Storage Fulwell Privacy Policy
This Privacy Policy explains how Storage Fulwell collects, uses, stores and protects personal data relating to customers and prospective customers. It applies to all Storage Fulwell customers and site users in our operating area, regardless of the service package selected or the duration of storage. We are committed to processing personal data in a lawful, fair and transparent manner, in line with the UK General Data Protection Regulation and related data protection laws.
Who We Are
Storage Fulwell provides self-storage and related services to individuals and businesses in our local area. In doing so, we act as the data controller for the personal data we collect about our customers and potential customers. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with Storage Fulwell and which services you use. This may include:
Contact and identification data such as your name, postal address, billing address, date of birth, and identification document details where required for security or legal reasons.
Contact details such as email address and contact preferences, which allow us to communicate with you about your storage agreement, payments and service updates.
Account and contract information such as customer reference numbers, storage unit numbers, rental terms, contract history, service usage details and correspondence relating to your account.
Payment and billing information such as payment status, invoices, payment method and transaction history. We do not retain full payment card details when using external payment processors, but we may receive and store tokenised or reference data and confirmation of payment.
Security and access information such as CCTV footage on our premises, access logs, gate or unit entry times, vehicle registration numbers where captured by our security systems, and incident reports relating to security or health and safety.
Communication records including enquiries, complaints, feedback and any information you provide when you contact us in person, by post or via our online channels.
How We Collect Your Data
We collect personal data directly from you when you request a quote, make a booking, sign a contract, make a payment, contact us with an enquiry, or visit our premises. We may also collect data indirectly from third parties where permitted by law, for example from payment processors confirming that a payment has been made, or from law enforcement bodies in relation to security or legal matters.
Lawful Basis for Processing
We process personal data only where we have a valid lawful basis to do so under data protection law. Depending on the context, the lawful basis will be one or more of the following:
Performance of a contract: We process your data when it is necessary to set up, administer, and fulfil your storage agreement or to take steps at your request before entering into a contract, such as providing a quote.
Legal obligation: We may process personal data to comply with our legal and regulatory obligations, including tax and accounting rules, crime prevention, anti-money laundering regulations, and health and safety requirements.
Legitimate interests: We process data where it is necessary for our legitimate business interests, and these interests are not overridden by your rights and freedoms. Examples include maintaining site security through CCTV, managing and improving our services, protecting our property and assets, recovering unpaid fees, and handling customer enquiries.
Consent: In some cases, we may rely on your consent, for example where we send certain types of marketing communication that are not based on our existing customer relationship. Where processing is based on consent, you may withdraw your consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To create and manage your customer account, prepare and administer your storage agreement, and provide the services you have requested.
To process payments, manage billing, handle deposits and refunds, and keep appropriate financial records.
To maintain the safety and security of our premises, staff, customers and stored goods, including through CCTV monitoring, access logs and incident reporting.
To communicate with you regarding your account, including notifications about payments due, contract renewals, changes to terms, access arrangements and other service-related information.
To manage customer enquiries, complaints or disputes, and to provide customer support.
To improve our services, monitor site usage patterns and develop our business operations, where this does not interfere with your privacy rights.
To meet our legal and regulatory obligations and to cooperate with law enforcement or regulatory authorities when required by law.
Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected or as required by law. In determining appropriate retention periods, we consider the nature of the data, the purpose of processing, any legal or regulatory requirements, and the potential need to retain data in order to resolve disputes or enforce our contracts.
Contract and account information is typically retained for a defined period after the end of your contract to meet tax, accounting and legal obligations and to handle any queries that may arise. CCTV footage is usually retained for a limited time, unless information needs to be kept for longer in connection with security incidents, legal claims or investigations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
Data Processors and Third Parties
We sometimes use carefully selected third-party service providers to process personal data on our behalf. These providers act as data processors and only process data in accordance with our instructions and for the purposes set out in this Privacy Policy.
Examples of such processors include payment processing services, secure data hosting providers, IT support and maintenance providers, and specialist security or CCTV system providers. We put in place appropriate contractual safeguards to ensure that processors protect your data, maintain confidentiality and implement suitable technical and organisational measures.
We may also share personal data with other third parties where necessary, for example with professional advisers such as accountants or legal advisers, with insurers in connection with claims, or with law enforcement and regulatory authorities where we are required to do so by law or where it is necessary to protect our rights or the rights and safety of others.
We do not sell your personal data to third parties.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors, we ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses approved by relevant authorities, to provide a similar level of protection for your personal data.
Your Data Protection Rights
Under applicable data protection law, you have several rights in relation to your personal data. These rights are subject to certain conditions and exemptions, but generally include:
The right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
The right to rectification: You can ask us to correct inaccurate or incomplete personal data we hold about you.
The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where processing is based on consent and you withdraw that consent.
The right to restrict processing: You can request that we restrict our processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.
The right to object: You can object to processing based on our legitimate interests or to direct marketing at any time. If you object to direct marketing, we will stop using your data for this purpose.
The right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
If you exercise any of these rights, we may need to request specific information from you to confirm your identity and ensure your right to access or change the information. We aim to respond to all legitimate requests within the time limits set by law.
Security of Your Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, controlled access to systems and records, secure storage solutions, and regular review of our security procedures. While we strive to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security of information transmitted to or from us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. Any updated version will apply to all Storage Fulwell customers and site users in our operating area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we use your personal data.
