Storage Bexleyheath Privacy Policy
This Privacy Policy explains how Storage Bexleyheath collects, uses, stores and protects personal data relating to customers and prospective customers in the Bexleyheath area. It also describes the rights you have under data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Bexleyheath customers and individuals who enquire about, use, or are connected with our storage and related services in the Bexleyheath area. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
Storage Bexleyheath is the data controller for the personal data it processes about you in connection with the provision of storage and related services. As data controller, Storage Bexleyheath determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
Storage Bexleyheath collects and processes different types of personal data depending on how you interact with us and the services you use. The categories of personal data we may collect include:
Identification and contact details, such as your name, postal address, billing address, contact address, and any other relevant address information you provide. We may also collect your email address, and other contact details you choose to share with us for communication purposes. For identity verification, we may request copies of identification documents such as a passport, driving licence or other official identification, where this is necessary to comply with our legal obligations or to prevent fraud.
Account and contract information, such as unit number, contract start and end dates, rental terms, payment history, and records of your interactions with us relating to your account. This also includes details of services you have purchased, quotes we have provided, and records of renewals or cancellations.
Payment and billing information, including payment method details as required to process your payments and manage any refunds or arrears. Where card payments are taken, card details are processed by secure payment processors and are not stored by Storage Bexleyheath beyond what is necessary for transaction records.
Communication data, such as information contained in enquiries, correspondence and communications with us, including when you contact us by phone, post, or online. This may include records of complaints, feedback, or requests for information.
Security and access data, which may include images captured by CCTV on or near our premises, access control records including key or fob logs, and details of individuals authorised to access your storage unit.
Website or digital interaction data, which may include basic technical information collected when you visit our website or use our online tools, such as the pages you visit and how you navigate our site, where such data is collected through necessary cookies or similar technologies.
Lawful Basis for Processing
Storage Bexleyheath processes your personal data only where we have a lawful basis under data protection law. Depending on the circumstance, we may rely on one or more of the following lawful bases:
Contractual necessity. We process personal data where it is necessary to enter into, perform, or manage a contract with you, for example to provide you with a storage unit, manage your account, process payments, and communicate with you about your bookings or service changes.
Legal obligation. We process certain data to comply with applicable laws and regulatory requirements, for example to meet tax and accounting obligations, to comply with anti fraud and anti money laundering rules, and to maintain records required by law.
Legitimate interests. We may process your personal data where this is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. These legitimate interests may include ensuring the security of our premises and customers through CCTV, managing and improving our services, handling queries and complaints, recovering debts, and preventing or detecting fraud or misuse of our services.
Consent. In limited situations we may rely on your consent, for example where we send you certain types of marketing communications that require consent under applicable law. You can withdraw your consent at any time, although this will not affect the lawfulness of processing that took place before consent was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage and related services to you, including setting up and administering your account, managing bookings, facilitating access to units, and handling service requests.
To communicate with you about your account, invoices, payment reminders, service updates, and changes to our terms and conditions or this Privacy Policy.
To manage billing, payment collection, refunds, and debt recovery, including working with external providers where necessary to pursue unpaid balances.
To ensure the safety and security of our customers, staff and premises, including the use of CCTV, access logs and other security measures.
To respond to your enquiries, feedback, or complaints and to improve the quality of our services based on your comments and our operational experience.
To meet our legal and regulatory obligations, including record keeping for tax, accounting and audit purposes, and to cooperate with law enforcement or regulatory authorities where required.
To carry out internal reporting, management and planning, including analysing usage trends and service performance, provided such analysis is done in a way that is consistent with data protection requirements.
Data Sharing and Processors
Storage Bexleyheath will not sell your personal data. We may share your personal data with selected third parties where this is necessary for the purposes described in this Privacy Policy or where we are legally required to do so.
We may share your data with service providers acting as data processors on our behalf. These may include providers of payment processing services, IT and system support, secure data storage and backup, customer management systems, CCTV maintenance, and professional advisers such as accountants or legal advisers who assist us in running our business. These processors are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures to protect your data.
We may also share personal data with debt recovery agencies, credit control partners or similar organisations in connection with unpaid accounts, as well as with law enforcement authorities, regulators, or courts where required by law or where necessary for the establishment, exercise or defence of legal claims.
Where any transfer of personal data involves a country outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protection measures, as required by law.
Data Retention
Storage Bexleyheath retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for a period after the end of your contract to deal with any queries, disputes or legal claims that may arise, and to comply with our statutory obligations. Payment and invoice records are typically kept for a period required by tax and accounting legislation. CCTV recordings and access logs are retained for a shorter period necessary for security and incident investigation, unless they are required for a longer period in connection with a specific incident, insurance claim or legal proceeding.
When your personal data is no longer required, we will securely delete or anonymise it in line with our data retention and deletion procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data processed by Storage Bexleyheath. These include:
The right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that data together with information about how we use it.
The right to rectification. You have the right to request that we correct or complete any personal data that is inaccurate or incomplete.
The right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and we have no other lawful basis for processing.
The right to restrict processing. You may request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to the processing and we are considering your request.
The right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is for the establishment, exercise or defence of legal claims.
The right to data portability. Where processing is based on consent or performance of a contract and is carried out by automated means, you may request that we provide you with your personal data in a structured, commonly used and machine readable format, or that we transmit it to another controller where technically feasible.
Where we rely on your consent as a lawful basis, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact Storage Bexleyheath first so that we can seek to resolve any concerns directly.
Security of Your Personal Data
Storage Bexleyheath takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, physical security at our premises, secure handling of payments, and limiting personal data access to staff and processors who need it to perform their duties and who are subject to confidentiality obligations.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. Any updated version will apply to all Storage Bexleyheath customers and individuals in the Bexleyheath area from the date it is published. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
