to object to processing based on legitimate interests or direct marketing;
Right to data portability for data processed by automated means based on consent or contract, where applicable;
Right to withdraw consent where processing is based on consent;
Right to complain to the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to your request. Some rights are subject to legal limits and may not apply in every case.

9. International transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable law. This may include use of approved contractual clauses or transfers to countries recognised as providing adequate protection.

10. Children

Our services are not intended for children, and we do not knowingly collect personal data from minors except where provided by an adult customer or authorised representative in connection with a lawful storage arrangement.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will apply to your relationship with Redbridge Storage. We encourage you to review it periodically.

12. Final statement

By using Redbridge Storage services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy and applicable data protection laws. We are committed to using personal data fairly, lawfully, and transparently, with respect for your privacy and rights.