Storage Burnt Oak Privacy Policy
This Privacy Policy explains how Storage Burnt Oak collects, uses, shares, and protects personal data about individuals who use our storage services. It applies to all Storage Burnt Oak customers in the surrounding area, including anyone who makes an enquiry, signs a storage agreement, visits our premises, or uses our services in any way.
We are committed to handling personal data in a lawful, fair, and transparent way, in accordance with the United Kingdom General Data Protection Regulation and the Data Protection Act.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identity and contact details such as name, postal address, billing address, contact address, date of birth, and similar identification details.
Contact information such as email address and other contact methods you choose to provide so that we can respond to enquiries, manage bookings, and administer contracts.
Contract and account information such as storage unit details, contract start and end dates, payment history, records of communications with you, and notes relating to your account and instructions.
Payment details such as information required to process payments, for example partial payment card data or bank information captured and processed through secure payment services. We do not store full card details when this is not necessary.
Security and access information such as vehicle registration numbers, access codes, records of entry and exit, and closed circuit television images captured on our premises for security and safety purposes.
Technical and usage data such as information about how you interact with our website or digital platforms, including device information, approximate location data, and log data, where this is collected through your browser settings or similar technologies.
Any other information you choose to provide to us, for example in correspondence, feedback, or when completing forms related to our services.
How we collect personal data
We collect personal data directly from you when you make an enquiry, request a quote, sign up for a storage unit, make a payment, visit our site, or communicate with us in any way.
We may also obtain personal data from third parties where this is necessary and lawful, for example from payment service providers who confirm that a transaction has been completed, or from credit reference or identity verification sources where required for fraud prevention or compliance checks.
Lawful basis for processing
We only process personal data where we have a lawful basis under data protection law. The main legal grounds we rely on are:
Contractual necessity. We process your personal data when it is necessary to enter into or perform a contract with you. This includes setting up and managing your storage agreement, processing payments, communicating with you about your unit, and dealing with queries, renewals, or cancellations.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This may include maintaining site and customer security, preventing fraud, improving our services, managing our relationship with you, and ensuring the effective operation of our business. We assess these interests carefully and balance them against your privacy.
Legal obligations. We process personal data where we are required to do so by law, such as for tax and accounting requirements, record keeping, prevention and detection of crime, or responding to lawful requests from authorities.
Consent. In limited cases we may rely on your consent, for example for certain types of marketing communication where this is required. Where we rely on consent, you have the right to withdraw it at any time, and this will not affect the lawfulness of processing carried out before consent was withdrawn.
How we use personal data
We use personal data for the following purposes:
To provide storage services to you, set up and manage your account, allocate units, and administer your contract.
To process payments, issue invoices, collect outstanding sums, and handle refunds where applicable.
To manage our relationship with you, including responding to enquiries, handling complaints, and keeping you informed about changes to our terms or services.
To maintain safety and security on our premises, including verifying identity where required and monitoring access through security systems such as closed circuit television.
To operate and improve our website and services, including understanding usage patterns, enhancing customer experience, and supporting our business administration.
To comply with legal and regulatory obligations, cooperate with law enforcement, and protect our legal rights and the rights of others.
Data retention
We keep personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, tax, accounting, or reporting requirements.
The retention period depends on the type of information and the context of our relationship with you. In general:
Contract and billing information is kept for a number of years after your contract ends to comply with legal obligations and for the establishment, exercise, or defence of legal claims.
Security and access data such as closed circuit television images and entry records are retained for a shorter period, unless an incident is under investigation or the data is required for legal reasons.
Marketing related information is retained until you object or withdraw consent, or until it is no longer needed for the purpose for which it was collected.
When personal data is no longer required, we will securely delete or anonymise it.
Data processors and sharing
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include:
Payment service providers who process card or bank transactions securely.
Information technology and system support providers who host or maintain our digital systems, storage, or communications tools.
Security and monitoring providers who assist in maintaining safety and access control at our sites.
Professional advisers such as accountants or legal advisers where necessary for our business and in line with confidentiality obligations.
We require all processors to handle personal data securely, to use it only in accordance with our instructions, and to comply with data protection law. They are not permitted to use your data for their own purposes.
We may also share personal data with third parties acting as independent controllers where required by law, for example with law enforcement, regulators, or tax authorities, or where necessary to protect our rights or the rights of others.
International transfers
Where we use service providers located outside the United Kingdom or European Economic Area, or where personal data is accessed from another country, we ensure that appropriate safeguards are in place. These may include using countries recognised as providing an adequate level of protection, or implementing standard contractual clauses and other measures required by data protection law.
Your data protection rights
You have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
The right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is used.
The right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
The right to erasure. In some circumstances you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no legal reason to keep it.
The right to restrict processing. You can ask us to restrict the use of your personal data in certain situations, for example while we check its accuracy or consider an objection you have raised.
The right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds or need to continue for legal reasons. You always have the right to object to direct marketing.
The right to data portability. In some circumstances you can request that we provide your personal data in a structured, commonly used, and machine readable format, and that we transmit it to another organisation where technically feasible.
Where we rely on consent as our lawful basis, you have the right to withdraw that consent at any time.
How to exercise your rights and complaints
If you wish to exercise any of your rights, or if you have questions about this Privacy Policy or how we handle personal data, you can contact us using the details provided in your contract or on our official documents and communications. We may need to confirm your identity before responding to your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. The revised version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information.
