Storage Shoreditch Privacy Policy
This Privacy Policy explains how Storage Shoreditch collects, uses, stores and protects your personal data when you use our storage services in the Shoreditch area. It applies to all Storage Shoreditch customers and prospective customers located in or using our services within this area, including individuals, sole traders and businesses.
We are committed to complying with all applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy describes the categories of personal data we process, the lawful bases we rely on, how long we keep your information and the rights you have in relation to your data.
Data Controller
Storage Shoreditch is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data. Where we use third parties to process data on our behalf, they act as our data processors and must follow our instructions and comply with data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about or use Storage Shoreditch services:
Identification and contact data, such as your name, postal address, billing address, and general contact details. Customer account data, such as storage unit number, service history, communications with us, preferences, and notes related to your account and requirements. Payment and billing data, such as limited payment details necessary to confirm and allocate payments, invoices, transaction records and any associated account references. Usage and communication data, such as enquiries, complaints, feedback, call notes and message logs where you contact us or we contact you about our services. Security and access data, such as CCTV images in and around our facilities, access logs, entry and exit times and, where applicable, vehicle registration details used to access the premises. Contract and legal data, such as signed storage agreements, termination notices, and information required to resolve disputes or comply with legal obligations.
We do not intend to collect special category data such as health information or data concerning criminal convictions through our ordinary storage services. If such data is provided in limited cases, we will only process it where strictly necessary and lawful.
How We Collect Your Data
We collect personal data in several ways, including:
Directly from you when you complete forms, sign storage agreements, make bookings, provide payment details, or contact us in person, by post or by other communication channels. Automatically when you enter our premises and use our facilities, including CCTV footage and access control records. From third parties where necessary, for example from payment providers or banks in connection with transactions, or from law enforcement bodies where legally required.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under the UK GDPR. Depending on the specific processing activity, we may rely on one or more of the following lawful bases:
Contractual necessity. We process your data to take steps at your request before entering into a contract, and to perform our contract with you. This includes processing necessary to manage bookings, provide storage space, take payment, communicate with you about your account and provide customer support. Legal obligation. We process certain data to comply with legal and regulatory requirements, such as accounting, tax reporting, responding to lawful requests from public authorities and maintaining appropriate security records. Legitimate interests. We process data where it is necessary for our legitimate business interests, and these interests are not overridden by your rights and freedoms. This includes ensuring the security of our premises and customers, preventing fraud, maintaining and improving our services, managing business operations and defending legal claims. Consent. In limited circumstances we may rely on your consent, for example for certain optional communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To handle enquiries, provide quotations and set up new customer accounts. To enter into and perform storage agreements, including allocating units, administering access and managing ongoing usage. To process payments, maintain billing records and recover any sums owed. To communicate with you about your account, including notices, service updates, renewals and termination. To monitor and protect the security and safety of our customers, staff, premises and assets, including through CCTV and access logs. To manage and improve our facilities, services and customer experience, including handling complaints and feedback. To comply with legal obligations, respond to regulatory requests and cooperate with law enforcement where required. To establish, exercise or defend legal claims or manage disputes.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting or reporting requirements. Retention periods vary depending on the type of data and the context of processing.
In general, we will retain core customer account and contract records for a period after the end of your relationship with Storage Shoreditch in order to resolve any disputes, respond to queries and comply with applicable legal requirements. Financial and transactional records are held for the period specified in tax and accounting legislation. CCTV footage and access logs are held for a shorter period, unless a longer retention is required in connection with an incident, investigation or legal claim. When data is no longer required, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include:
Payment processing providers and banks that facilitate and verify payments. IT and cloud service providers that host or support our systems, storage management platforms and security systems. Professional advisors, such as legal and accounting firms, where necessary for advice or to protect our legal rights. Security service providers engaged in maintaining and monitoring access and CCTV systems.
These processors may only process your personal data in accordance with our written instructions and are required to implement appropriate technical and organisational measures to protect your data.
We may also disclose data to third parties acting as independent data controllers where required by law, where necessary to protect our rights, or where you request or authorise such disclosure. This could include law enforcement agencies, regulatory bodies, courts and other public authorities.
International Transfers
Where we use service providers located outside the United Kingdom, or where personal data is processed in other jurisdictions, we will ensure that an adequate level of protection is in place. This may involve using countries that have been recognised as providing an adequate level of data protection or putting in place appropriate safeguards such as standard contractual clauses.
Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Measures include access controls, secure storage, restricted access to CCTV recordings, staff training and regular review of our security practices. While we strive to protect your data, no system is completely secure, and you also have a role in keeping your data safe by informing us promptly of any suspected misuse of your information.
Your Data Protection Rights
Under the UK GDPR, you have certain rights in relation to your personal data, subject to some conditions and exceptions. These include:
Right of access. You can request confirmation that we process your personal data and obtain a copy of that data. Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you. Right to erasure. You can request that we delete your personal data where there is no good reason for us to continue processing it, subject to legal and contractual obligations. Right to restriction of processing. You can ask us to restrict how we use your data in certain circumstances, for example while we investigate a concern about accuracy. Right to data portability. For data you have provided to us and which we process by automated means on the basis of consent or contract, you can request to receive it in a structured, commonly used and machine readable format or ask us to transmit it to another controller where technically feasible. Right to object. You can object to processing that is based on our legitimate interests, including profiling related to those interests. We will stop processing unless we have compelling legitimate grounds or need the data in connection with legal claims. Right not to be subject to decisions based solely on automated processing where these produce legal or similarly significant effects. Storage Shoreditch does not carry out such automated decision making in the context of ordinary storage services.
You may exercise your rights by contacting us and providing sufficient information for us to confirm your identity. We will respond to all valid requests within the time limits set by law.
Policy Scope and Updates
This Privacy Policy applies to all Storage Shoreditch customers and prospective customers using our services in the Shoreditch area. It forms part of the terms on which we provide services to you but does not create contractual rights beyond those set out in our customer agreements.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service offerings. When we make significant changes, we will take appropriate steps to inform you, which may include making a clear notice available at our premises or updating the effective date on this page. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
