Storage Clerkenwell Privacy Policy
This Privacy Policy explains how Storage Clerkenwell collects, uses, stores and protects personal data relating to our storage, associated services, and our website. It applies to all Storage Clerkenwell customers, prospective customers, and enquirers in the Clerkenwell area, as well as individuals acting on their behalf such as business contacts or authorised users of a storage unit.
We are committed to handling personal data in accordance with the General Data Protection Regulation and applicable United Kingdom data protection law. This Privacy Policy sets out the types of personal data we process, the purposes for which we process it, the lawful bases we rely on, the retention periods we apply, and the rights you have in relation to your personal data.
Data Controller
Storage Clerkenwell is the controller of the personal data described in this Privacy Policy. As controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that it is handled lawfully, fairly and in a transparent manner.
Scope Of This Policy
This Privacy Policy applies to all personal data we collect and process about Storage Clerkenwell customers and prospective customers in the Clerkenwell area, including individuals who:
Use or rent our storage facilities or related services, contact us to make an enquiry or request a quote, visit our premises, or interact with us through our website or other communication channels.
Personal Data We Collect
The types of personal data we may collect and process include:
Identification data such as full name, title, date of birth, identification document details where required for verification, and business contact details if you act on behalf of a company or organisation.
Contact data such as residential or business address, billing address, and communication preferences.
Communication data such as information contained in emails, letters, forms, and messages submitted through our website or provided over the phone or in person.
Contract and account data such as details of your storage unit, access permissions, rental period, services requested, payment history and account status.
Payment and transaction data such as payment method, partial card details where permitted by law, and records of payments made and charges applied. We do not store full card details where this is not necessary for processing.
Security and access data such as records of visits to our premises, unit access logs, entry system records, and any incident reports or health and safety records connected to your use of our site.
Technical and usage data where you use our website, such as device information, approximate location data derived from your device, pages visited and time spent, and information generated through cookies or similar technologies where these are used. Where cookies are used purely for analytics or marketing, we will only place them with your consent.
Sources Of Personal Data
We obtain personal data directly from you when you contact us, request a quote, make a booking, sign a contract, arrange payment, or correspond with us by any means.
We may also obtain personal data from third parties, including your employer or a company that you represent, publicly available sources such as company registers, or payment service providers where this is necessary to complete a transaction or investigate a potential issue.
Lawful Basis For Processing
We process your personal data only where we have a lawful basis to do so under data protection law. The lawful bases we rely on include:
Contractual necessity where processing is necessary for us to enter into or perform a contract with you. This includes managing enquiries, providing quotes, setting up and managing storage contracts, arranging payment and providing associated customer support.
Legal obligation where processing is necessary for us to comply with legal and regulatory requirements, such as maintaining accounting records, complying with tax law, or responding to lawful requests from public authorities.
Legitimate interests where processing is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. Our legitimate interests include managing and improving our storage services and premises, ensuring site security and safety, preventing and detecting fraud or misuse, and defending our legal rights.
Consent where you have given us clear consent to process your personal data for a specific purpose, for example to receive certain types of marketing communications or to allow us to use optional cookies on our website. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Purposes For Which We Use Personal Data
We may use your personal data for the following purposes, relying on one or more of the lawful bases described above:
To respond to enquiries, provide information about our services, and produce quotes.
To set up, administer and manage storage contracts, including verifying identity where appropriate, arranging access to units, managing renewals, and handling termination of contracts.
To process payments, manage billing and invoices, and recover any outstanding sums.
To operate, maintain and secure our premises and storage units, including maintaining access controls, monitoring usage where appropriate and consistent with law, and managing health and safety.
To maintain business records, accounts and financial management systems, and to comply with legal, tax and regulatory obligations.
To handle customer service matters, resolve complaints, and respond to requests relating to your rights or our services.
To improve our services and operations, for example by analysing aggregated usage patterns or feedback, and to support staff training and quality assurance.
To protect our business and our customers, including detecting and preventing fraud or misuse of our services, and exercising or defending legal claims.
To send service communications that are necessary for the performance of your contract with us, such as notices about changes to your unit, payment reminders or updates to this Privacy Policy.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. Retention periods may vary depending on the type of data and the context in which it is processed.
In general, we retain contract and billing records for a period required by applicable law after the end of your relationship with us. Security and access records are retained for a shorter period, unless they are required in connection with an investigation, dispute or legal claim, in which case they may be retained for longer as necessary.
Where processing is based on your consent, we retain the relevant personal data until you withdraw your consent or until it is no longer needed for the purpose for which it was collected, whichever occurs first, subject to any overriding legal obligations.
Data Processors And Other Recipients
We may share personal data with selected third parties who act as processors on our behalf. These service providers are engaged under written contracts, are required to process personal data only on our instructions, and must implement appropriate technical and organisational measures to protect it.
Examples of such processors may include providers of data storage and hosting services, payment processing and invoicing systems, customer relationship management tools, and security or maintenance services for our premises or systems. We only share the data that is necessary for the relevant purpose.
We may also share personal data with other parties who act as independent controllers, where required or permitted by law, such as professional advisers, insurers, law enforcement bodies or regulatory authorities. In such cases, those parties are responsible for their own compliance with data protection law.
International Transfers
Where we use processors or service providers located outside the United Kingdom or the European Economic Area, or where data may be accessed from another country, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include the use of standard contractual clauses approved by relevant authorities or equivalent mechanisms recognised under data protection law.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, physical security measures at our premises, secure storage systems, and procedures designed to ensure that personal data is handled only by authorised personnel who are subject to duties of confidentiality.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to the personal data we hold about you. Subject to any legal conditions and exemptions, these rights may include:
The right of access to obtain confirmation as to whether we process your personal data and to receive a copy of that data, together with certain information about how it is used.
The right to rectification of inaccurate personal data and the right to have incomplete data completed.
The right to erasure, sometimes known as the right to be forgotten, where there is no longer a lawful basis for us to continue processing your personal data, subject to legal and contractual obligations.
The right to restrict processing of your personal data in certain circumstances, for example where the accuracy of the data is contested, or you have objected to processing and we are reviewing the request.
The right to object to processing carried out on the basis of our legitimate interests, including profiling based on those interests, and the right to object at any time to the use of your personal data for direct marketing.
The right to data portability, where applicable, allowing you to receive certain personal data in a structured, commonly used and machine readable format and to have that data transmitted to another controller where technically feasible.
Where processing is based on consent, the right to withdraw that consent at any time, without affecting the lawfulness of any processing carried out before withdrawal.
How To Exercise Your Rights
You can exercise your data protection rights by contacting us and clearly specifying which right you wish to exercise and the information to which your request relates. We may need to verify your identity before responding to your request to protect your personal data. We aim to respond within the time limits set by data protection law.
Complaints And Supervisory Authority
If you have concerns about how we handle your personal data, we encourage you to contact us so that we can try to resolve the issue. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe an infringement of data protection law has occurred.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in applicable law. When we make significant changes, we will take appropriate steps to bring them to your attention. The updated version will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data at Storage Clerkenwell.
