Storage Manor Park Privacy Policy
This Privacy Policy explains how Storage Manor Park collects, uses, stores, and protects personal data relating to our self-storage and related services. It applies to all Storage Manor Park customers and prospective customers in our service area, as well as individuals who contact us, visit our premises, or otherwise interact with us.
We are committed to complying with the UK General Data Protection Regulation GDPR and the Data Protection Act 2018, and to handling your personal data lawfully, fairly, and transparently.
Who this policy applies to
This Privacy Policy applies to all Storage Manor Park customers in our area, including individuals, sole traders, and business customers, as well as any authorised users or representatives linked to a customer account. It also applies to visitors to our facility and anyone who provides us with personal data in connection with enquiries, bookings, or other interactions.
Types of personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identity and contact details, such as full name, postal address, billing address, date of birth, proof of identity details, and contact details such as email address and communication preferences.
Account and contract information, such as storage unit numbers, contract start and end dates, payment history, correspondence about your account, and records of your interactions with us.
Payment and billing information, such as payment method details, recurring payment instructions, invoices, and records of transactions. We do not store full card details when processed by our payment providers.
Security and access information, such as access control records, entry and exit logs, CCTV footage on and around our premises, and records of incidents or complaints.
Communication data, such as emails, letters, call notes, and details of your enquiries or feedback.
Technical information relating to our website, such as IP address, browser type, and basic usage data, to help maintain and improve our online services. This information is typically collected through cookies or similar technologies where in use and where legally permitted.
How we collect your personal data
We collect personal data from you directly when you enter into a storage contract, request a quote, complete forms, contact us by phone or in writing, visit our facility, or sign up to receive information from us.
We may also receive personal data from third parties, such as payment service providers, credit reference agencies where used, or other individuals who have authorised you as a contact or representative.
Lawful bases for processing your data
We process your personal data on one or more of the following lawful bases under GDPR:
Contract: To take steps at your request before entering into a contract, and to perform our contract with you, such as providing storage services, managing your account, taking payment, and communicating about your booking.
Legal obligation: To comply with legal and regulatory requirements, such as tax, accounting, law enforcement requests, and obligations under safety and security regulations.
Legitimate interests: To pursue our legitimate business interests, provided that your interests and fundamental rights do not override these. This includes managing and improving our services, protecting our premises and assets, preventing fraud and misuse, handling customer queries, and maintaining security through access control and CCTV.
Consent: Where required by law, such as for certain types of marketing communications, we rely on your consent. You can withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage and related services, including setting up and administering your account, taking bookings, managing access, and providing customer service and support.
To process payments and manage billing, including issuing invoices, handling payment queries, and managing debt recovery where appropriate.
To ensure security and safety, including monitoring access to the facility, operating CCTV at and around our premises, investigating incidents, and protecting against crime and damage.
To communicate with you, including responding to enquiries, sending service-related notices, informing you of changes to terms or services, and dealing with complaints.
To comply with legal and regulatory obligations, including record-keeping for tax and accounting, cooperating with law enforcement and regulators, and meeting statutory reporting requirements.
To improve our services, including analysing how our services are used, maintaining our systems, and developing new offerings.
Data retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.
In general, we retain customer account and contract records for a period after the end of your relationship with us, to respond to queries, handle potential disputes, and meet our legal obligations. Financial and transaction records are typically kept for the statutory retention period required for tax and accounting purposes.
CCTV footage and access logs are retained for a limited period consistent with security and operational needs, unless a longer retention period is required in connection with an incident, dispute, or legal requirement.
When data is no longer needed, we delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.
Data processors and sharing of personal data
We may share your personal data with third parties where necessary for the purposes set out in this Privacy Policy, and where permitted by law.
We use trusted service providers as data processors to support our operations, including providers of payment processing services, secure data storage and IT systems, customer relationship management tools, and professional advisers such as accountants or legal advisers. These processors act on our instructions and are required to protect your personal data and keep it confidential.
We may also share personal data with other third parties where required by law or regulation, such as law enforcement agencies, courts, regulators, or government authorities, or in connection with legal claims or proceedings.
In the event of a business sale, merger, or restructuring, personal data may be shared with relevant parties as part of that process, subject to appropriate safeguards.
International transfers
Where our service providers are located outside the United Kingdom or the European Economic Area, or where data is accessed from such locations, we take steps to ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, in accordance with data protection laws.
Your data protection rights
Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions in the law:
Right of access: You have the right to request confirmation of whether we process your personal data and to request a copy of the data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no other legal basis to continue processing it.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific circumstances, such as where you contest its accuracy or object to our use of it.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it is transmitted to another controller where technically feasible.
Right to object: You have the right to object to processing based on our legitimate interests, including profiling on that basis, and we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims. You also have the right to object at any time to direct marketing.
Rights in relation to automated decision-making: You have rights in relation to decisions based solely on automated processing, including profiling, where such decisions have legal or similarly significant effects for you.
Exercising your rights and contacting us
If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact Storage Manor Park in writing or in person at our premises. We may need to verify your identity before responding to your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee or refuse a request if it is manifestly unfounded or excessive.
You also have the right to lodge a complaint with the Information Commissioner's Office if you are unhappy with how we handle your personal data. We encourage you to contact us first so we can try to resolve your concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updated version will apply from the date it is made available. We recommend that you review this policy periodically to stay informed about how we handle your personal data.
