Storage Westcombe Park Privacy Policy
This Privacy Policy explains how Storage Westcombe Park collects, uses, stores, and protects personal data relating to our customers and prospective customers. It applies to all Storage Westcombe Park customers and enquirers in our service area, including those who contact us, visit our premises, or use any of our storage or related services.
Who we are and scope of this policy
Storage Westcombe Park is a provider of storage units and related services. In the context of the General Data Protection Regulation and applicable UK data protection laws, we act as the data controller for the personal data described in this Privacy Policy. This Privacy Policy applies to all individuals whose personal data we process in connection with our storage services, including individual customers, business contacts, guarantors, emergency contacts, and visitors to our premises.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us. The personal data we may collect includes:
Identification and contact details such as full name, postal address, billing address, date of birth, and contact details required to manage your account and communicate with you.
Account and contract information such as storage unit number, contract start and end dates, rental terms, payment history, communication history, and preferences.
Payment and billing data such as payment method details, billing records, and transaction information, processed to take payments and manage accounts. We do not store full payment card details where payments are processed by third-party payment processors.
Verification and security information such as copies or details of identification documents you provide for verification purposes, vehicle registration numbers used to access our site, and entry and exit logs.
Technical and usage information such as information collected through access control systems, CCTV footage, and limited technical data from devices used to communicate with us where necessary to provide services and ensure security.
Correspondence and enquiry information such as records of enquiries, complaints, feedback, and any information you choose to provide when contacting us in person, by post, or through digital channels.
How we collect personal data
We collect personal data directly from you when you request a quote, make a booking, sign a contract, make a payment, communicate with us, visit our premises, or otherwise use our services. We may also receive personal data indirectly from other parties where lawful, for example from your employer or business, from a person who books a unit on your behalf, from a guarantor, or from service providers who help us verify identity, process payments, or maintain security.
Lawful bases for processing your data
We process your personal data only where we have a lawful basis to do so under data protection laws. Depending on the purpose, we rely on the following lawful bases:
Performance of a contract: We process personal data to provide our storage services, manage your account, administer your contract, take payments, and respond to your requests.
Compliance with legal obligations: We process data where necessary to comply with laws and regulations, including tax and accounting rules, anti fraud and crime prevention obligations, and health and safety requirements.
Legitimate interests: We may process personal data where it is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises and units, operating and improving our services, preventing and detecting fraud or misuse, managing business relationships, and handling enquiries and complaints.
Consent: In limited cases we may rely on your consent, for example for certain optional communications. Where we rely on consent, you can withdraw it at any time by contacting us, without affecting the lawfulness of processing based on consent before its withdrawal.
Purposes for which we use personal data
We use the personal data we collect for the following purposes:
To provide storage units and related services, including managing bookings, access and security, customer support, contract administration, and service communications.
To process payments, manage invoices, handle refunds, and maintain appropriate financial records.
To verify identity, confirm eligibility to enter into a contract, and prevent unauthorised access to our premises or storage units.
To maintain the safety and security of our customers, staff, premises, and property, including the use of CCTV and access control systems for monitoring and incident investigation.
To respond to enquiries, requests, feedback, or complaints, and to communicate with you about your account, changes to terms, or this Privacy Policy.
To meet legal and regulatory obligations, including cooperating with law enforcement and regulatory authorities where required by law.
To manage and develop our business operations, including monitoring performance, service quality, and customer satisfaction, and maintaining appropriate records for internal administration.
Data retention and storage
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The retention period will vary depending on the type of data and the purpose of processing. In general, we keep contract and billing records for a period required to meet legal, tax, and accounting obligations, which may extend for several years after the end of your contract. Security data, such as CCTV recordings and access logs, is stored for shorter periods, unless it is needed to investigate an incident or comply with legal requirements. Once personal data is no longer required, we take steps to securely delete or anonymise it.
Data processors and third parties
We may share personal data with carefully selected third-party service providers who act as data processors on our behalf. These processors help us provide our services and may include payment processing providers, identity verification services, IT and cloud service providers, access control and security system providers, and professional advisers or contractors who support our operations.
Where we use data processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only according to our instructions, securely, and in compliance with data protection law. We do not sell your personal data. We may also share personal data with public authorities or law enforcement agencies where we are required to do so by law or where it is necessary to protect our rights, the rights of our customers, or the safety of individuals.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our service providers, we take steps to ensure that appropriate safeguards are in place. These may include using countries that have been recognised as providing an adequate level of data protection or putting in place standard contractual clauses or equivalent safeguards approved by relevant authorities.
Your data protection rights
Under data protection laws, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you may have the right to:
Access your personal data and obtain a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no longer a lawful basis for us to keep it.
Request restriction of processing of your personal data in certain circumstances.
Object to processing that is based on our legitimate interests, on grounds relating to your particular situation, unless we have compelling legitimate grounds to continue processing.
Data portability, which allows you to request that certain personal data is provided to you or another controller in a structured, commonly used and machine readable format where the processing is based on consent or contract and carried out by automated means.
Withdraw consent where you have previously given consent, without affecting the lawfulness of processing prior to withdrawal.
You can exercise your rights by contacting us and providing sufficient information to identify yourself and your relationship with Storage Westcombe Park. We may need to verify your identity before responding. We aim to respond to all valid requests within the time period required by law.
Security of your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. Measures include restricting access to personal data to those who need it for their role, using secure systems and storage solutions, and regularly reviewing our procedures. While we take reasonable steps to protect your information, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. When we make changes, we will update the date of the latest version and, where appropriate, inform you of significant changes. You should review this Privacy Policy periodically to stay informed about how we handle your personal data.
Contact and complaints
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us using the contact details provided on our website or at our premises. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.
