Storage St Pancras Privacy Policy
This Privacy Policy explains how Storage St Pancras collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It is intended to meet the requirements of the UK General Data Protection Regulation and other applicable data protection laws. This Privacy Policy applies to all Storage St Pancras customers in our area, as well as individuals who make enquiries about our services.
Data Controller
Storage St Pancras is the data controller in respect of the personal data we process for the purposes described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection law.
Types of Personal Data We Collect
We may collect and process the following categories of personal data when you contact us, make an enquiry, enter into a contract, or use our storage services:
Identification data, such as name, title and identification details required to verify your identity. Contact details, such as address, postcode, billing address, and any other addresses you provide to us. Account details, such as customer reference numbers, storage unit details, booking information and communication preferences. Financial information, such as limited payment-related details required to process your payments. We do not store full payment card details where a secure payment provider is used. Communication data, such as correspondence, enquiries and complaints you send to us, as well as notes we make about our interactions with you. Usage data, such as information about how you use our services, including dates of entry to and exit from our premises when an access system is in place. Security data, such as access logs and, where in operation, CCTV images recorded on or around our premises for security and safety purposes.
How We Collect Your Data
We may collect personal data from you in the following ways. When you contact us directly by telephone, in person at our facility, or through online enquiry forms. When you enter into a contract for storage services with us and during the fulfilment of that contract. When you update your details or preferences with us. When you make payments to us or we issue invoices. When you visit our premises and our security systems record access information and, where applicable, CCTV images. When you provide feedback, make a complaint or participate in customer surveys.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a valid lawful basis under data protection law. The purposes for which we process your personal data and the corresponding lawful bases include the following. To respond to enquiries and provide quotations for our services. Our lawful basis is our legitimate interests in operating and developing our business and responding to potential customers. To enter into and perform a contract for storage services with you, including setting up your account, managing your bookings, processing payments and maintaining your storage arrangements. Our lawful basis is performance of a contract with you and taking steps at your request prior to entering into a contract. To manage our relationship with you, including communicating about changes to our terms, services or policies. Our lawful basis is performance of a contract and our legitimate interests in keeping customers informed. To operate our premises safely and securely, including controlling access to storage areas and using CCTV for security and crime prevention where installed. Our lawful basis is our legitimate interests in protecting our premises, customers, staff and property and, in some cases, compliance with legal obligations. To comply with legal and regulatory obligations, including record keeping, tax and accounting requirements and responding to law enforcement or regulatory requests where we are required to do so. Our lawful basis is compliance with legal obligations. To manage and improve our services, facilities and customer experience, including handling complaints and conducting limited analysis of use of our services. Our lawful basis is our legitimate interests in running an efficient, safe and customer focused storage business. If we wish to use your details for optional marketing or promotional communications beyond what is necessary to manage your contract, we will only do so where we have your consent or where the law allows us to rely on our legitimate interests. You can opt out of marketing communications at any time.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy. These third parties act either as data processors on our behalf or, in some cases, as independent data controllers.
Data processors are service providers who process personal data only on our written instructions and for the purposes we specify. They are bound by contractual obligations to protect your personal data and to process it securely and confidentially. Such processors may include payment processing providers, secure data storage and hosting providers, customer relationship management providers, and professional advisers who assist us with legal, accounting or regulatory matters.
We may also share data with other third parties where required by law, for example with law enforcement, regulators, courts or government authorities if we are under a legal obligation to disclose or where such disclosure is necessary to protect our rights, property or safety or that of our customers and staff.
International Transfers
Where our service providers or their systems are located outside the United Kingdom, your personal data may be transferred to and processed in countries which may not have the same level of data protection as the United Kingdom. In such cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved for use in international data transfers or other legally recognised transfer mechanisms, to protect your information in line with applicable data protection laws.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet our legal, accounting and reporting obligations. The precise retention period for different categories of data will depend on factors such as the length of your contract, the nature of our relationship with you and any legal requirements that apply.
In general, account and contract information will be retained for a period after your contract ends so that we can respond to queries, handle any disputes or claims and comply with statutory retention obligations. Payment records and invoices will be kept in accordance with applicable tax and accounting rules. Security data, including access logs and CCTV recordings, where used, will typically be retained only for a limited period unless longer retention is required in connection with an incident, investigation or legal proceedings.
How We Protect Your Data
We take appropriate technical and organisational measures to protect the personal data we hold against unauthorised access, unlawful processing, accidental loss, destruction or damage. These measures may include access controls, secure storage, encryption, staff training and internal policies and procedures designed to safeguard personal data. While we strive to protect your personal data, no system can be completely secure and we cannot guarantee absolute security of information transmitted to or from us.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include the right to access your personal data and to receive information about how we process it. The right to request correction of inaccurate or incomplete data we hold about you. The right to request the deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the original purpose and there is no legal requirement to retain it. The right to object to certain types of processing, including where we rely on legitimate interests and you believe your rights and freedoms override those interests. The right to request restriction of processing in certain circumstances, such as while we are verifying the accuracy of your data or the basis for processing. The right to request the transfer of your personal data to you or to another organisation in a structured, commonly used and machine readable format, where the legal basis is consent or performance of a contract and the processing is carried out by automated means. Where we rely on your consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact methods we provide on our official customer communications and documentation. We will respond to your request in accordance with applicable legal time limits and may ask you to verify your identity before we act on your request. You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we handle your personal data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or legal requirements. Any updated version will apply from the date of publication. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal information.
