Storage Woodford Privacy Policy
This Privacy Policy explains how Storage Woodford collects, uses, stores and protects your personal data when you use our services or interact with us. It applies to all Storage Woodford customers, prospective customers and users of our services in the Woodford area, whether you contact us online, by post or in person at our facilities.
Storage Woodford acts as a data controller for the personal data we collect and process about you. We are committed to complying with the UK General Data Protection Regulation, the EU General Data Protection Regulation where applicable, and all relevant data protection laws.
Personal Data We Collect
We collect and process personal data that is necessary to provide storage and related services, manage our relationship with you, and comply with our legal obligations. The types of personal data we may collect include:
Identification and contact details, such as your full name, postal address, billing address, and any alternative contact details you provide.
Account and contract details, such as your storage unit number, contract start and end dates, rental terms, access permissions, and payment history.
Payment information, such as records of payments made and the method of payment. We do not store full card details where payments are processed through secure third party payment providers.
Verification and security information, such as identification documents you present for verification, vehicle registration numbers used to access the site, and access logs for our premises and systems.
Communication records, including enquiries, complaints or feedback that you provide to us, and our responses to you.
Technical data, such as limited information about how you use our online services, including timestamps and basic device or browser information, to help us maintain and improve our services.
We may collect this information directly from you, from your authorised representatives, and, where lawful and appropriate, from publicly available sources or third parties such as payment service providers.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, our lawful bases may include:
Performance of a contract. We use your personal data to enter into and perform our storage and related service contracts with you, including managing bookings, payments, access to units and customer support.
Compliance with legal obligations. We process personal data where necessary to comply with laws and regulations, including tax and accounting requirements, fraud prevention obligations and obligations to law enforcement or regulatory authorities.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include operating and securing our storage facilities, managing and improving our services, handling customer queries, and protecting our property and the safety of our customers and staff.
Consent. In limited circumstances we may rely on your explicit consent, for example for certain optional communications or where required by law. Where processing is based on consent, you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide, manage and administer our storage and related services, including setting up your account, preparing and managing your contract, processing payments and providing access to your storage unit.
To maintain the safety and security of our premises, customers and staff, including managing access controls and investigating incidents or suspected misuse.
To communicate with you about your account, bookings, payments, changes to our terms or policies, and service related notices.
To respond to enquiries, requests, complaints and feedback from you and to provide customer support.
To manage our business operations, including record keeping, auditing, risk management and quality control.
To comply with legal and regulatory requirements and to cooperate with law enforcement or regulatory authorities where required.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting or reporting requirements.
In general, we keep your core account and contract information for the duration of your contract with us and for a defined period after it ends, to deal with any queries, disputes or legal claims. Payment and billing records are kept for the period required by tax and financial regulations. Security and access records are kept for a shorter period, unless they are required in connection with an investigation or ongoing dispute.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to you.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These service providers are engaged under written contracts and are required to process your personal data only in accordance with our instructions, to keep it secure, and to comply with data protection law.
Such processors may include payment processing providers, document storage or archiving services, information technology and system support providers, and professional advisers such as accountants or auditors. We only share the personal data that is necessary for them to provide their services to us.
We may also share personal data with third parties acting as independent data controllers where required by law, for example with law enforcement agencies, regulatory authorities, or government bodies, or where necessary to establish, exercise or defend legal claims.
Your personal data is generally processed within the United Kingdom or the European Economic Area. If we ever need to transfer personal data to a country outside these regions, we will ensure that appropriate safeguards are in place to protect your data, in accordance with data protection laws.
Security of Your Personal Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular reviews of our security practices.
While we work to protect your personal data, no system can be completely secure. We therefore cannot guarantee the absolute security of information transmitted or stored with us, but we are committed to responding promptly and responsibly in the event of any suspected data breach.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain legal conditions or exemptions. Your rights include:
Right of access. You can request confirmation of whether we process your personal data and, where we do, request a copy of that data and information about how we use it.
Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to object. You can object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.
Right to data portability. Where processing is based on consent or on a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine readable format, and that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw your consent at any time. This will not affect the lawfulness of processing before the withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your personal data has not been handled in accordance with data protection law. We encourage you to contact us first so we can address your concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. The latest version will always apply to the personal data we hold about you. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
By using Storage Woodford services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy as it applies to all Storage Woodford customers in the Woodford area.
