Storage Crossness Privacy Policy
This Privacy Policy explains how Storage Crossness collects, uses, stores and protects personal data about its customers and prospective customers in the area. It applies to all services provided by Storage Crossness and to all individuals who use or inquire about our storage solutions within our service area.
We are committed to complying with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, as well as any other applicable data protection legislation. This Privacy Policy is intended to provide clear and transparent information about what we do with your personal data.
Data Controller
Storage Crossness is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Crossness customers and prospective customers in our operating area, as well as any visitors to our facilities who provide personal data, and individuals who contact us for information about our services. By using our services, visiting our facilities or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your full name, postal address, billing address, and any alternative contact details you provide to us.
Account and contract information, such as customer reference numbers, storage unit numbers, contract start and end dates, pricing and payment terms, and information relating to your chosen storage options.
Payment and transaction data, which may include limited payment card details processed through secure payment providers, bank transfer information, invoices, payment history and records of any outstanding balances.
Communication records, including notes of conversations, emails, letters and other correspondence between you and Storage Crossness relating to inquiries, bookings, complaints or support.
Security and access information, including records of visits to our premises, access log data if we operate electronic entry systems, and closed circuit television footage captured for security and safety purposes in and around our facilities.
Website or online service usage data, where applicable, such as basic technical information and log data collected when you visit our websites or use online tools related to your storage arrangements.
Lawful Bases for Processing Your Data
We process your personal data only where a lawful basis exists under applicable data protection law. Depending on the specific processing activity, we rely on the following lawful bases:
Contract: We process personal data to enter into a contract with you and to perform our contract, including setting up your storage unit, managing your account, taking payment and providing customer support.
Legal obligation: We process certain data to comply with our legal obligations, such as accounting and tax requirements, record keeping obligations, and responding to lawful requests from regulatory or public authorities.
Legitimate interests: We process personal data for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include operating, improving and securing our facilities, preventing fraud and misuse of our services, pursuing and defending legal claims, and maintaining accurate records of our dealings with customers.
Consent: In some limited circumstances, we may rely on your consent, for example for certain types of optional communications or where required for specific uses of CCTV footage. Where we rely on consent, you are free to withdraw it at any time, and doing so will not affect the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including processing bookings, allocating storage units, maintaining access controls and handling day to day account administration.
To process payments and manage billing, including issuing invoices, taking and recording payments, managing arrears and refunds, and maintaining accurate financial records.
To communicate with you about your account and our services, including sending information about your contract, renewals, changes to our terms or policies, and responding to your inquiries or complaints.
To maintain safety and security at our facilities, including using access control systems and CCTV to help protect customers, staff, property and stored goods.
To comply with legal and regulatory obligations, such as record keeping and cooperating with law enforcement where required by law.
To protect our rights and interests, including the prevention, detection and investigation of fraud, abuse, non payment or other unlawful or inappropriate activity relating to our services.
Retention of Personal Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.
Contract and account information is generally retained for a period after your contract ends, to enable us to respond to any questions or disputes and to comply with legal obligations. This period will normally reflect standard limitation periods for legal claims and mandatory retention periods under applicable law.
CCTV footage and access logs are retained for a limited period, which is determined by security needs and technical constraints. Unless otherwise required by law or needed in connection with a specific incident, such data is generally stored only for as long as is necessary to investigate and respond to security related matters.
Where personal data is no longer required, we will either delete it securely or anonymise it so that it can no longer be associated with you.
Data Processors and Third Party Recipients
We may share your personal data with trusted third parties who act as data processors on our behalf. These third parties process your data only in accordance with our instructions and are required to implement appropriate technical and organisational measures to protect your data.
Examples of such processors include providers of secure payment processing services, providers of customer account and billing systems, IT hosting and support providers, and security system providers who assist with the operation of CCTV or access control systems.
We may also share personal data with other third parties in the following limited circumstances:
With professional advisers such as accountants, auditors or legal representatives, where necessary to obtain professional advice or to protect our legal interests.
With law enforcement agencies, regulatory bodies or courts, where required by law or where necessary to establish, exercise or defend legal claims.
In connection with a business transaction, such as a sale or transfer of our business or assets, where personal data may need to be disclosed to prospective or actual purchasers under appropriate confidentiality protections.
We do not sell your personal data to third parties.
International Data Transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that an adequate level of protection is in place. This may involve using countries that have been officially recognised as providing adequate protection, or putting in place appropriate safeguards such as standard contractual clauses approved by relevant authorities. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions, but broadly include:
Right of access: You have the right to obtain confirmation as to whether we process your personal data and, if we do, to receive a copy of that data and certain related information.
Right to rectification: You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent.
Right to restriction of processing: In specific situations you may ask us to restrict our processing of your data, for example while we verify its accuracy or assess an objection you have raised.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine readable format and to have it transmitted to another controller where technically feasible.
Right to object: You have the right to object, on grounds relating to your particular situation, to processing carried out on the basis of our legitimate interests. We will stop such processing unless we can demonstrate compelling legitimate grounds or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom this is the Information Commissioner's Office.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures may include physical security at our facilities, access controls, staff training, and the use of secure systems to handle personal data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updates will be made available to you, and where required by law, we will notify you of significant changes. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process your personal data.
Contact and Further Information
If you have any questions about this Privacy Policy or how Storage Crossness handles your personal data, or if you wish to exercise any of your rights, you can contact us using the contact details provided on our official customer documentation or at our facilities.
