Storage Old Oak Common Privacy Policy
This Privacy Policy explains how Storage Old Oak Common collects, uses, stores and protects personal data relating to our customers and prospective customers in the Old Oak Common area. It is intended to provide clear information in accordance with the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all Storage Old Oak Common customers, including individuals, sole traders and representatives of businesses and organisations that use or enquire about our storage services in the Old Oak Common area.
Data Controller
Storage Old Oak Common is the data controller of the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed. We are responsible for ensuring that any processing of your personal data is carried out in compliance with applicable data protection law.
Personal Data We Collect
We collect and process a range of personal data about you in connection with our storage services and related activities. The types of data we collect may include:
Identification data, such as name, title, date of birth and proof of identity details contained in passports, driving licences or other identity documents.
Contact data, such as home or business address, billing address, and any other postal addresses you provide, as well as non-digital communication preferences.
Account and contract data, such as customer reference numbers, unit numbers, rental agreements, access authorisations and related records concerning your use of our storage facilities.
Payment and billing data, such as payment methods, payment history, invoices, credits and transaction records. We do not store full payment card details; these are processed by our payment service providers.
Security and access data, such as logs of entry to and exit from our premises, unit access records, CCTV recordings in and around our facilities, and records of any incidents or accidents on site.
Communication data, such as correspondence by post and records of customer service interactions, including the content and outcome of enquiries, complaints or feedback you provide.
Technical and usage data, where relevant, such as information about how you interact with our booking systems, and the dates and times of visits to our premises or to our systems.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a rental agreement, make a payment, visit our premises, use our services, or communicate with us in any way.
We may also receive data from third parties where this is necessary to provide our services or comply with our legal obligations. This may include identity verification providers, payment processors, or law enforcement and regulatory bodies where legally permitted.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, this may include:
Contract performance. We process personal data to set up, administer and fulfil storage contracts and associated services, including handling billing, access control, customer service and termination of agreements.
Legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, including tax, accounting, health and safety, crime prevention and responding to legitimate requests from public authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises and customers, improving our services, managing our business operations, preventing non-payment or misuse of our facilities and maintaining accurate records.
Consent. In some limited situations we may rely on your consent, for example for certain types of optional communications or in relation to specific uses of CCTV images beyond security and safety purposes. Where we rely on consent, you are free to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up and manage your storage agreement, including processing your application, confirming your identity, allocating storage space, managing access and handling renewals or terminations.
To process payments, issue invoices, manage your account balance, and deal with any billing queries or disputes.
To provide customer service and support, including responding to enquiries, resolving problems, handling complaints and keeping records of communications.
To maintain the safety and security of our customers, staff and property, including through access control systems and CCTV monitoring in and around our storage facilities.
To manage our business operations, including auditing, accounting, reporting, planning and improving our services and facilities.
To meet our legal and regulatory obligations, including record keeping, responding to lawful requests from authorities and cooperating with law enforcement.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and in line with applicable legal and regulatory requirements.
Customer account and contract records are typically kept for a period after your storage agreement ends, so that we can respond to queries, handle disputes, meet tax and accounting obligations and demonstrate compliance. The exact retention period will vary depending on the type of data and applicable legal requirements.
CCTV images and access logs are retained for a limited period necessary for security, safety and incident investigation, unless a longer retention period is required in connection with a specific incident, dispute or legal claim.
When personal data is no longer needed, we will securely delete or anonymise it, so that it can no longer be associated with an identifiable individual.
Data Processors and Third Parties
We sometimes use third party service providers to process personal data on our behalf. These providers act as data processors and only process your data in accordance with our documented instructions and under appropriate contractual safeguards.
Examples of data processors we may use include payment processing providers, identity verification services, secure document storage and disposal providers, IT infrastructure and maintenance services, customer service support tools and external auditors or professional advisers where they act as processors.
We may also share personal data with third parties who act as independent data controllers where necessary for legal or regulatory reasons, such as law enforcement bodies, regulatory authorities, courts and tribunals, or professional advisers acting in a controller capacity.
Whenever we share personal data, we limit the data disclosed to what is strictly necessary and take appropriate steps to protect your privacy.
International Data Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place for any transfer of personal data. This may include using approved standard contractual clauses or ensuring an adequacy decision applies to the destination country. We will take reasonable steps to ensure that your personal data remains protected to a standard equivalent to that under UK data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access. You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data and certain additional information.
Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
Right to data portability. In certain circumstances, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit that data to another controller where technically feasible.
Right to object. You have the right to object to processing of your personal data where we are relying on our legitimate interests, including profiling based on those interests. We will stop processing the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims.
Right not to be subject to automated decision making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless certain conditions are met.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. You may do so in the country where you live or work, or where the alleged infringement took place.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services or legal requirements. Any changes will take effect when the updated policy is made available to customers. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
