Storage Cubitt Town Privacy Policy
This Privacy Policy explains how Storage Cubitt Town collects, uses, stores and shares personal data relating to customers and prospective customers. It applies to all Storage Cubitt Town customers and users of our services in the surrounding area, whether you contact us online, by post or in person at our storage facilities.
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way, in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Personal Data We Collect
We collect only the personal data that we need in order to provide our storage and related services, manage our relationship with you, and meet our legal and regulatory obligations. The categories of personal data we may collect include:
Identification details such as full name, title, date of birth and proof of identity documentation details as required for contract and security purposes.
Contact details such as billing address, storage unit address if different, and other correspondence addresses you provide to us.
Account and contract information such as storage unit number, contract start and end dates, services selected, payment terms, correspondence history and records of your communications with us.
Payment and billing information such as partial payment card details processed through secure payment providers, bank transfer references, invoices, payment history and records of charges and credits.
Usage and operational data such as entry and exit times to the facility where access control systems are in place, records of unit visits where necessary for security, and information about services you use or enquire about.
Security and monitoring data such as CCTV footage within and around our facilities, incident reports and any information needed to investigate theft, damage or safety concerns.
Marketing and communication preferences such as records of your consent to receive marketing, your preferred communication channels and your responses to surveys or feedback requests if you choose to participate.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, communicate with us, or make a payment. We may also collect data from third parties where necessary, for example to verify identity, prevent fraud or recover unpaid debts, always in accordance with data protection law.
Lawful Bases for Processing
We rely on the following lawful bases under the UK General Data Protection Regulation to process your personal data:
Performance of a contract. We process your data when it is necessary to enter into or perform a storage or related services contract with you, including setting up your account, providing access to your unit, managing billing and responding to your queries.
Compliance with legal obligations. We process certain data to comply with legal and regulatory requirements, such as tax, accounting and anti money laundering obligations, and to respond to lawful requests from authorities.
Legitimate interests. We process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. These interests include ensuring the security of our premises, preventing and detecting crime, managing customer relationships, improving our services and defending legal claims.
Consent. In limited cases we may rely on your consent, for example for certain forms of marketing communications. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage and related services, including setting up and administering your customer account, granting access to units, handling reservations and managing your contract.
To process payments, issue invoices, manage billing queries and recover outstanding sums.
To communicate with you about your contract, facility access, service changes, operational notices and customer support requests.
To ensure the safety and security of our premises, customers, staff and property, including the use of CCTV and access control systems.
To carry out internal record keeping, business analysis and service improvement activities.
To comply with applicable laws, regulations and court orders, and to cooperate with law enforcement where required.
To send you information about services that may be of interest to you, where we are permitted to do so and in line with your marketing preferences.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, and to meet legal, accounting or reporting requirements.
Contract and account records are generally kept for the duration of your relationship with us and for a period after your contract ends, in line with statutory limitation periods and financial record keeping requirements.
CCTV footage is retained for a limited period necessary for security and incident investigation, unless a longer retention is required in connection with a specific investigation or legal claim.
Marketing information and communication preferences are kept until you opt out or until it is no longer necessary for us to retain that information.
When personal data is no longer needed, we will securely delete, anonymise or destroy it in accordance with our data retention procedures.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf, strictly in accordance with our instructions and data protection law. These may include:
Payment service providers who process card or electronic payments securely.
IT and cloud service providers who host our systems or provide software and support services.
Security and access control providers who support CCTV, alarms and entry systems at our facilities.
Professional advisers such as accountants and legal advisers where necessary for business and legal purposes.
Debt recovery agencies where required to collect unpaid sums that are lawfully due.
All such processors are required to implement appropriate technical and organisational measures to protect your personal data and are not permitted to use it for their own purposes.
We may also share data with public authorities, regulators, law enforcement agencies or courts where required by law or where it is necessary to protect our rights, property, customers or staff.
International Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place for any transfer of personal data, such as the use of approved standard contractual clauses or equivalent protections, in line with data protection law.
Your Data Protection Rights
As a data subject under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how it is processed.
Right to rectification. You can ask us to correct or update inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction. You can ask us to restrict the processing of your personal data in specific situations, such as where you contest its accuracy or object to its processing.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may request that we provide your data in a structured, commonly used and machine readable format, or transfer it to another controller where technically feasible.
Right to object. You can object at any time to processing based on our legitimate interests, including profiling related to those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds. You also have an absolute right to object to direct marketing.
Rights in relation to automated decision making. You have rights in relation to decisions based solely on automated processing where they produce legal or similarly significant effects, although we do not typically carry out such processing in the context of our storage services.
To exercise any of your rights, you can contact us using the contact methods we make available at our facility or through our usual customer communication channels. We may need to verify your identity before responding, and we will respond within the timeframes required by law.
Security of Your Data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, staff training, secure storage, encryption where appropriate and regular review of our procedures.
Privacy Policy Scope and Changes
This Privacy Policy applies to all customers and users of Storage Cubitt Town services in the area, including individuals and business customers who rent or enquire about storage units or related services.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any updated version will be made available through our usual communication channels and will take effect from the date of publication.
