Self Storage Brent Privacy Policy
This Privacy Policy explains how Self Storage Brent collects, uses, stores and protects your personal data in accordance with the UK General Data Protection Regulation and applicable data protection laws. It applies to all Self Storage Brent customers and prospective customers in the local area, including individuals, sole traders and representatives of business customers who use or enquire about our storage services.
Who we are and scope of this Policy
Self Storage Brent is a storage service provider offering storage units and related services to customers in the surrounding area. For the purposes of data protection law, Self Storage Brent is the data controller for the personal data described in this Privacy Policy.
This Privacy Policy applies to personal data collected in connection with our services, including when you make an enquiry, obtain a quote, sign a storage agreement, access our facilities, visit our website, interact with us on social media where we act as controller, or otherwise communicate with us.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identification and contact details, such as your full name, postal address, billing address, and any other contact details you choose to provide.
Customer account and contract information, such as storage unit number, contract start and end dates, payment status, and communication preferences.
Payment and billing information, such as payment method details, billing history, invoices, and records of payments made or due. Where we use third party payment processors, they may collect and process payment card details on our behalf.
Verification and security information, such as copies or details of identity documents where required for fraud prevention or legal compliance, vehicle registration numbers used to access our site, access codes, or key details relating to your storage unit.
Communication records, such as enquiries, complaints, feedback, and any correspondence you have with us by post or through other communication channels.
Usage and technical data relating to our website, such as IP address, device and browser type, and basic usage data, collected through standard logging technologies for security and performance purposes.
CCTV images and access data, where we operate CCTV for the security of our premises, customers and staff, and maintain logs of entry and exit to the storage facility.
Lawful basis for processing your data
We only process your personal data where we have a valid lawful basis under data protection law. Depending on the context, we rely on the following legal bases:
Performance of a contract. We process your data to provide our storage services, manage your account, handle payments, communicate with you about your storage agreement, and take steps at your request before entering into a contract, such as providing quotes or answering enquiries.
Compliance with legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, including tax and accounting rules, anti fraud and anti money laundering obligations, health and safety law, and lawful requests from public authorities.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises and systems, improving and developing our services, maintaining accurate business records, preventing fraud and misuse of our facilities, and handling customer service issues.
Consent. In limited cases, we may rely on your consent, for example for certain types of marketing communications where consent is required by law. When processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To respond to enquiries, provide quotes, and give information about our storage services that you request from us.
To set up and manage your customer account, prepare and manage storage agreements, and administer your bookings and unit access.
To process payments, handle billing and debt collection, and maintain accurate financial and transactional records.
To maintain the security and integrity of our premises, including by operating CCTV, managing access control, and investigating incidents.
To communicate with you about your contract, any changes to our terms or this Privacy Policy, and important service related information such as access changes or safety notices.
To carry out internal reporting, quality control, training, and service improvement activities.
To send you marketing communications about our services where permitted by law and where you have not opted out.
To comply with our legal and regulatory obligations and respond to requests from regulatory or law enforcement authorities where required.
Data sharing and processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and where such sharing is compliant with data protection law.
Service providers acting as data processors. We may engage third party companies to provide services on our behalf, such as payment processing, secure data hosting, customer relationship management systems, email and communication services, IT support, and professional advisors. These processors are only permitted to process your personal data on our documented instructions and must keep it secure.
Professional and legal advisors. We may share necessary personal data with our accountants, auditors, insurers, or legal advisors where required for business administration or to establish, exercise or defend legal claims.
Authorities and law enforcement. We may disclose personal data where required by law, regulation or court order, or where necessary to cooperate with law enforcement, regulators or other public authorities.
Business transfers. In the event of a sale, merger, or other restructuring of our business, we may transfer relevant personal data to the new owner or entity, subject to appropriate safeguards and compliance with applicable law.
International transfers
Where we use service providers located outside the United Kingdom or European Economic Area, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include the use of standard contractual clauses approved by the relevant authorities or other lawful transfer mechanisms.
Data retention
We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. Retention periods may vary depending on the type of data and the context in which it was collected, but we apply the following general principles:
Customer and contract data is typically retained for the duration of your contract and for a period after it ends, in line with limitation periods for legal claims and statutory record keeping obligations.
Financial and transaction records are kept for the period required by tax and accounting legislation.
CCTV footage and access logs are retained for a limited period necessary for security and incident investigation, unless a longer retention is required in connection with a specific investigation or legal claim.
Marketing related data is generally retained until you withdraw your consent or object to receiving marketing communications, or until it is no longer needed for the purposes for which it was collected.
When personal data is no longer needed, we will delete it or anonymise it so that it can no longer be associated with you.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You have the right to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you, together with information about how we use it.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data concerning you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may request that we restrict our processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to its processing.
Right to data portability. Where processing is based on consent or on a contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine readable format and to have it transmitted to another controller where technically feasible.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling related to those interests, and we will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or the processing is required for legal claims. You also have an absolute right to object to the use of your personal data for direct marketing.
Right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out prior to withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your data protection rights have been infringed.
Security of your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include access controls, staff training, secure storage, encryption and regular review of our security practices. While we strive to protect your personal data, no system is completely secure and we cannot guarantee absolute security.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any changes will be posted in the latest version of this Privacy Policy, and the updated version will apply from the date it is published.
Contact and further information
If you have any questions about this Privacy Policy, about how Self Storage Brent handles your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the contact details provided on our website or through our usual customer service channels.
