Storage Crook Log Privacy Policy
This Privacy Policy explains how Storage Crook Log collects, uses, stores, and protects personal data relating to individuals who use our storage services or interact with us in our service area. It applies to all Storage Crook Log customers and prospective customers in our operating area, as well as individuals who contact us with enquiries, visit our premises, or otherwise engage with our business.
Data Controller and Scope
Storage Crook Log is the controller of the personal data described in this Privacy Policy. This means that we determine the purposes and means of processing your personal data. This Privacy Policy applies to all personal data we process about customers, prospective customers, guarantors, authorised users of units, and visitors to our premises in our service area.
Personal Data We Collect
We collect and process the following categories of personal data where necessary for our business and legal obligations:
Identification data, such as full name, title, date of birth, identification document details, and signatures where required for contract verification.
Contact details, such as home or business address, billing address, and communication preferences.
Communication data, including records of communications with you such as enquiries, complaints, and correspondence relating to your storage unit or account.
Account and contract data, including unit numbers, contract dates, rental terms, payment status, and related information required to manage your storage agreement.
Payment and transaction data, such as payment method details, transaction history, invoices, and records of payments. We do not store full card details where this is handled by a secure payment processor.
Access and security data, such as access codes, key or fob details, log records of entries and exits where access control is in operation, and CCTV footage captured on our premises for security and safety purposes.
Technical data, including basic technical information collected when you visit our online channels, such as device type, browser type, and general usage data where necessary to operate and secure our online services.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment, contact us by any communication channel, or visit our premises. We may also collect data when you are named as an authorised user or emergency contact by a customer. In limited cases, we may receive data from third parties such as payment providers, fraud prevention services, or law enforcement where this is lawful and necessary.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation and associated data protection laws. Depending on the context, we rely on the following lawful bases:
Contract performance, where processing is necessary to enter into or perform a storage agreement with you, including taking steps at your request before entering into a contract.
Legal obligation, where we are required to process personal data to comply with applicable laws, such as tax regulations, financial record keeping, and obligations to law enforcement or regulatory bodies.
Legitimate interests, where processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your rights and interests. This may include operating and securing our premises, preventing fraud, managing our customer relationships, improving our services, and protecting our assets.
Consent, where you have given clear consent for specific processing activities, such as certain optional marketing communications. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Purposes of Processing
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your account, administering contracts, allocating units, and facilitating access to your storage space.
To manage payments and billing, including processing payments, issuing invoices, maintaining financial records, and handling any queries about charges or balances.
To communicate with you about your contract, including confirmations, service notices, changes to terms, and important information about your unit or our facilities.
To maintain security and safety, including operating access control systems, monitoring our premises using CCTV where in operation, preventing unauthorised access, and investigating incidents or suspected criminal activity.
To manage customer relationships and support, including handling enquiries, complaints, feedback, and requests related to your rights under data protection law.
To comply with legal and regulatory requirements, including responding to lawful requests from authorities, handling claims or disputes, and ensuring compliance with applicable laws.
To improve and manage our business, including analysing service usage in a non intrusive way, planning capacity, and improving our operational processes.
Data Sharing and Processors
We do not sell your personal data. We may share your data only where necessary and lawful. Categories of recipients may include:
Service providers acting as processors, who provide services such as secure data hosting, payment processing, accounting support, security systems, document storage, and information technology support. These providers are contractually required to process your data only on our instructions and to protect it appropriately.
Professional advisers, including lawyers, accountants, and insurers, where necessary to obtain professional advice, manage risks, or handle legal claims.
Public authorities and law enforcement, where we are legally obliged to disclose information or where disclosure is permitted by law to protect our rights, safety, or property, or the rights, safety, or property of others.
Other third parties, where you have requested or consented to the sharing of your data, or where it is necessary in connection with a corporate transaction affecting our business and where permitted by law.
International Transfers
Where we use service providers located outside the United Kingdom or European Economic Area, we take steps to ensure that your personal data is protected to a level consistent with UK data protection law. This may include the use of appropriate safeguards such as standard contractual clauses or other approved mechanisms, and assessing the adequacy of local data protection measures.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations. Retention periods will vary depending on the type of data and the purpose of processing.
Contract and billing records are generally retained for a period required by tax and accounting laws following the end of your contract. Security and access data, including CCTV footage and access logs, are retained for shorter periods, unless longer retention is required in connection with a specific investigation or legal claim. When personal data is no longer required, we delete it securely or anonymise it so that it can no longer be linked to an identifiable person.
Your Data Protection Rights
As an individual whose personal data we process, you have a number of rights under applicable data protection laws. These rights apply to all Storage Crook Log customers and relevant individuals in our service area, subject to certain legal conditions and exemptions.
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request correction of inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You have the right to request that we restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
Right to object. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to data portability. In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine readable format, and to request that we transmit that data to another controller where technically feasible.
Rights related to consent. Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights
If you wish to exercise any of your data protection rights, or if you have questions about this Privacy Policy or how we handle your personal data, you can contact us using our usual customer contact channels or in writing to our business address. We may need to verify your identity before responding to your request. We aim to respond without undue delay and within the time limits set by law.
Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can seek to resolve the matter. You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply to all personal data held by Storage Crook Log from the date it takes effect. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
