Storage Dalston Privacy Policy
This Privacy Policy explains how Storage Dalston collects, uses, stores, and protects personal data relating to customers and prospective customers in our service area. It applies to all Storage Dalston customers in the area, including individuals, sole traders, and company representatives who use or enquire about our storage services.
Who We Are and Scope of This Policy
Storage Dalston is a self-storage provider offering storage units and related services to customers in the local area. For the purposes of data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, Storage Dalston is the data controller in respect of the personal data described in this Privacy Policy.
This Privacy Policy applies whenever you interact with Storage Dalston as a customer or potential customer in the area. This includes when you make an enquiry, request a quote, book a unit, sign a contract, access our facilities, or communicate with us about our services.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. The types of data we may collect include:
Identification and contact details, such as your full name, postal address, billing address, and any other address you provide, as well as your preferred contact details. We may also record identification information that you choose to provide in connection with security or access, such as a copy of an identification document or reference number, only where required to comply with our legal or contractual obligations.
Account and contract information, such as your customer reference number, storage unit number, contract start and end dates, payment terms, deposit information, and records of any changes to your contract.
Payment and transaction details, such as payment method, partial card details as permitted by law and payment providers, bank details where required for payment or refunds, records of charges, invoices, and payment history.
Communications and correspondence, such as enquiries, complaints, feedback, and any other messages you send to us, along with our responses. This may include records of communications by letter or other written formats.
Facility usage and security information, such as access logs for the facility or units where access control systems are used, as well as video images captured by CCTV in and around our premises for security and safety purposes.
Technical information, such as information about how you access our online services, if applicable, including basic device and connection data, subject to applicable data protection and electronic communications laws.
How We Collect Personal Data
We collect personal data in the following ways:
Directly from you when you make an enquiry, request a quote, sign a contract, access our facility, or communicate with us about your account or our services.
From your use of our services, for example, when your access to our site is recorded by access control or CCTV systems, or when we record information necessary to manage your storage unit and account.
From third parties, such as payment service providers, credit reference agencies where applicable, or authorised persons acting on your behalf, where this is necessary to manage your account or perform a contract with you.
Lawful Basis for Processing
We process personal data only where we have a lawful basis under data protection law. Depending on the circumstances, we may rely on the following lawful bases:
Performance of a contract. We process your personal data when it is necessary to enter into, manage, or perform a storage contract with you. This includes setting up your account, taking payment, managing access to your unit, and communicating with you about your contract and any changes.
Compliance with legal obligations. We may process your personal data where it is necessary to comply with legal and regulatory requirements, such as accounting, tax reporting, prevention of fraud or crime, and responding to lawful requests from public authorities.
Legitimate interests. We may process personal data where it is necessary for our legitimate interests or the legitimate interests of a third party, provided that these interests are not overridden by your rights and freedoms. This includes ensuring the security and integrity of our premises and systems, maintaining accurate business records, improving our services, and managing business operations.
Consent. In limited cases, we may rely on your consent for specific types of processing, such as certain types of marketing communications or optional services. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide storage and related services, including setting up and managing your account, administering your contract, managing bookings, and providing customer support.
To process payments, manage invoices, handle deposits, and deal with any queries or issues relating to billing and collections.
To maintain the safety and security of our customers, staff, and premises, including the use of CCTV and access control systems, and to prevent and detect fraud or unauthorised access.
To communicate with you about your account, contract, or any changes to our services or policies that may affect you, and to respond to your enquiries or complaints.
To manage our business operations, including internal reporting, auditing, and analysis, and to improve the quality and efficiency of our services.
To comply with legal and regulatory obligations, and to establish, exercise, or defend legal claims.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. The exact retention period will depend on the nature of the information and the context in which it is processed.
In general, we keep customer account and contract records for a period after the end of your contract, to comply with legal, tax, and accounting requirements and to resolve any disputes or claims. CCTV and access logs are retained for shorter periods, unless required to be kept longer in connection with an incident, investigation, or legal requirement.
Once the relevant retention period has expired, or the data is no longer needed, we will securely delete, anonymise, or otherwise remove the personal data from our systems.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers assist us with functions such as payment processing, secure data storage, maintenance of our IT and access systems, accounting support, and other operational services.
Where we use data processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only according to our instructions, securely, and in compliance with applicable data protection laws.
We may also share personal data with other third parties where required by law, such as public authorities, regulators, law enforcement bodies, or professional advisers, or where necessary to establish, exercise, or defend legal claims.
We do not sell your personal data. Any sharing of personal data is limited to what is strictly necessary for the relevant purpose and is done in line with this Privacy Policy and applicable data protection laws.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, in line with legal requirements. This may include the use of standard contractual clauses or other recognised safeguards.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions. Subject to those limitations, your rights include:
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure. In certain circumstances, you may request that we delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You may ask us to restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our processing.
Right to data portability. In certain cases, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, and that we transmit it to another controller where technically feasible.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests, including profiling related to such interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.
Right to withdraw consent. Where our processing is based on your consent, you have the right to withdraw that consent at any time.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your personal data has not been handled in accordance with data protection law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will apply to all Storage Dalston customers in the area from the date it is published.
