Storage Wanstead Privacy Policy
This Privacy Policy explains how Storage Wanstead collects, uses, stores and protects personal data relating to customers and prospective customers in the Wanstead area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all individuals and businesses who enquire about, use, or have used storage or related services provided by Storage Wanstead in the local area, whether under a written contract or other agreement.
Data Controller
Storage Wanstead determines the purposes and means of processing your personal data and is therefore the data controller for the information described in this Privacy Policy. References to we, us, and our mean Storage Wanstead.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification and contact details, for example your name, postal address, billing address, contact address, and correspondence address.
Communication details, for example your preferred contact method and the content of your communications with us, including enquiries, complaints and feedback.
Contract and account information, for example storage unit number, contract start and end dates, services selected, billing history, and payment status.
Payment and transaction information, for example payment method, payment reference details and records of payments made. We do not store full card details, but may receive partial card information and authorisation references from our payment providers.
Identity verification information, for example copies or details of identity documents and proof of address where required for security, fraud prevention, or legal compliance.
Site visit and security information, for example access logs, entry and exit times, access card or code usage, and CCTV footage in and around our premises where operated for security and safety.
Technical and usage information, for example details about how you use our website or online services, including device and browser information, and pages visited. This may involve the use of cookies or similar technologies, which we use only where permitted by law.
How We Collect Your Data
We may obtain your personal data in the following ways:
Directly from you, for example when you make an enquiry, request a quotation, sign a storage agreement, make payments, or communicate with us by any means.
From your use of our services, for example through security systems, access control, and our customer account and billing systems.
From third parties, for example payment processors, credit reference agencies if used, or law enforcement and regulatory bodies when we are legally required to obtain or verify information.
Purposes and Lawful Bases for Processing
We process your personal data only where there is a lawful basis under the GDPR. Depending on the context, we may use your data for the following purposes and legal grounds:
To provide and manage storage services and related arrangements, including setting up and managing your account, processing payments, administering deposits, and communicating with you about your contract. Our lawful basis for this is performance of a contract or taking steps at your request prior to entering a contract.
To respond to enquiries, provide quotations, and give information about our services before you decide to use them. Our lawful basis for this is taking steps at your request before entering into a contract and our legitimate interests in running and growing our business.
To manage our relationship with you, including handling queries, complaints, and feedback, sending important service updates, and requesting reviews of our services. Our lawful basis is performance of a contract and our legitimate interests in improving our services and customer experience.
To ensure the safety and security of our premises, customers, staff and property, including the use of CCTV systems where operated and access control measures. Our lawful basis is our legitimate interests in maintaining a safe and secure environment and, where relevant, compliance with legal obligations.
To carry out accounting, billing, and financial management, including keeping appropriate business records and complying with tax and accounting requirements. Our lawful basis is compliance with legal obligations and our legitimate interests in managing our business.
To prevent and detect fraud, misuse of our services, and other unlawful or unauthorised activity, and to protect our rights, property, and the rights and safety of others. Our lawful basis is our legitimate interests and, where necessary, the establishment, exercise or defence of legal claims.
To send you direct marketing communications about our services that may be of interest to you, where permitted by law. Our lawful basis is our legitimate interests in promoting our services or your consent where required. You can opt out of marketing at any time.
To comply with legal and regulatory obligations, for example responding to requests from law enforcement or regulators, and meeting statutory record keeping duties. Our lawful basis is compliance with legal obligations.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Retention periods are determined by factors such as the type of data, the nature of our relationship with you, and legal and regulatory requirements.
Generally, we will retain customer records and contract information for a period after the end of your agreement, to respond to queries, handle disputes, and meet tax and accounting obligations. Security records such as CCTV footage and access logs are usually kept for a shorter period, unless longer retention is required in connection with an incident, investigation, or legal claim.
When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a manner that protects your privacy.
Data Sharing and Processors
We do not sell your personal data. We may, however, share your personal data with third parties where necessary for the purposes described in this Privacy Policy, always ensuring that appropriate safeguards are in place.
Service providers acting as processors may process personal data on our behalf and under our instructions. These may include providers of data storage and hosting services, payment processing services, customer relationship and billing systems, access control and security systems, and professional advisers such as accountants or legal advisers. We use only processors that provide sufficient guarantees to implement appropriate technical and organisational measures to protect your data.
We may also share your data with third parties where required by law or regulation, or where it is necessary for the prevention or detection of crime, or to protect our legal rights. This may include law enforcement agencies, courts and regulators.
If we are involved in a business reorganisation, sale, or transfer of all or part of our business, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and data protection safeguards.
International Transfers
Where we use service providers or systems located outside the United Kingdom or European Economic Area, your personal data may be transferred to countries that do not have the same level of data protection laws. In such cases, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other approved mechanisms, to protect your information in accordance with applicable data protection law.
Your Data Protection Rights
Under the GDPR, you have a number of rights in relation to your personal data. These rights are not absolute and may be subject to certain conditions and exemptions.
Right of access. You have the right to request information about whether we process your personal data and to receive a copy of the personal data we hold about you.
Right to rectification. You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected. This right does not apply where we are required to keep the data by law or where it is needed for the establishment, exercise or defence of legal claims.
Right to restriction of processing. You may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.
Right to data portability. In some cases, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine readable format and to transmit it to another controller, where this is technically feasible and the processing is based on consent or contract and carried out by automated means.
Right to object. You have the right to object at any time to the processing of your personal data based on our legitimate interests, including profiling on that basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims. You also have the right to object at any time to direct marketing, including any profiling related to such marketing, and we will stop using your data for that purpose.
Rights in relation to automated decision making. If we were to make decisions about you solely by automated means that have legal or similarly significant effects, you would have specific rights in relation to such processing. We will inform you if we use such processes in relation to you.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply from the date it is published. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use and protect your personal data.
How to Contact Us
If you have any questions about this Privacy Policy or about how Storage Wanstead processes your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the contact details made available on our website or in your customer documentation.
