Storage Wennington Privacy Policy
This Privacy Policy explains how Storage Wennington collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It also explains the lawful bases we rely on under the UK General Data Protection Regulation, how long we keep your data, when we use processors, and the rights you have in relation to your personal information.
Scope of this Privacy Policy
This Privacy Policy applies to all individuals who use or enquire about Storage Wennington services, including storage units and related services, within our operating area. By engaging with our services, visiting our premises or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
Storage Wennington is the data controller in respect of the personal data we collect and process about you. As data controller, we determine the purposes and means of processing your personal information in accordance with applicable data protection law, including the UK GDPR and the Data Protection Act 2018.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and the services you use:
Identification data such as full name, title, date of birth and proof of identity details as required for verification. Contact details such as billing address, storage unit correspondence address, and other contact information you choose to provide. Contract and account information such as details of the storage unit or service you have booked, contract start and end dates, payment status, and account history. Payment and billing information such as records of payments, invoices and transaction histories. We do not store full card details where payment is taken through secure third party payment processors. Communication data such as records of queries, complaints or other communications you make to us in person, by post or through other channels. Security and access information such as vehicle registration details for site access, unit number and access logs. CCTV footage and other security records from our premises where necessary for security, safety and operational purposes. Technical data related to your use of our online services, such as basic device and browser information and usage logs, where applicable.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment, visit our premises, or contact us with a question or complaint. We may also collect data from third parties where this is lawful and appropriate, for example from payment service providers in relation to payment confirmation or from credit reference agencies where credit checks are required.
Lawful Bases for Processing
We will only process your personal data where we have a lawful basis to do so. Depending on the circumstances, we may rely on the following lawful bases:
Contract: We need to process your data to enter into and perform our contract with you, such as to provide access to a storage unit, manage your account and process payments. Legal obligation: We may process your data to comply with legal and regulatory obligations, for example accounting rules, tax requirements, law enforcement requests or obligations relating to health and safety. Legitimate interests: We may process your data where it is necessary for our legitimate business interests, provided these are not overridden by your interests or fundamental rights. This includes managing and improving our services, ensuring site security, preventing fraud, and handling queries and complaints. Consent: In limited cases, where required by law, we may rely on your consent, for example for certain forms of direct marketing or where we process optional information not necessary for the contract. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage and related services, including setting up and administering your account, granting access to your storage unit, issuing invoices and processing payments. To communicate with you about your contract, such as sending booking confirmations, contract updates, payment reminders, and important information about your storage unit or our services. To manage our relationship with you, including responding to questions, handling complaints and resolving any issues. To ensure security and safety on our premises, including through CCTV monitoring, access control, and incident investigation. To comply with legal and regulatory obligations, including record keeping, tax compliance and responding to lawful requests from public authorities. To protect our business interests, for example to prevent fraud, enforce our terms and conditions, and manage disputes. To improve our services and operations, using aggregated or anonymised data wherever reasonably possible to minimise the impact on your privacy.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. The exact retention period will depend on the type of data and the lawful basis for processing.
In general, we keep contract and account information for a period required by applicable law after the end of your contract, including tax and financial record retention obligations. CCTV footage and access logs are retained for a shorter period, typically only as long as necessary for security, safety and incident investigation purposes, unless a longer retention period is required due to an ongoing investigation or legal claim. When personal data is no longer needed, we will securely delete or anonymise it in a way that ensures it can no longer be associated with you.
Use of Data Processors
We may engage third party service providers to process personal data on our behalf. These processors may provide services such as payment processing, secure data storage, IT support, security and CCTV maintenance, or customer service tools.
Where we use processors, we require them to act only on our instructions and to implement appropriate technical and organisational measures to protect your personal data. They are not permitted to use your personal data for their own purposes. We remain responsible for the actions of our processors in relation to the processing of your personal data.
Disclosures of Your Personal Data
We will not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes set out in this Privacy Policy, for example with professional advisers, law enforcement agencies, regulators or insurers where required by law or in connection with legal proceedings, or with payment and banking providers to process transactions.
Any sharing of data will be limited to what is necessary and will be carried out in compliance with data protection law.
International Transfers
Where we or our processors transfer your personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or other measures required by law to protect your data and ensure that you have enforceable rights and effective legal remedies.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions, but we will always respond to any request in accordance with applicable law.
Right of access: You have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data. Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we are not required to retain it for legal reasons. Right to restrict processing: You may request that we restrict the processing of your data in certain situations, for example while verifying its accuracy or where you have objected to our processing. Right to object: Where we process your data based on legitimate interests, you may object to such processing on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims. Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine readable format or transmit it to another controller where technically feasible. Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing before consent was withdrawn.
How to Exercise Your Rights
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using the details provided on our main customer documentation or at our premises. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with the Information Commissioner's Office in the United Kingdom if you are unhappy with how we have handled your personal data. We encourage you to contact us first so that we can seek to resolve any concerns.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures may include physical security at our premises, access controls, staff training, and secure systems for storing and transmitting information. While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. Any changes will be made available through our usual communication channels or at our premises. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
