Storage Creekmouth Privacy Policy
This Privacy Policy explains how Storage Creekmouth collects, uses, stores and protects your personal data in accordance with the UK General Data Protection Regulation and applicable data protection laws. It applies to all Storage Creekmouth customers and prospective customers located in our service area, including individuals who enquire about, use or have used our storage services.
Scope and Data Controller
Storage Creekmouth acts as the data controller for the personal data described in this Privacy Policy. This means that we determine the purposes and means of processing your personal data in connection with our storage services, customer support and related activities.
By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you when you interact with Storage Creekmouth:
Identification and contact details, such as your name, postal address, billing address, and any other information required to create and manage your customer account.
Account and contract information, including storage unit number, contract start and end dates, access permissions, rental charges and payment history.
Payment and billing information, including payment method details, billing records, invoices, and information about any arrears or disputed payments. Full payment card details are handled in accordance with payment industry security standards and may be processed by approved payment processors on our behalf.
Communication data, such as records of your communications with us, including enquiries, complaints, feedback, and information you provide when you contact customer support or request information.
Security and access information, such as access control logs, times of entry to and exit from our premises, unique access codes, vehicle registration numbers used to access the site, and any incident reports.
CCTV footage and images captured on our premises, used to help maintain the security and safety of our customers, staff, property and equipment.
Technical and usage information when you visit our website, such as IP address, device information and basic usage data generated through your interactions with our online services, where permitted by law.
How and Why We Use Your Personal Data
We process your personal data only where we have a lawful basis for doing so. The main purposes for which we use your data and the corresponding lawful bases are set out below.
To provide storage services and manage your contract. We use your identification, contact, account and payment information to set up your account, allocate a storage unit, manage ongoing rentals, issue invoices, process payments, communicate with you about your contract and handle service-related requests. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To comply with legal and regulatory obligations. We may process certain personal data to comply with obligations under tax, accounting, health and safety, crime prevention and other applicable laws and regulations. The lawful basis is compliance with a legal obligation.
To protect our legitimate interests and those of others. We use CCTV, access logs and incident reports to help prevent and detect crime, protect our premises, equipment and customers belongings, and maintain the safety and security of our operations. We may also use certain data to pursue or defend legal claims, recover debts or manage business risks. The lawful basis is our legitimate interests, which we balance against your rights and freedoms.
To maintain and improve our services and business. We may use non-excessive contact, account and usage data to analyse how our services are used, enhance security, improve customer experience and plan our business. Where we rely on legitimate interests, we only do so where these interests are not overridden by your privacy rights.
To send you service communications. We may send you important updates and information about your account, your unit, site access, changes to terms and conditions and this Privacy Policy. These communications are necessary for performance of your contract or for our legitimate interests in keeping you informed.
To send you marketing communications, where permitted. We may use your contact details to provide you with information about similar services that may be of interest to you. Where required by law, we will obtain your consent before sending marketing communications, and you may withdraw your consent or object to marketing at any time.
Data Retention
We will keep your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we retain core customer account and contract records for the duration of your contract and for a period after its end to handle queries, manage any disputes, and comply with legal obligations. Payment and invoicing records are typically retained for periods required by tax and accounting rules. CCTV footage and access logs are retained for shorter periods, unless needed to investigate an incident or protect our legal rights.
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These service providers process personal data only in accordance with our instructions and are subject to contractual confidentiality and security obligations.
Typical categories of processors include providers of payment processing services, billing and accounting software, cloud data storage, customer relationship management tools, security and CCTV maintenance providers, and IT support services.
We may also share personal data with third parties acting as independent controllers where required or permitted by law. This may include law enforcement agencies, courts, regulatory bodies, professional advisers and insurers, particularly in the context of crime prevention, legal claims, audits or compliance obligations.
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as the use of standard contractual clauses or other safeguards recognised by applicable data protection law.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include controlled access to premises, use of access codes and CCTV systems, secure storage of physical records, encryption and access controls for electronic systems, regular review of user access rights, staff training on data protection responsibilities and incident response procedures.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data processed by Storage Creekmouth, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data about you be corrected or completed.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data you contest or assess an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims. You also have an absolute right to object at any time to the use of your personal data for direct marketing.
Right to data portability. In some cases, you may request that personal data you have provided to us in a structured, commonly used and machine-readable format be transmitted to you or directly to another controller, where technically feasible and where the processing is based on consent or contract and carried out by automated means.
Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any revised version will apply from the date it is issued. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
