Storage Redbridge Privacy Policy
This Privacy Policy explains how Storage Redbridge collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Storage Redbridge customers and individuals making enquiries within our service area. We are committed to handling your personal data fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Who this policy applies to
This Privacy Policy applies to all individuals who use Storage Redbridge services or contact us about those services in the Storage Redbridge area. This includes existing customers, former customers and people who make enquiries about our storage services, whether as individuals, on behalf of a business, or as authorised representatives or emergency contacts named by a customer.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The main categories of data we may collect are:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and identification details provided for verification purposes.
Contact information such as email address and other communication details you choose to provide so we can respond to your enquiries and manage your account.
Contract and account information such as storage unit number, rental dates, contract details, services requested, payment status, and correspondence relating to your agreement with Storage Redbridge.
Payment and transaction data such as records of payments made, amounts, dates, and payment methods. We do not store full card details; where card payments are taken, they are processed securely by a payment service provider acting as our processor.
Usage and operational data such as entry and exit logs, access control records, and related security information collected to manage access to our facilities and safeguard our premises and customers.
Security and CCTV data such as images and recordings captured by CCTV systems in and around our facilities to help protect customers, staff, property and goods stored with us.
Communication data such as enquiries, complaints, feedback and any other correspondence exchanged with us by any channel, including notes of telephone conversations when relevant to your account or our services.
How we collect personal data
We collect personal data directly from you when you contact us, request a quote, enter into a storage agreement, make a payment, visit our facility or otherwise communicate with us. We may also receive data indirectly from third parties where they are authorised to act on your behalf, such as a business you represent, another person named on your agreement, or a payment provider confirming that a transaction has been processed.
Purposes and lawful bases for processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the specific activity, we rely on the following lawful bases:
Contract: We process data to enter into, manage and fulfil our storage agreements with you. This includes taking enquiries, preparing quotes, setting up and managing your account, processing payments, communicating with you about your agreement, and providing customer service.
Legal obligation: We process certain information to comply with legal and regulatory duties, such as maintaining accounting records, responding to legitimate requests from law enforcement or regulatory authorities, and meeting health and safety or security obligations.
Legitimate interests: We process data where it is necessary for our legitimate business interests and those interests are not overridden by your rights. This includes ensuring the security of our premises and systems, preventing and detecting fraud, managing access to our facility, protecting our property and that of our customers, improving our services, handling enquiries and complaints, and exercising or defending legal claims.
Consent: In limited cases, we may rely on your consent, for example where required to send certain types of optional marketing communications or where you ask us to share information with a third party not otherwise involved in providing our services. Where processing is based on consent, you can withdraw your consent at any time.
How long we keep your data
We keep personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements. Retention periods are determined based on the type of data, the purpose of processing and any applicable legal obligations.
Customer account and contract information is generally retained for a period after your agreement ends, to enable us to respond to enquiries, manage any disputes, comply with tax and accounting rules, and demonstrate compliance with our legal obligations. Security and CCTV data is retained for shorter periods, unless a longer period is required in connection with an incident, investigation or legal claim. When personal data is no longer required, it is securely deleted or anonymised.
Data processors and third parties
We may share your personal data with carefully selected third parties who act as processors on our behalf. These service providers are only permitted to process your data in accordance with our instructions and must implement appropriate technical and organisational measures to protect your data.
Examples of processors we may use include payment processing providers, IT hosting and support providers, access control and security system providers, and providers of software used to manage customer accounts and billing. We remain responsible for the acts and omissions of our processors in relation to your personal data.
We may also share personal data with other third parties where required by law, where necessary to establish, exercise or defend legal claims, or where it is otherwise lawful and appropriate. In such cases, the third party will be an independent controller and responsible for its own compliance with data protection law.
International transfers
Where any of our processors or systems involve transferring personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, such as using countries that have been recognised as providing an adequate level of protection or entering into contracts that contain standard data protection clauses approved for this purpose.
How we protect your personal data
We take security seriously and use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. Measures include access controls, secure storage, staff training, and regular review of our procedures and systems. While no system can be completely secure, we work to protect your information in line with industry practices and legal requirements.
Your data protection rights
Under the UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, along with information about how we use it.
Right to rectification: You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may not apply where we need to retain data to comply with legal obligations or to establish, exercise or defend legal claims.
Right to restriction: You have the right in some situations to ask us to restrict the processing of your personal data, for example where you contest its accuracy or where you have objected to our processing and we are considering that objection.
Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible.
Right to object: You have the right to object to processing based on our legitimate interests, including profiling based on those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.
Rights in relation to consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address any concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data processing activities or applicable law. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
