Privacy Policy - Manorpark Storage

Last updated: This Privacy Policy explains how Manorpark Storage collects, uses, stores, shares, and protects personal data relating to customers in the area. It applies to all Manorpark Storage customers in area, including individuals who enquire about, reserve, access, or use our storage services.

1. Introduction

Manorpark Storage is committed to handling personal data in a lawful, fair, and transparent manner. We recognise the importance of privacy and take our responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 seriously. This Privacy Policy describes what personal information we collect, why we collect it, the lawful bases we rely on, how long we keep it, who we share it with, and the rights available to you.

By using our services, making an enquiry, or otherwise interacting with Manorpark Storage, you acknowledge that your personal data will be processed in accordance with this policy. We only collect and use personal data where it is necessary and proportionate for the delivery of our storage services, compliance with legal obligations, or our legitimate business interests.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and date of birth where needed for verification.
Contact information: postal address, email address, and telephone number.
Account and contract details: customer reference numbers, service preferences, storage unit details, billing records, and agreement history.
Financial information: payment method details, transaction records, and information needed to process payments or refunds. We do not knowingly store full card details where a secure payment provider is used.
Access and usage information: entry logs, visit dates and times, and records relating to use of the facility.
Communications: correspondence with us by email, phone, forms, or written communication.
Technical information: limited device or browser data when our systems or service platforms collect it for security, performance, or fraud prevention.

We generally do not seek to collect special category data. If such data is provided to us unintentionally, we will handle it in accordance with applicable data protection law and only where a lawful basis exists.

3. How We Use Your Data

We use personal data for the following purposes:

to provide and manage storage services;
to set up and administer accounts or agreements;
to verify identity where required;
to process payments, invoices, and refunds;
to communicate about bookings, service updates, and account matters;
to maintain security, prevent fraud, and protect property;
to meet legal, regulatory, or tax obligations;
to handle enquiries, complaints, and disputes;
to improve our services, processes, and customer experience;
to exercise or defend legal claims.

We will only use your personal data where the use is consistent with the purpose for which it was collected or where we have a lawful basis to do so under data protection law.

4. Lawful Basis for Processing

Manorpark Storage processes personal data on one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes setting up storage services, managing access, processing payments, and communicating about your account.

Legal Obligation

We process data where needed to comply with legal requirements, including tax, accounting, regulatory, or law enforcement obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This may include protecting our premises, preventing misuse, improving service quality, managing risk, and maintaining business records. Where we rely on this basis, we consider whether the processing is necessary and whether it is proportionate and fair.

Consent

In limited situations, we may rely on your consent, for example where you agree to receive certain types of optional communications. Where consent is used, you may withdraw it at any time.

Important: We do not rely on consent where another lawful basis is more appropriate for the service relationship, such as contract or legal obligation.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason for holding it.

Customer and contract records: retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records: retained for the period required by law or accounting rules.
Security and access records: retained for a limited period unless required longer for incident investigation, dispute resolution, or legal compliance.
Enquiry correspondence: retained only as long as needed to respond or manage follow-up.

When personal data is no longer needed, we will delete it or anonymise it securely. In some cases, we may retain information for longer if required to establish, exercise, or defend legal claims.

6. Processors and Third Parties

We may share personal data with trusted third-party service providers who act as data processors on our behalf. These processors are only permitted to process personal data according to our instructions and must implement appropriate security measures. Examples may include:

payment processing providers;
IT hosting, cloud storage, and system support providers;
security and monitoring providers;
accounting, bookkeeping, or audit service providers;
professional advisers such as legal or insurance advisers;
mailing, communication, or document-management providers.

We may also disclose personal data where required by law, to regulatory authorities, law enforcement, courts, or other public bodies. If our business is reorganised, sold, or transferred, personal data may be disclosed to relevant parties as part of that transaction, subject to appropriate safeguards.

We do not sell your personal data.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and contract terms with processors. While no system can be guaranteed fully secure, we work to reduce risks and respond promptly to any suspected incident.

8. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include standard contractual clauses or other lawful transfer mechanisms designed to protect your data to a standard equivalent to that required in the UK.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply in different circumstances and may be subject to legal limits. They include:

Right of access: you may request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restrict processing: you may ask us to limit how we use your data in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will consider your request and respond in line with legal requirements. We may need to verify your identity before acting on a request. Some rights may not apply in all cases, for example where we must retain information to comply with legal obligations or to establish legal claims.

10. Complaints and Further Information

If you have concerns about how we handle personal data, we encourage you to raise them with us so that we can address the matter. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been processed unlawfully or your rights have not been respected.

This Privacy Policy may be updated from time to time to reflect changes in our services, legal obligations, or data protection practices. We encourage you to review it periodically to stay informed about how we protect your personal information.

11. Scope of This Policy

This policy applies to all Manorpark Storage customers in area and to individuals whose personal data we process in connection with our storage services. It is intended to provide clear and transparent information about our data practices, while ensuring that all processing remains limited, relevant, and lawful.

Manorpark Storage respects your privacy and is committed to safeguarding your personal data responsibly.