Storage Blackfen Privacy Policy
This Privacy Policy explains how Storage Blackfen collects, uses and protects personal data relating to customers and prospective customers within the Storage Blackfen area. It is intended to provide clear information in line with the UK General Data Protection Regulation and related data protection laws. By using our services or contacting us, you acknowledge that you have read this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Blackfen customers and individuals who make enquiries or interact with us in relation to our storage services within the Storage Blackfen area. It covers personal data collected through in-person visits, telephone, post and any online forms or digital tools that we may use to administer our services.
Personal Data We Collect
We may collect and process the following categories of personal data when you use our services or communicate with us:
Identification and contact details, such as full name, postal address, billing address, and other basic contact information required to manage your account and contract.
Account and contract details, such as unit number, contract start and end dates, payment status, storage preferences, and communication records relating to your contract.
Payment-related information, which may include payment method details and transaction records. Where payments are processed by third party payment providers, we will generally receive only limited information needed for accounting and reconciliation.
Security, access and usage data, such as visit logs, access control records, CCTV images within and around our facilities where installed, and details relating to any incidents, complaints or security investigations.
Marketing and communication preferences, such as whether you have consented to receive marketing communications and your preferred method of contact.
How We Collect Personal Data
We collect personal data directly from you when you:
Request a quote or information about our services.
Enter into a storage agreement with us.
Make a payment or update your payment details.
Visit our premises where access systems or CCTV operate.
Contact us with enquiries, feedback, or complaints.
We may also receive personal data from third parties, such as payment processors, credit reference agencies where used, or law enforcement authorities where required by law.
Lawful Basis for Processing
We only process personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:
Contractual necessity, where we need to process your data to enter into or perform a contract with you, for example to set up your account, allocate a storage unit and manage your ongoing storage arrangements.
Legal obligations, where we are required to process and retain certain data to comply with our legal and regulatory duties, including tax, accounting, security and health and safety requirements.
Legitimate interests, where processing is necessary for our legitimate business interests and does not override your fundamental rights and freedoms. This may include ensuring the security of our premises, preventing fraud, managing business operations, handling queries and improving our services.
Consent, where required for certain activities, such as sending you direct marketing communications by electronic means when you are not an existing customer or where the law otherwise requires consent. You may withdraw your consent at any time.
How We Use Personal Data
We use your personal data for the following purposes:
To provide, administer and manage storage services, including creating and maintaining your customer account, processing payments and issuing invoices or statements.
To communicate with you regarding your contract, including booking confirmations, contract renewals, payment reminders, and essential service notices.
To maintain the safety and security of our premises, customers and staff, including the use of access control systems, visitor logs, CCTV where in place, and incident records.
To manage our business operations, including auditing, financial reporting, dispute resolution, debt collection, risk management and quality control.
To comply with legal and regulatory obligations, including responding to requests from law enforcement or regulatory bodies where we are legally required to do so.
To send you relevant service updates and, where permitted, marketing communications about our storage services and related offerings. You can opt out of marketing at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting or reporting requirements.
Customer account and contract data will typically be retained for a period after your contract ends to allow us to manage any queries, disputes or legal claims and to satisfy statutory record keeping obligations. Payment and invoicing records are retained for the periods required by tax and accounting laws.
CCTV footage and access records, where used, are generally retained for a limited period appropriate to our security and operational needs, unless a particular recording is required for an ongoing investigation, incident, insurance claim or legal proceedings.
Marketing data will be retained for as long as you remain subscribed or we have a lawful basis to contact you. If you opt out of marketing, we may keep a minimal record of your preference to ensure that your choice is respected.
Data Sharing and Processors
We do not sell your personal data. We may share your data with selected third parties where necessary for the purposes outlined in this Privacy Policy, including:
Service providers that act as data processors, such as payment processors, accounting and billing providers, IT support and hosting services, access control and security system providers, and document storage or shredding services. These processors are only permitted to process personal data in accordance with our instructions and must protect it appropriately.
Professional advisers, such as lawyers, auditors, or insurers, where this is necessary to obtain professional advice, manage disputes or handle insurance claims.
Public authorities, regulators, law enforcement agencies or courts, where we are legally obliged to disclose personal data or where disclosure is necessary to protect our rights, property or safety, or that of our customers or others.
Where processors or service providers operate outside the United Kingdom or the European Economic Area, we will take steps to ensure that adequate safeguards are in place to protect your personal data in accordance with data protection law.
Your Data Protection Rights
You have certain rights in relation to your personal data under data protection law. Subject to applicable conditions and legal limitations, these include the right to:
Access your personal data and receive information about how we process it.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no longer a lawful basis for us to retain or process it.
Request restriction of processing in certain circumstances, for example where you contest the accuracy of the data or object to our use of it.
Object to processing that is based on our legitimate interests, including profiling based on those interests, if you believe your rights and interests outweigh our own.
Withdraw consent where processing is based on your consent, without affecting the lawfulness of processing carried out before consent is withdrawn.
Request portability of personal data that you have provided to us in a structured, commonly used and machine readable format, where processing is based on consent or contract and is carried out by automated means.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about the way we handle your personal data. We would encourage you to contact us first so that we can attempt to resolve any concerns directly.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include access controls, staff training, secure storage systems and regular reviews of our security procedures. While we seek to protect your data, no system can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the way we provide our services. The updated version will apply from the date it is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we handle personal data.
