Storage Wembley Privacy Policy
This Privacy Policy explains how Storage Wembley collects, uses, discloses and protects personal data relating to customers and prospective customers in the Wembley area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all individuals who enquire about, use or have used our storage services, whether as private individuals or on behalf of a business.
Who this policy applies to
This Privacy Policy applies to all Storage Wembley customers, former customers and prospective customers located in the Wembley area, as well as visitors to our premises who provide personal data in the course of an enquiry or visit. By engaging with us or continuing to use our services after being made aware of this policy, you acknowledge that you have read and understood its contents.
Personal data we collect
We collect and process personal data that is necessary for the provision of our storage services and for the legitimate operation of our business. The types of personal data we may collect include:
Identification data such as name, title, date of birth and proof of identity documents you present for verification.
Contact details such as home or business address, billing address, and information about your residence or business location within the Wembley area.
Communication data including enquiries, complaints, feedback and correspondence with our staff, whether made in person, by post or by other means.
Contract and account data such as storage unit number, rental period, payment history, contract terms, and records of access to our facilities where applicable.
Financial data such as partial transaction details related to payments you make for our services, as required for billing and accounting purposes.
Technical and security data such as CCTV images recorded on our premises, access control records, and information about any incidents or security investigations that may involve you.
We only collect personal data that is relevant and proportionate to the purposes explained in this policy.
How we collect personal data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, visit our premises or communicate with us. We may also receive data from third parties where you have instructed them to share data with us, or where this is necessary to check identity, prevent fraud or enforce our contractual rights.
Lawful bases for processing
We process your personal data only where we have a lawful basis to do so under data protection law. These bases are:
Performance of a contract. We process personal data to enter into and perform our storage agreements with you, including setting up your account, providing storage space and related services, taking payment and communicating with you about your contract.
Compliance with legal obligations. We process personal data to comply with our legal and regulatory obligations, including accounting, taxation, record keeping, health and safety and responding to lawful requests from public authorities.
Legitimate interests. We process personal data when necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, preventing and detecting crime or fraud, managing and improving our services, and defending our legal rights.
Consent. In some limited circumstances we may rely on your consent, for example where strictly required for specific forms of marketing or optional services. Where we rely on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Purposes for which we use personal data
We use your personal data for the following purposes:
To respond to your enquiries, provide quotes and information about our storage services and availability in the Wembley area.
To set up and manage your storage account, issue contracts, process payments and administer your relationship with us.
To manage access to our storage facilities, maintain security, monitor for unauthorised access and investigate incidents or complaints.
To maintain accurate business and financial records, produce invoices and comply with accounting and taxation requirements.
To communicate with you about changes to our terms, services or this Privacy Policy and about any matters affecting your storage unit or our facilities.
To analyse how our services are used, improve our operations, plan capacity and develop new or improved services for our customers in the Wembley area.
To establish, exercise or defend legal claims, including the recovery of unpaid charges and the enforcement of contractual rights.
Data retention
We will retain your personal data only for as long as is necessary for the purposes set out in this policy and to meet our legal, accounting or reporting requirements. In determining retention periods we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and applicable legal obligations.
Customer account and contract data are generally kept for a period after the end of your contract to enable us to respond to queries, manage any disputes and meet legal requirements. CCTV footage and access records are retained for shorter periods, unless required for the investigation of an incident or for legal proceedings. When personal data is no longer required, we will securely delete or anonymise it.
Data processors and sharing of personal data
We may engage trusted third parties to act as data processors on our behalf. These service providers process personal data only under our instructions and for the purposes we specify. They are required to maintain appropriate security measures and to comply with applicable data protection law.
Categories of processors may include providers of facility management systems, payment processing and accounting services, document storage or destruction services, and security and CCTV maintenance services.
We may also share personal data where required by law or regulation, or when necessary to protect our rights or the safety of our customers and staff. This may include sharing data with law enforcement agencies, courts, regulatory authorities or professional advisers, but only to the extent strictly necessary.
We do not sell your personal data to third parties.
International transfers
Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it, in accordance with data protection laws. This may include the use of standard contractual clauses or other legally recognised mechanisms to ensure that your data continues to benefit from a high level of protection.
Security of your personal data
We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and procedures for handling and responding to security incidents.
Your data protection rights
Under data protection law you have a number of rights in relation to your personal data. These include:
The right of access. You have the right to request a copy of the personal data we hold about you and to receive information about how we process it.
The right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no legal obligation to retain it.
The right to restrict processing. You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest its accuracy or object to its processing.
The right to object. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or the processing is needed for legal claims.
The right to data portability. Where processing is based on consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine readable format and, where technically feasible, to have it transmitted directly to another controller.
To exercise any of these rights, you can contact us using the details provided in your contract documentation or by your usual communication channel with Storage Wembley. We may need to verify your identity before responding to your request.
Complaints and further information
If you have concerns about how we handle your personal data, we encourage you to raise them with us in the first instance so that we can seek to resolve the matter. You also have the right to lodge a complaint with the relevant data protection supervisory authority.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or our data protection practices. Any updated version will be made available at our premises and will apply from the date of publication. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
