Storage Erith Privacy Policy
This Privacy Policy explains how Storage Erith collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all individuals and businesses using Storage Erith services within the Storage Erith area. We are committed to processing personal data lawfully, fairly and transparently, in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Scope of this Privacy Policy
This Privacy Policy applies to all personal data processed by Storage Erith in connection with self-storage, related services, enquiries, and communications with our customers and prospective customers in the Storage Erith area. By using our services or providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Personal data we collect
We collect and process different types of personal data depending on how you interact with Storage Erith. The categories of data we may collect include:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and any national identification or document numbers that you choose to provide for verification.
Contact and communication details such as email address, preferred contact method, and records of communications with us including enquiries, correspondence and feedback.
Contract and account information such as storage unit number, rental dates, contract start and end dates, access authorisation details, payment history, account status and information relating to services requested or purchased.
Payment and billing information such as payment method details, transaction records, billing address and invoices. Card details are processed securely via our payment processors and are not stored in full by Storage Erith.
Security and access data such as CCTV images recorded on-site, access logs for our premises and storage units, key or code allocation, and details of any security incidents or breaches.
Technical and usage data such as information about how you use our services, including time and date of account access, communication preferences and basic device or browser information where relevant to service delivery or security.
How we collect personal data
We collect personal data in several ways, including when you:
Make an enquiry about our storage services, request a quote or provide contact details.
Sign a storage agreement or related service contract with Storage Erith.
Set up or manage your customer account, including updating your information or preferences.
Visit our premises, where CCTV and access control systems operate for security and safety.
Communicate with us by phone, in person, by post or using any online or digital channels we provide.
Make payments for services, where data is captured by our payment processors.
Lawful basis for processing
Storage Erith processes personal data only where we have a lawful basis under GDPR. The main lawful bases we rely on are:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account and handling payments.
Legal obligation: We may process personal data to comply with legal or regulatory requirements, including tax, accounting, law enforcement, and health and safety obligations.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, preventing fraud, managing and improving our services, and maintaining accurate business records.
Consent: In some cases, we may rely on your consent, for example for certain types of marketing communications or optional services. Where we rely on consent, you can withdraw it at any time.
How we use personal data
We use the personal data we collect for the following purposes:
To provide storage and related services, including processing applications, setting up and administering contracts, managing access to storage units, and handling enquiries and service requests.
To manage customer accounts, including updating contact details, managing billing, processing payments, and issuing invoices, statements and relevant notices.
To maintain security and safety at our premises through access control, CCTV monitoring, and investigation of incidents, to protect customers, visitors, staff and property.
To comply with legal and regulatory obligations, including record-keeping, tax and accounting requirements, and responding to lawful requests from authorities.
To improve and develop our services, including analysing service usage, managing customer feedback and planning capacity or operational changes.
To communicate with you regarding your contract, account, changes to our terms or policies, and any service-related information that may affect you.
Where permitted, to send you information about relevant services or offers that may be of interest, and to manage your marketing preferences.
Data retention
Storage Erith retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or regulation. Retention periods may vary depending on the type of data and the applicable legal or business requirements.
Contract and account records are generally kept for a specified period after the end of your contract to meet legal, tax and accounting obligations and to handle any queries or disputes.
Payment and transaction records are retained to comply with financial and audit requirements.
CCTV footage and access logs are retained for a limited period, unless longer retention is required in connection with a specific investigation, dispute or legal obligation.
Marketing-related data is kept while you remain subscribed or engaged with such communications, or until you withdraw consent or object to processing.
When personal data is no longer required, it is securely deleted, anonymised or otherwise disposed of in a safe manner.
Data processors and third parties
Storage Erith may engage carefully selected third party service providers who act as data processors on our behalf. These providers process personal data strictly in accordance with our instructions and only for the purposes described in this Privacy Policy or as otherwise notified to you.
Examples of such processors include payment processing providers, IT and hosting providers, security and CCTV system providers, customer management system providers, and professional advisers such as accountants or legal advisers where they require limited access to personal data for their services.
We ensure that appropriate data processing agreements and safeguards are in place with all processors to protect your personal data in line with GDPR requirements. We do not sell your personal data to third parties.
International transfers
Where any personal data is transferred outside the United Kingdom or the European Economic Area by or on behalf of Storage Erith, we ensure that appropriate safeguards are in place to protect your data. These may include adequacy regulations, standard contractual clauses or equivalent protections as required by data protection laws.
Your data protection rights
Under GDPR, you have a number of rights in relation to your personal data processed by Storage Erith. These rights include:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
Right to object: You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling based on those interests. You also have an absolute right to object to the use of your personal data for direct marketing.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.
Security of your personal data
Storage Erith implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and regular review of our data protection practices. While we take reasonable steps to secure your information, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any changes will be effective when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
