Storage Ilford Privacy Policy
This Privacy Policy explains how Storage Ilford collects, uses, stores and protects personal data relating to customers and prospective customers in the Ilford area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using Storage Ilford services or providing your personal information, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Ilford customers and individuals who make enquiries or bookings for storage services in the Ilford area, whether in person, by post, over the phone, or through any online or digital channels under our control.
Data Controller
Storage Ilford is the controller of the personal data described in this Privacy Policy. As the controller, Storage Ilford determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data:
Identity and contact details, such as your name, postal address, billing address, and preferred contact details.
Account and contract information, such as customer account identifiers, storage unit number, contract start and end dates, and payment status.
Payment and billing details, such as payment method information, partial card details where required for fraud prevention, and transaction records. We do not store full card details when processed through secure payment gateways.
Communication records, such as enquiries, complaints, feedback, and any correspondence you send to us or that we send to you.
Security and access data, such as CCTV recordings within and around the storage facility, door entry logs, access control records, and time of entry and exit.
Technical and usage data, where applicable, such as information about visits to any Storage Ilford website or digital service, including IP address, device information, and basic analytics data.
How We Collect Your Data
We collect personal data directly from you when you:
Request a quote or make an enquiry.
Enter into a storage agreement with us.
Make a payment or update your billing details.
Contact us with any query, request, or complaint.
Visit our storage premises and are recorded on CCTV or access control systems.
Use any online forms or digital tools provided by Storage Ilford.
We may also receive personal data indirectly from third parties acting on your behalf, such as a person you have authorised to manage your storage arrangements, or from payment service providers confirming the outcome of a transaction.
Lawful Basis for Processing
We process your personal data only where a lawful basis applies under data protection law. Depending on the context, the following lawful bases may apply:
Contract. We process personal data to enter into and perform our contract with you, including setting up your storage unit, managing bookings, processing payments, and maintaining your account.
Legal obligation. We process certain personal data to comply with legal and regulatory obligations, such as tax and accounting rules, law enforcement requests, and health and safety requirements.
Legitimate interests. We process personal data where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights. These interests include operating and improving our storage facilities, ensuring site security, preventing fraud, recovering debts, managing customer relationships, and handling complaints or disputes.
Consent. In limited situations, we may rely on your consent, for example for certain types of marketing communication where consent is legally required. Where we rely on consent, you are free to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including reservations, contracts, access and account administration.
To process payments, issue invoices, and maintain financial records.
To verify identity and prevent unauthorised access to storage units.
To ensure the security and safety of customers, staff, and property through CCTV monitoring and access control systems.
To respond to enquiries, complaints, and requests, and to provide customer support.
To send essential service communications about your contract, payments, access, or changes to our terms or policies.
To improve our services, conduct internal reporting, and maintain accurate records of our operations.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to meet legal, accounting, or reporting requirements.
In general, customer account and contract data are kept for the duration of the storage agreement and then for a period necessary to deal with any queries, disputes or legal obligations, which may typically be up to six years after the contract ends.
CCTV recordings and access logs are retained for a shorter period, determined by our security and risk assessment, unless a longer retention period is required in connection with a specific incident or legal claim.
Where data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.
Data Processors and Third Parties
We may share personal data with trusted third party service providers who act as data processors on our behalf. These processors may include:
Payment processors and financial institutions that handle card transactions and payment services.
IT and cloud service providers that host, maintain, and support our systems and data storage.
Security and access control providers supporting CCTV systems, door entry systems, and related hardware or software.
Professional advisers such as accountants, auditors, or legal advisers where necessary for business operations or to protect our legal rights.
All processors are required to process personal data only in accordance with our instructions, to keep it secure, and to comply with applicable data protection laws. We do not sell your personal data.
We may also disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or where necessary to protect the rights, property, or safety of Storage Ilford, our customers, or others.
International Transfers
Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, to protect your data in accordance with applicable regulations.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
Right to rectification. You can request that inaccurate or incomplete personal data be corrected or updated.
Right to erasure. You can request that your personal data be deleted where there is no lawful reason for us to continue processing it.
Right to restriction. You can request that we restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
Right to data portability. You can request to receive personal data that you have provided to us in a structured, commonly used and machine readable format, and to transmit it to another controller where technically feasible.
Right to object. You can object to processing based on our legitimate interests, particularly where it relates to direct marketing or profiling.
Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Exercising Your Rights
If you wish to exercise any of your data protection rights, or if you have questions or concerns about how Storage Ilford handles your personal data, you may contact us using our usual contact channels. We may need to verify your identity before responding to certain requests, in order to protect your privacy and security.
You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are not satisfied with our response or believe your data protection rights have been infringed.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include physical security at our premises, access controls, staff training, and the use of secure systems and encryption where appropriate.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updated version will apply from the date it is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we handle personal data.
