Storage Covent Garden Privacy Policy
This Privacy Policy explains how Storage Covent Garden collects, uses, stores and protects personal data relating to customers and prospective customers using our storage services in the Covent Garden area. This policy applies to all Storage Covent Garden customers in the area, including individuals, sole traders and business clients who interact with us, whether online, by telephone or in person at our premises.
We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. We only process personal data in a fair, lawful and transparent manner and take appropriate measures to keep your information secure.
Personal Data We Collect
We collect and process personal data that is necessary to provide our storage services and to manage our relationship with you. The types of personal data we may collect include:
Identification and contact details such as name, postal address, billing address, contact address, nationality, date of birth, and identification documents where required to verify your identity.
Contact information such as email address and other contact details you choose to provide so that we can communicate with you about your booking, account and related services.
Contract and account information such as storage unit details, contract dates, payment history, invoices, correspondence, and records of your interactions with us.
Payment and billing information such as payment method details processed via our payment processors, and records of payments and refunds relating to your account. We do not store full payment card details in our own systems.
Security and access information such as access codes, unit numbers, entry logs, CCTV images from our premises and any incident reports that relate to the safe operation of our storage facility.
Technical and usage data relating to your use of our website or online services, such as IP address, browser type, device identifiers, pages visited and the date and time of visits, collected through standard web technologies.
How We Use Your Personal Data
We process your personal data only for specified and legitimate purposes. These include:
To provide storage services, including setting up and managing your storage contract, allocating units, administering access, arranging renewals and handling moves in and out.
To manage billing and payments, including issuing invoices, processing payments, managing deposits and handling queries about your account or charges.
To communicate with you about your storage unit, contract, bookings, operational updates, service changes and important safety or security information.
To ensure the security and safety of our premises, our staff, our customers and their property, including by operating access controls, maintaining visitor logs and using CCTV for security and crime prevention.
To comply with legal and regulatory obligations, including record-keeping, responding to lawful requests from authorities and assisting with the investigation or prevention of fraud and crime.
To manage our business operations, including internal administration, service monitoring, quality assurance, staff training and handling feedback, complaints and disputes.
To improve our services and website, including by analysing service usage, understanding customer needs and making adjustments to our facilities and processes.
Lawful Bases for Processing
We will only process your personal data where we have a lawful basis to do so under data protection law. Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract: Processing is necessary to enter into or perform our storage contract with you, for example to set up your account, manage access to your unit and administer payments.
Legal obligation: Processing is necessary to comply with our legal obligations, such as financial record-keeping, tax obligations, health and safety requirements and obligations relating to crime prevention and law enforcement.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Our legitimate interests include securing our premises, preventing fraud, improving our services, managing business risks and ensuring the efficient operation of our facilities.
Consent: In limited circumstances, we may rely on your consent, for example where required for certain optional marketing communications. Where we rely on consent, you can withdraw it at any time.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or to meet legal, regulatory or operational requirements. When determining appropriate retention periods, we consider the type of data, the risks associated with its processing, the purposes for which we use it and our legal obligations.
Customer contract and billing records are generally retained for a period necessary to comply with tax and accounting requirements and to enable us to address any queries or disputes that may arise after the end of your contract.
CCTV footage and access logs are retained for a limited period to support security, safety and incident investigations. These records are usually kept only for as long as needed for security and investigation purposes unless a longer retention period is required for legal reasons.
Correspondence, complaints and incident reports are maintained for a period that allows us to respond to issues, provide evidence in case of disputes and improve our services.
At the end of the applicable retention periods, personal data will be securely deleted, anonymised or archived in a way that ensures it is no longer used for active purposes.
Data Sharing and Processors
We do not sell your personal data. We may share your data with selected third parties only where this is necessary and lawful. These third parties act either as data processors on our behalf or as independent controllers with their own data protection responsibilities.
We may use trusted service providers to support the operation of our business, for example for payment processing, accounting, customer relationship management, information technology hosting, security systems and CCTV maintenance. These providers act as data processors and may only process your data based on our instructions, subject to appropriate contractual and security safeguards.
We may share personal data with professional advisers such as auditors, legal advisers and insurers where this is necessary for managing our business and protecting our legal rights.
We may disclose data where necessary to comply with legal obligations or lawful requests by public authorities, law enforcement or regulatory bodies, or to protect our rights, property, customers and the safety of our premises.
If we are involved in a business transaction such as a reorganisation, merger or asset transfer involving our Covent Garden facility, personal data relevant to that facility may be shared with parties to the transaction, subject to appropriate confidentiality and data protection measures.
International Transfers
If we use service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. These safeguards may include the use of standard contractual clauses or other recognised transfer mechanisms. We will only transfer personal data internationally where we are satisfied that it will receive an adequate level of protection.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, controlled access to storage units, access controls for our information systems, staff training and regular review of our security procedures.
While we take reasonable steps to protect your data, no system is completely secure. We regularly assess our security arrangements and take steps to address vulnerabilities and improve our safeguards.
Your Data Protection Rights
As a customer of Storage Covent Garden within the applicable area, you have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation that we process your personal data and to receive a copy of the data we hold about you, together with certain information about how we use it.
Right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data. We encourage you to notify us promptly of any changes to your contact details or other information.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to retain it.
Right to restriction: You may ask us to restrict the processing of your data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to data portability: In some cases, you may request that we provide you with personal data that you supplied to us in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to object: Where we process your personal data based on our legitimate interests, you have the right to object to that processing in certain circumstances. We will stop the processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Rights relating to consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data has been processed in a way that does not comply with data protection law.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our processing activities or applicable laws. Any changes will be effective from the date of publication. We encourage you to review this policy periodically to stay informed about how we handle your personal data.
