Storage Blackwall Privacy Policy
This Privacy Policy explains how Storage Blackwall collects, uses, stores and protects personal data relating to customers and prospective customers using our storage services in the area. It also outlines your rights under the UK General Data Protection Regulation and the EU General Data Protection Regulation, as applicable.
This Privacy Policy applies to all Storage Blackwall customers, prospective customers and users of our services located in our operating area, regardless of the specific storage facility they use.
1. Data Controller
Storage Blackwall acts as the data controller for the personal data processed in connection with the provision, administration and promotion of our storage services. This means that Storage Blackwall determines the purposes and means of processing your personal data.
2. Categories of Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. These categories may include:
Identification data such as full name, title, date of birth and a form of identification where required for verification or security purposes.
Contact details such as address, billing address, contact preferences and similar information necessary for communication and contract management.
Account and contract data such as customer number, unit number, contract start and end dates, payment terms, correspondence relating to your booking or contract and details of services you have chosen.
Payment and billing data such as payment method, partial payment card details where required for recurring payments, transaction history, invoices and records of payments made, refunds issued and balances owed.
Security and access data such as CCTV images captured at our facilities, entry and exit logs, access control records, vehicle registration details where recorded for access or security reasons and incident reports.
Usage and communication data such as enquiries submitted, complaints, feedback, call notes, email correspondence, and your marketing and communication preferences.
Technical data such as IP address, device identifiers, browser type and basic usage data from our website or online booking tools, collected via standard logging technologies to ensure security and improve our services.
3. Purposes and Lawful Bases for Processing
We process your personal data only where we have a valid lawful basis under the GDPR. Depending on the context, the lawful bases we rely on include contract, legal obligation, legitimate interests and consent.
To provide and manage storage services. We use your identification, contact, account, payment and security data to create and administer your contract, allocate and manage your storage unit, process payments and communicate with you about your booking. The lawful basis is performance of a contract and, where required, our legitimate interests in managing our services efficiently.
To maintain safety and security. We use security and access data, such as CCTV images and access logs, to protect our facilities, staff, customers and property, and to investigate incidents. The lawful basis is our legitimate interests in ensuring site security and the safety of people, and, where necessary, to comply with legal obligations.
To comply with legal and regulatory obligations. We may process identification, payment, contract and security data to meet requirements under tax, accounting, safety, crime prevention and other applicable laws. The lawful basis is compliance with legal obligations.
To manage customer service and communication. We use your contact and communication data to respond to enquiries, handle complaints, provide updates on your account or facility, and send notifications about changes to our terms or services. The lawful basis is performance of a contract or our legitimate interests in providing effective customer service.
To promote our services and send marketing communications. With your consent where required, or where permitted by law based on our legitimate interests, we may use your contact and usage data to send you information about products, services, offers or events related to Storage Blackwall. You can opt out at any time.
To improve our services and facilities. We may use anonymised or aggregated usage and technical data to understand how our services are used and to enhance customer experience, security and efficiency. The lawful basis is our legitimate interests in developing our services and facilities.
4. Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations.
Customer account and contract records are typically retained for a period following the end of your contract to manage any queries, disputes, claims or legal proceedings, and to comply with tax and accounting requirements.
Payment and billing data is retained for the duration required by applicable financial and tax regulations.
CCTV and access control records are kept for a limited period that is appropriate for security and incident investigation purposes, unless a longer retention period is needed due to a specific investigation or legal requirement.
Marketing and communication preference data is retained while you remain subscribed to our communications or until you withdraw your consent or object to processing, after which we may retain a minimal record of your preference so we can respect your choice in future.
When personal data is no longer required, we will securely delete or anonymise it in line with our retention policies.
5. Data Processors and Sharing of Data
We may share your personal data with trusted third parties that act as data processors on our behalf. These processors only process your data according to our instructions and are contractually required to implement appropriate technical and organisational security measures.
Typical categories of data processors include:
IT and cloud service providers that host our systems, databases, CCTV storage and back up solutions.
Payment service providers and banks that process card payments, direct debits and other financial transactions.
Security and access control providers that supply and manage CCTV, access systems and alarm monitoring.
Professional advisers such as accountants, auditors, legal advisers and insurers who support us in meeting our legal and business obligations.
Customer communication and service providers that support our customer contact channels and messaging tools.
We may also need to share personal data with public authorities, regulators, law enforcement agencies or courts where required by law or where necessary to establish, exercise or defend legal claims.
We do not sell your personal data. Where we transfer personal data outside the UK or European Economic Area, we will ensure that appropriate safeguards are in place in accordance with GDPR requirements.
6. Your Data Protection Rights
Under the GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and legal limitations.
Right of access. You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data, together with information about how it is used.
Right to rectification. You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You can ask us to restrict the processing of your personal data in specific situations, such as while we verify the accuracy of data you believe is inaccurate, or where you have objected to processing and we are considering your request.
Right to data portability. For certain data processed by automated means on the basis of your consent or a contract, you may request that we provide that data to you in a structured, commonly used and machine readable format, or transmit it to another controller where technically feasible.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. You also have an absolute right to object at any time to the use of your data for direct marketing.
Right to withdraw consent. Where we rely on your consent as the lawful basis for processing, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint. You have the right to lodge a complaint with a data protection authority if you believe that your rights have been infringed or your personal data has not been processed in accordance with GDPR.
7. Updates to This Privacy Policy
We may update this Privacy Policy from time to time in response to changes in our services, legal obligations or data protection practices. Any updated version will be made available to customers and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data at Storage Blackwall.
