Storage Ardleigh Green Privacy Policy
This Privacy Policy explains how Storage Ardleigh Green collects, uses and protects personal data relating to customers and prospective customers in the Ardleigh Green area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services, contacting us or visiting our premises, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Ardleigh Green customers, former customers and prospective customers in the Ardleigh Green area, as well as individuals who contact us with enquiries or visit our site. It covers personal data collected through in-person interactions, written correspondence, phone calls, and online enquiries to the extent that such contact routes are offered.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification and contact information, such as your full name, postal address, billing address, contact address, and any other address you provide, as well as your preferred contact details.
Account and contract information, such as unit number, contract start and end dates, payment terms, details of the storage services you have selected and records of communications relating to your account.
Payment and billing information, such as limited payment details and transaction history. Full card details are not stored by us when a secure third party payment processor is used.
Verification information, such as identity documents or proof of address where required for security, fraud prevention or legal compliance.
Security and access information, such as records of site access where access control systems or visitor logs are used, and information captured by CCTV systems in and around our premises.
Communication and enquiry information, such as records of enquiries, complaints, feedback and any correspondence you have with us in relation to our services.
Lawful Basis for Processing
Storage Ardleigh Green will only process your personal data where we have a lawful basis under data protection law. Depending on the circumstances, we may rely on one or more of the following bases:
Contract: We process personal data where it is necessary to enter into or perform a contract for storage or related services with you. This includes setting up your account, managing your storage agreement, taking payments, communicating with you about your contract and providing customer service.
Legal obligation: We process personal data where we need to comply with a legal or regulatory obligation, such as record-keeping, tax and accounting requirements, law enforcement requests or requirements relating to health and safety.
Legitimate interests: We process personal data where it is necessary for our legitimate interests, or the legitimate interests of a third party, and those interests are not overridden by your rights and freedoms. This can include maintaining security at our premises, preventing and detecting fraud, defending legal claims, improving our services, and managing our business operations.
Consent: In limited situations we may process certain personal data on the basis of your consent, for example, if we send specific types of marketing communications by electronic means where consent is required. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, administer and manage storage services and related services you request, including account setup, unit allocation, invoicing, payment collection and ongoing customer support.
To communicate with you regarding your contract, such as reminders, changes to terms, service notifications and queries relating to your unit or account.
To maintain the safety and security of our staff, customers, premises and stored goods, including use of CCTV, access control and incident reporting.
To manage our business operations, including auditing, accounting, reporting, service improvement and staff training.
To handle complaints, disputes and legal claims.
Where permitted, to provide you with information about our services that may be of interest to you. You can opt out of marketing communications at any time.
Data Retention
Storage Ardleigh Green will retain personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements.
In general, we retain contract and account records for a period necessary to manage your contract and for a number of years after your contract ends to comply with tax, accounting and legal obligations, and to deal with any complaints or disputes.
CCTV recordings and access records are usually kept for a short period, which may be extended where footage is required for an investigation, legal claim or law enforcement request.
Enquiry and communication records are kept for as long as necessary to respond to your enquiry and for a further period to demonstrate how we have handled your communications.
When personal data is no longer needed, it will be securely deleted, anonymised or otherwise disposed of in a secure manner.
Data Processors and Third Parties
We may share personal data with carefully selected third parties that act as data processors on our behalf. These service providers process your information only in accordance with our instructions and are required to keep it secure and confidential.
Such processors may include providers of secure payment processing services, IT and cloud service providers, data storage and backup providers, security system providers for CCTV and access control, and professional advisers such as accountants or legal advisers where they act as processors.
We may also share personal data with other third parties where we act as independent controllers together with them, or where they are separate controllers. This can include legal and regulatory authorities, law enforcement agencies, insurance providers and professional advisers, where required or permitted by law.
We do not sell your personal data. Personal data will not be transferred outside the United Kingdom or the European Economic Area unless appropriate safeguards are in place to protect your data in accordance with applicable law.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data held by Storage Ardleigh Green. These rights apply to all Storage Ardleigh Green customers and relevant individuals in the Ardleigh Green area, subject to any legal limitations.
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how we use it.
Right to rectification: You have the right to request that inaccurate or incomplete personal data about you is corrected or updated without undue delay.
Right to erasure: In certain circumstances, you have the right to request that your personal data is erased, for example, where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right may be restricted where we must retain data to comply with legal obligations or to establish, exercise or defend legal claims.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data or consider an objection you have raised.
Right to object: You have the right to object to processing based on our legitimate interests and to object at any time to the use of your personal data for direct marketing.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to request that we provide your personal data in a structured, commonly used and machine readable format, or transfer it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect the personal data we hold against unauthorised access, accidental loss, destruction or damage. Measures may include secure systems, access controls, staff training, and contractual obligations placed on processors. While we work to protect your data, no system can be completely secure and we cannot guarantee absolute security.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any changes will take effect when the updated version is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
