Self Storage Barnes Privacy Policy
This Privacy Policy explains how Self Storage Barnes collects, uses, discloses and protects personal data of its customers and prospective customers in the local area. It applies to all Self Storage Barnes customers and users of our services, including those who contact us for quotations, viewings or general enquiries, whether in person, by post, online or by any other means.
Self Storage Barnes acts as the data controller for the personal data described in this policy. We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and any other applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. This may include the following types of information:
Identity and contact details such as name, postal address, billing address, contact address, date of birth, and any other identification information you choose to provide.
Account and contract details such as storage unit number, contract start and end dates, services taken, payment status, rental history and communications relating to your account.
Payment and billing details such as payment method, billing history, partial card or bank details as required for processing transactions through our payment providers, and invoices or receipts issued to you. We do not store full card details when this is handled directly by our payment processors.
Security and access information such as access codes, key fob or card identifiers, sign-in and sign-out records, CCTV footage in and around the facility, incident or accident reports, and records of any access restrictions or security investigations.
Communication data such as enquiries, complaints, feedback, emails, letters, and notes of telephone conversations related to our services, bookings, payments and support.
Marketing preferences such as your choices about receiving marketing communications regarding our storage services, promotions or updates, and records of any consent you provide or withdraw.
How We Collect Your Personal Data
We may collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, visit our facilities, or communicate with us by any channel.
We may also receive personal data from third parties such as payment service providers, credit reference agencies where applicable, fraud prevention organisations, and service providers that support our operations.
In some circumstances, personal data may be collected automatically, for example through access control systems, CCTV systems and logs of visits to our premises.
Lawful Bases for Processing
We process your personal data only when we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Contract: We process personal data that is necessary to enter into or perform a contract with you, such as setting up and managing your storage agreement, taking payments, providing customer support, and communicating with you about your service.
Legal obligation: We process personal data where this is required to comply with our legal obligations, for example obligations relating to tax, accounting, health and safety, crime prevention and responding to lawful requests from authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This includes securing our premises and property, managing access, improving our services, preventing fraud and non-payment, protecting our staff, and maintaining records for business planning.
Consent: In limited cases, we may rely on your consent, particularly for certain types of direct marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
Purposes of Processing
We use your personal data for the following purposes:
To provide storage and related services, including setting up and administering your account, processing bookings, managing unit allocations and handling enquiries.
To manage payments and billing, including recurring payments where applicable, issuing invoices and receipts, and dealing with payment queries or disputes.
To maintain security and safety at our facilities, including controlling access, monitoring CCTV, investigating incidents, ensuring compliance with site rules, and protecting our property and that of our customers.
To comply with legal and regulatory obligations, including tax and accounting requirements, incident reporting, and responding to requests from law enforcement or regulatory authorities where we are legally obliged to do so.
To communicate with you about your account, service updates, changes to terms, and other important information related to your storage or enquiries.
To send you marketing communications about our services where permitted, and to manage your marketing preferences and opt-outs.
To manage and improve our business, including service quality, staff training, dispute resolution, and internal reporting and planning.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements.
Generally, we keep customer account and contract information for a period following the end of your agreement to enable us to respond to queries, maintain adequate records and comply with statutory retention requirements. Payment records and invoices are typically kept for the period required by tax and accounting laws.
CCTV footage and access control records are retained for a shorter period, unless they are required for the investigation of an incident, for legal proceedings or to comply with a legal obligation.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These processors are engaged to provide services necessary for our operations and are required to process your data only in accordance with our instructions and with appropriate security measures.
Data processors may include payment service providers, IT hosting and maintenance providers, customer management systems, access control and security system providers, document storage and shredding providers, and professional advisers such as accountants and legal advisers acting under a duty of confidentiality.
In some circumstances, we may also share personal data with third parties acting as independent controllers, for example insurers, law enforcement agencies, regulatory bodies, courts and tribunals, and debt recovery agencies where this is lawful and necessary.
We do not sell your personal data to third parties.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that an adequate level of protection is provided for your data, for example by using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Your rights include the following:
The right of access: You have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
The right to rectification: You have the right to request that inaccurate or incomplete personal data about you is corrected or updated without undue delay.
The right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
The right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or consider an objection you have raised.
The right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a commonly used, machine-readable format and to request that we transfer it to another controller where technically feasible.
The right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is for the establishment, exercise or defence of legal claims. You also have an absolute right to object at any time to the use of your personal data for direct marketing.
The right to withdraw consent: Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
How This Policy Applies to Self Storage Barnes Customers in the Area
This Privacy Policy applies to all customers and prospective customers of Self Storage Barnes within our service area, regardless of how they contact or use our services. By engaging with us for self storage or related services, you acknowledge that you have been informed of the ways in which we handle personal data under this policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any updated version will apply from the date it is published. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
