Storage Malden Rushett Privacy Policy
This Privacy Policy explains how Storage Malden Rushett collects, uses, shares and protects personal data relating to our customers in the Storage Malden Rushett service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all customers, prospective customers and account holders of Storage Malden Rushett whose personal data we process in connection with our storage services, whether you contact us online, by post or in person at our premises.
Who we are and scope of this policy
Storage Malden Rushett is the data controller for personal data processed in connection with our storage facilities, services and customer accounts. This means we decide why and how your personal data is collected and used. This Privacy Policy covers all personal data we process about individuals who use or enquire about our storage services within the Storage Malden Rushett area.
Personal data we collect
We only collect personal data that we need for clear, specific purposes. The types of personal data we may collect include the following categories.
Identity and contact information, such as your name, postal address, billing address, previous address where relevant, and any other contact details you choose to provide. Account and contract information, such as storage unit details, contract start and end dates, payment history, correspondence relating to your account and records of any instructions you give us. Payment and transaction information, including payment method details you provide to us, charges applied to your account and records of payments you make. Communication data, including copies of letters and any notes of conversations with you about your account, enquiries or complaints. Security and access information, such as vehicle registration numbers you provide for site access purposes, details of authorised persons on your account and records of access activity where necessary for security and safety. Technical and usage information, where applicable, such as basic device or browser information and log data relating to your use of our online services.
We do not routinely collect sensitive categories of personal data. If you choose to provide such information to us for a clear reason, we will only use it where necessary and lawful to do so.
How we collect personal data
We may collect your personal data in several ways. Directly from you when you request a quote, sign a contract, make a payment, visit our premises or communicate with us. Automatically when you use any online service we provide, such as a booking or enquiry form, where basic technical information and usage data may be generated. From third parties where lawful, for example payment service providers confirming a successful payment or professional advisers acting on your behalf in connection with your storage arrangements.
Lawful bases for processing your data
We process your personal data only when we have a lawful basis to do so under data protection law. Depending on the situation, we may rely on the following lawful bases.
Contract. We process personal data where it is necessary to take steps at your request before entering into a contract with you, and to perform a contract we have entered into with you. For example, to set up your storage account, manage your booking and administer payments. Legal obligation. We may process personal data where we must do so to comply with legal or regulatory obligations, such as keeping accurate accounting records, complying with tax rules and meeting health and safety and security obligations. Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, and your interests and fundamental rights do not override those interests. This may include managing and improving our services, protecting our premises and property, handling enquiries and disputes, and keeping accurate internal records. Consent. In limited cases, we may rely on your consent, for example for certain types of optional communication. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes. To provide, administer and manage your storage services and account, including bookings, renewals, billing and payments. To communicate with you about your contract, storage unit, access, changes to our services and important notices. To maintain security and safety at our premises, including managing authorised access and investigating incidents where necessary. To manage our business operations, including internal record keeping, accounting, auditing and service improvement. To comply with legal, regulatory and law enforcement requirements. To handle queries, complaints or disputes and to establish, exercise or defend legal claims.
Data sharing and processors
We do not sell your personal data. We may share your personal data with trusted third parties where this is necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place.
These third parties may include payment processors and banking providers to process payments and manage refunds. IT and system support providers who maintain our information systems and storage management tools. Professional advisers such as accountants or legal advisers where necessary for our business operations. Law enforcement agencies, courts, regulators or government bodies where we are required to do so by law or where it is necessary to protect our rights, security or property or the rights, security or property of others.
When we use third parties to process personal data on our behalf, they act as data processors. We ensure that such processors are bound by written contracts requiring them to only process personal data in accordance with our instructions, keep it secure and comply with applicable data protection laws.
Data retention
We keep your personal data only for as long as it is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of meeting any legal, accounting or reporting requirements.
In general, we retain customer account and contract information for a period following the end of your contract with us, to deal with queries, disputes and legal obligations. Payment and transaction records may be kept for longer where required by tax and financial regulations. Information that is no longer needed is securely deleted or anonymised so that it can no longer be associated with you.
International transfers
Where we need to transfer personal data outside the UK or European Economic Area, for example because a service provider uses servers located in another country, we will ensure that appropriate safeguards are in place. These may include using countries that have been recognised as providing an adequate level of data protection or putting in place standard contractual clauses or equivalent protections.
How we protect your data
We take reasonable and appropriate technical and organisational measures to protect the personal data we hold from unauthorised access, use, disclosure, alteration or destruction. Measures include limiting access to personal data to staff and processors who have a business need to know it, using secure systems, training staff on data protection responsibilities and reviewing our security arrangements regularly.
Your data protection rights
Under data protection law, you have several rights in relation to your personal data that we hold. These rights apply to all Storage Malden Rushett customers in our service area, subject to certain legal conditions and exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with certain information about how we use it. Right to rectification. You can ask us to correct any inaccurate or incomplete personal data we hold about you. Right to erasure. In some circumstances, you may have the right to request that we delete your personal data, for example where the data is no longer needed for the purpose we collected it or where you have withdrawn consent and there is no other lawful basis for processing. Right to restriction. You may request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or our grounds for processing it. Right to data portability. Where our processing is based on consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a commonly used format and to request that we transfer it to another controller where technically feasible. Right to object. You have the right to object to processing carried out on the basis of our legitimate interests, on grounds relating to your particular situation, in which case we will stop processing unless we have compelling legitimate grounds to continue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data, although we encourage you to contact us first so we can try to resolve your concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically so that you remain informed about how we collect, use and protect your personal data.
