Storage Colindale Privacy Policy
This Privacy Policy explains how Storage Colindale collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Storage Colindale customers in our service area, including individuals and businesses who rent or enquire about our storage units or related services.
We are committed to protecting your privacy and handling your personal data in a fair, transparent and lawful manner, in line with the General Data Protection Regulation and applicable UK data protection laws.
Data Controller
Storage Colindale is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed in connection with the services we provide.
Personal Data We Collect
We collect and process personal data that is necessary to provide our services and operate our business. The types of personal data we may collect include:
Identification and contact details such as your name, postal address, billing address, contact address, and other contact information you provide to us.
Contract and account information such as details of your storage unit, rental period, access codes or keys associated with your unit, payment status, invoices, and records of your communications and interactions with us.
Payment and transaction data such as payment method details, payment history, amounts paid, refunds, and related financial records. We do not store full card details when you pay by card, although our payment processor may do so in accordance with its own legal obligations.
Security and access data such as CCTV footage on or around our premises, gate and unit access logs, dates and times of entry, and vehicle registration details where relevant for security and site management.
Communication data such as records of phone calls where we make recordings for training and security purposes, call notes, emails, and other correspondence with you.
Marketing preferences such as your choices about receiving marketing communications from us and records of your consent where applicable.
How We Collect Your Data
We collect personal data in several ways:
Directly from you when you make an enquiry, request a quote, sign a storage agreement, access our premises, update your details, or contact us by phone, post or other means.
From your use of our facilities and services, including entry systems, CCTV systems and payment processing systems.
From third parties where this is necessary to manage your account or verify information, such as payment service providers or credit reference agencies, where applicable and lawful.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so. Depending on the context, this will be one or more of the following:
Performance of a contract. We process personal data to provide our storage services and related services, manage your account, process payments, handle enquiries, and fulfil our contractual obligations.
Compliance with legal obligations. We process certain personal data to comply with our legal and regulatory obligations, for example relating to tax, accounting, security, and law enforcement requests.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises, preventing fraud, managing our operations, improving services, and communicating with our customers about similar services.
Consent. Where required by law, we will rely on your consent for specific processing activities, such as certain types of electronic marketing communications. You can withdraw your consent at any time, although this will not affect the lawfulness of processing before consent was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you, including setting up and managing your account, granting access to your storage unit, responding to your enquiries, and communicating with you about your contract and our services.
To process payments, issue invoices, manage debt recovery where necessary, and maintain accurate financial records.
To maintain the safety and security of our premises, staff, and customers, including through CCTV monitoring, access controls, and incident investigation.
To manage our relationship with you, including notifying you of changes to our terms, conditions, or policies, and handling complaints or disputes.
To carry out internal administration, record keeping, and business planning.
To send you information about our services that may be of interest to you, in accordance with your marketing preferences and applicable law.
Data Retention
We keep your personal data only for as long as is necessary for the purposes described in this Privacy Policy and to meet our legal, accounting and reporting requirements.
In general, we keep customer account and contract information for a period after the end of your storage agreement, to deal with any queries, disputes, or legal claims, and to comply with record keeping obligations. CCTV footage and access logs are retained for shorter periods, unless we need to keep them longer in connection with an incident, dispute or investigation.
When personal data is no longer required, we will delete it or anonymise it so that it can no longer be linked to an identified or identifiable person.
Data Processors and Third Parties
We may share your personal data with third-party service providers who act as data processors on our behalf. These processors are engaged to support our business operations and are only permitted to process your data in accordance with our instructions and this Privacy Policy.
Such processors may include providers of payment processing services, customer relationship management systems, cloud storage and hosting services, security and CCTV system providers, call recording systems, and professional advisers such as accountants where they handle personal data in the course of providing services to us.
We may also share personal data with third parties acting as independent data controllers where this is necessary and lawful, for example with law enforcement agencies, regulators, courts, or our professional advisers in connection with legal proceedings, suspected fraud, security incidents or regulatory compliance.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where personal data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. This may include using standard contractual clauses or relying on an adequacy decision.
Your Data Protection Rights
As a customer of Storage Colindale, you have a number of rights in relation to your personal data under data protection law. These rights apply to all customers in our service area, subject to certain legal conditions and exemptions.
Right of access. You have the right to request confirmation of whether we hold personal data about you and to request a copy of the personal data we hold, along with certain information about how we use it.
Right to rectification. You have the right to ask us to correct or complete any personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data. This is sometimes known as the right to be forgotten. This right is not absolute and may be limited, for example where we need to retain data to comply with legal obligations or establish or defend legal claims.
Right to restriction. You may request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our processing.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller, where technically feasible.
Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds or the processing is required for legal reasons. You always have the right to object to direct marketing, and we will comply with such requests.
Rights in relation to automated decision-making. Storage Colindale does not carry out solely automated decision-making that produces legal or similarly significant effects for customers.
You can exercise your rights by contacting us using the contact methods provided in your contract or our customer communication channels. We may need to verify your identity before responding to your request, and we will respond within the time limits set by law.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage, staff training, and regular review of our security practices.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any changes will take effect when the updated version is made available, and where appropriate we will notify you through our usual communication channels.
Contact and Complaints
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact us through the details provided in your Storage Colindale contract or through our established customer contact channels.
You also have the right to lodge a complaint with the relevant supervisory authority for data protection if you are unhappy with how we have used your personal data. We would, however, appreciate the chance to deal with your concerns first and invite you to contact us so we can try to resolve any issues.
