Storage Custom House Privacy Policy
This Privacy Policy explains how Storage Custom House collects, uses, stores and protects your personal data when you use our storage services. It applies to all Storage Custom House customers in our service area, including prospective customers who make enquiries, current customers, and former customers whose data we continue to retain in line with legal requirements.
We are committed to complying with the General Data Protection Regulation and all applicable data protection laws. This Privacy Policy is intended to provide clear and transparent information about our data practices and your rights.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:
Identification and contact details such as your full name, postal address, billing address, contact address, and similar details necessary to identify and correspond with you.
Communication details such as your preferred contact method and records of communications with you, including notes from telephone calls, messages left for you, and any correspondence you send to us in writing.
Contract and account information such as storage unit numbers, contract start and end dates, payment history, account status, and information about the services you have purchased or requested.
Payment and transaction information such as payment amounts, dates, methods of payment, and transaction references. We do not store full payment card details where payments are processed through secure third party payment providers.
Security and access information such as access control data, including details of when you enter and leave our premises using key codes, fobs or similar systems, as well as information from our on-site security systems.
CCTV images where we use closed circuit television on our premises for security and safety purposes. These images may capture customers, visitors and vehicles entering or within our site.
Technical and usage information such as information about how you use our website and online services, including standard log information, device type and similar technical data, where this is collected through our digital platforms.
Lawful Bases for Processing Your Data
We only process your personal data when we have a lawful basis for doing so under data protection law. Depending on the context, we may rely on one or more of the following grounds:
Contractual necessity: We process personal data that is necessary to enter into a storage agreement with you and to perform that contract. This includes processing required to manage your account, provide access to your storage unit, handle payments and respond to your requests relating to the contract.
Legal obligations: We process certain personal data to comply with legal and regulatory requirements, such as record keeping, tax obligations, fraud prevention and responding to lawful requests from authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, provided these are not overridden by your rights and freedoms. This may include ensuring the security of our premises, improving our services, recovering unpaid fees, and managing our relationship with you outside of strict contractual obligations.
Consent: In limited cases we may rely on your consent, for example where we send certain types of optional marketing communications or use optional cookies or similar technologies on our website. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, manage and administer your storage account, including processing your application, preparing contracts and providing customer service.
To provide access to our storage facilities, manage security on site and protect our property, your stored goods and the safety of customers and staff.
To process payments, issue invoices, handle refunds and manage any queries relating to transactions.
To communicate with you about your account, including important notices about your storage unit, contract changes, payment reminders and operational updates.
To manage and improve our services, including monitoring usage patterns, identifying potential issues, and planning future improvements to our facilities.
To protect our legal rights and interests, including the collection of unpaid charges, management of disputes, and the establishment, exercise or defence of legal claims.
To comply with our legal and regulatory obligations, including responding to lawful requests from public authorities where required.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet our legal, accounting or reporting requirements.
In general, we keep core account and contract information for a defined period after the end of your contract to deal with any queries, disputes or legal issues that may arise. Payment records are retained in line with applicable financial and tax laws. CCTV footage is retained for a shorter period, unless a longer retention period is required in connection with an incident or investigation.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to you.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to support the operation of our business and are only permitted to process your personal data in accordance with our instructions and applicable data protection law.
Types of processors we may use include:
Payment service providers that process card and other payments on our behalf.
IT and cloud service providers that host our systems or provide software and technical support.
Security and access control providers that maintain our access control systems and, where applicable, support the operation of CCTV.
Professional service providers such as accountants and legal advisers who require access to relevant information in order to provide their services.
We may also share personal data with third parties where required by law, such as public authorities, law enforcement, regulators, or courts, or where sharing is necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International Transfers
Where our use of service providers involves the transfer of personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. This may include using standard contractual clauses or other approved transfer mechanisms.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. Subject to certain conditions and exemptions, these include:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal data we hold about you.
Right to rectification: You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
Right to erasure: You may have the right to request that we delete your personal data where there is no longer a lawful basis for us to retain or process it.
Right to restriction: You may have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: In some cases you may have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.
Right to object: You have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.
Where we rely on consent as the lawful basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
How to Exercise Your Rights and Contact Us
If you wish to exercise any of your rights or have any questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our website or in your contract documentation. We may need to verify your identity before responding to your request. We will respond within the timeframes required by law.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. Further information about how to do this can be obtained from the data protection authority in your country of residence or work.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection practices. When we make significant changes, we will take appropriate steps to inform you, which may include updating the version on our website and, where appropriate, notifying you through other communication channels.
You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
