Storage Bowes Park Privacy Policy
This Privacy Policy explains how Storage Bowes Park collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Bowes Park area. It is designed to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Bowes Park customers and users of our storage services within the area we operate.
Scope of this Privacy Policy
This Privacy Policy applies to all individuals who use or enquire about Storage Bowes Park services, including self-storage customers, business customers, and any person acting on behalf of a customer. It covers data collected in person, by phone, through forms, and through any other method we use to communicate with you in the course of providing storage services.
Data Controller
Storage Bowes Park acts as the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about or use Storage Bowes Park services:
Identification and contact details such as full name, postal address, billing address, and correspondence address.
Account and contract details such as customer reference numbers, storage unit numbers, contract start and end dates, payment status, and communications related to your contract.
Payment and billing details such as payment method, partial payment card details as required for processing, bank transaction references, and invoicing history. We do not store full payment card details where this is not necessary for the transaction.
Verification information such as copies or details of identity documents, proof of address, business registration information, and any information reasonably required to confirm your identity and comply with legal obligations.
Usage and access information such as dates and times of entering and leaving the storage site where access control systems are used, records of unit access where applicable, and information about the services and units you use.
Security and monitoring information such as CCTV footage in and around common areas of the storage premises, incident reports, and information required for safety and security purposes.
Communication data such as records of communications with you, including enquiries, complaints, requests, and feedback that you provide to us by any communication method.
Purposes and Lawful Bases for Processing
We process your personal data only when we have a lawful basis under data protection law. Depending on the circumstances, we may rely on the following lawful bases:
Contract performance. We process your personal data to enter into and perform a contract with you, including setting up your storage unit, managing your account, processing payments, communicating about your storage agreement, and providing customer support.
Legal obligations. We process your data to comply with our legal and regulatory obligations, including tax and accounting requirements, fraud and crime prevention, and compliance with law enforcement or regulatory requests.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This includes managing and improving our services, ensuring the security of our premises, preventing non-payment or misuse of units, and maintaining accurate records.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional communications or marketing activities, where these are not based on our legitimate interests. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use the personal data described above for the following purposes:
To respond to your enquiries and provide information about available storage services.
To assess and set up your account and storage contract.
To manage billing, process payments, and maintain financial records.
To manage access to the site and your storage unit and to ensure the security and safety of our customers, staff, and property.
To handle customer service matters, including assistance, complaints, and dispute resolution.
To maintain and improve our services, premises, and security systems.
To comply with legal, regulatory, and law enforcement requirements.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In general, we retain data relating to your storage contract and financial transactions for a period required by applicable tax and accounting laws after the end of your contract. CCTV footage and access records are kept for shorter periods, which are limited to what is reasonably necessary for security, safety, and incident investigation.
When we no longer need personal data, we securely delete or anonymise it, unless we are required by law to retain it for a longer period.
Data Processors and Third Parties
We may share your personal data with selected third parties that act as data processors on our behalf. These processors only process your data according to our instructions and for the purposes described in this Privacy Policy. We maintain appropriate contracts and safeguards to protect your personal data.
Categories of processors and third parties we may use include payment processing providers, accounting and bookkeeping service providers, IT and cloud service providers, access control and security system providers, and professional advisors such as auditors or legal advisors where necessary.
We may also share personal data with law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or permitted to do so.
We do not sell your personal data and we do not share it with third parties for their own independent marketing purposes.
International Transfers
Where we use service providers located outside the United Kingdom or where data may be stored or accessed from outside the United Kingdom, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include using standard contractual clauses or ensuring that adequate safeguards are in place as required by data protection law.
Your Data Protection Rights
As an individual in respect of whom we process personal data, you have a number of rights under data protection law. These rights apply to all Storage Bowes Park customers and individuals in the Bowes Park area covered by this Privacy Policy, subject to certain legal conditions and exemptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification. You have the right to request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete or remove your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and we have no other legal basis for processing.
Right to restriction. You can request that we restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our processing.
Right to object. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will consider your objection and stop the processing unless we have compelling legitimate grounds to continue.
Right to data portability. Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine readable format and to transmit it to another controller.
Right to withdraw consent. Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before it was withdrawn.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, and restrictions on who can access your information within our organisation and among our service providers.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or business practices. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
