Storage Biggin Hill Privacy Policy
This Privacy Policy explains how Storage Biggin Hill collects, uses, stores, shares and protects personal data relating to our customers and prospective customers in the local area. It also explains your rights under applicable data protection law, including the UK General Data Protection Regulation GDPR and the Data Protection Act.
By using our storage services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy. We are committed to handling your personal data lawfully, fairly and transparently at all times.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Biggin Hill customers and prospective customers in our service area, including individuals, businesses, and other organisations that make enquiries, obtain quotations, enter into storage agreements, or otherwise interact with us.
It also applies to visitors to our facility and to users of any online or digital tools that we operate for the purpose of managing enquiries, bookings, contracts, payments or customer support.
Data Controller
Storage Biggin Hill is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details such as name, postal address, billing address, contact address, and other similar contact information you choose to provide.
Customer account and contract data such as unit number, contract start and end dates, services purchased, correspondence relating to your account, notices we send you, and records of your communications with us.
Payment and transaction data such as payment method, payment status, amounts paid, invoices, account history, and general billing information. We do not store full card details where a third party payment processor is used.
Verification and security data such as copy of identification documents where required for security or legal reasons, vehicle registration numbers, access logs to the facility, and records created by our security systems.
Technical and usage data such as information collected when you visit our website or use our online tools, including device information, basic log data, and information you submit via enquiry or contact forms.
CCTV images: We may operate closed circuit television CCTV on and around our premises for security, monitoring access and the protection of customers, staff and property. Images may include footage of you and any visitors accompanying you.
How We Collect Your Data
We collect personal data directly from you when you request a quote, complete a booking, sign a storage agreement, make a payment, contact us with a question, or visit our facility.
We may also obtain data from third parties where necessary, such as payment processors, credit reference agencies if used, or service providers supporting our operations, to the extent permitted by law.
Lawful Basis for Processing
We will only process your personal data where we have a lawful basis. Depending on the specific processing activity, we may rely on the following lawful bases:
Contractual necessity: To take steps at your request before entering into a contract, and to perform our contract with you. This includes managing your booking, providing storage services, administering your account, processing payments, and communicating with you about your contract.
Legal obligation: To comply with legal and regulatory obligations, such as tax, accounting, prevention of fraud, crime detection, or responding to lawful requests from authorities.
Legitimate interests: To pursue our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. Examples include securing our premises and units, managing and improving our services, maintaining business records, handling customer queries, and ensuring the safety of customers, staff and property.
Consent: In limited circumstances, we may rely on your consent, for example for certain optional communications. Where we rely on consent, you may withdraw it at any time, although this will not affect any processing carried out before consent was withdrawn.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide storage services and manage our contractual relationship with you, including setting up and administering your account, managing access to units, and dealing with enquiries and support requests.
To process payments, issue invoices, manage any debt recovery processes, and maintain accurate financial records.
To communicate with you about your contract, including notices about access, security, service changes, renewals, and other essential information.
To ensure the security of our premises, property, customers and staff, including by monitoring access logs and using CCTV footage for security, crime prevention and incident investigation.
To manage our business operations, including planning and improving our services, training staff, resolving disputes, and maintaining records for audit and compliance purposes.
To meet legal and regulatory requirements, including responding to lawful requests from public authorities or law enforcement.
Data Retention
We will retain your personal data only for as long as is reasonably necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements.
In general:
Customer account and contract data will be retained for the duration of your agreement and for a reasonable period thereafter to manage queries, disputes, and legal obligations.
Financial and transaction records will typically be retained for a period required by tax and accounting laws.
CCTV footage will generally be kept for a short, defined period, unless it is required for the investigation of an incident, security matter, or legal claim, in which case it may be retained for a longer period as necessary.
When personal data is no longer required, we will securely delete or anonymise it in line with our data retention procedures.
Data Processors and Third Parties
We may share your personal data with trusted third party service providers who act as data processors on our behalf. These may include providers of payment processing services, IT and software services, customer management systems, security and CCTV maintenance, and professional advisers such as accountants or legal advisers.
Where we use processors, they are only permitted to process your data based on our instructions, for the purposes described in this Privacy Policy, and are required to implement appropriate technical and organisational measures to protect your data.
We may also need to share personal data with third parties acting as independent controllers, for example law enforcement agencies, public authorities, courts, or regulatory bodies, where we are legally required or permitted to do so.
We do not sell your personal data to third parties.
International Transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. These safeguards may include using countries with an adequacy decision, or entering into standard contractual clauses or other approved mechanisms.
Security of Your Data
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. Measures may include access controls, user authentication, secure storage, staff training and regular review of our security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access: You have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You may ask us to restrict the processing of your data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: For certain data you have provided to us and which we process by automated means on the basis of consent or contract, you may request a copy in a structured, commonly used and machine readable format, and you may request that we transfer it to another controller where technically feasible.
Right to object: You have the right to object, on grounds relating to your particular situation, to certain types of processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
