Storage Shacklewell Privacy Policy
This Privacy Policy explains how Storage Shacklewell collects, uses, stores, and protects personal data relating to our storage services. It applies to all Storage Shacklewell customers and prospective customers in our service area, as well as individuals who contact us in relation to our services. We are committed to handling personal data in a lawful, fair, and transparent way in line with applicable data protection laws, including the UK General Data Protection Regulation and relevant local legislation.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Shacklewell customers in our operating area, including individuals, sole traders, partnerships and representatives of corporate clients who rent or enquire about storage units, use our ancillary services, visit our premises, or otherwise interact with us. It also applies to visitors to our premises whose personal data we may collect for security and safety purposes.
What personal data we collect
We collect and process different types of personal data depending on how you interact with us. This may include the following categories of information:
Identification and contact details such as name, postal address, billing address, contact address, and any other contact details you choose to provide. Account and contract information such as customer reference numbers, unit numbers, contract start and end dates, billing history, communications about your account, and records of your use of our services. Payment and transaction data such as payment method, limited payment card details as permitted by law, bank details for transfers, payment confirmations, invoices, and records of any refunds or chargebacks. Communications data such as emails, letters, and records of telephone or in-person conversations relating to enquiries, quotations, bookings, support requests, complaints, and feedback. Security and access information such as CCTV footage, access logs, vehicle registration details if provided, and records of access to the site or to specific storage units. Usage and technical information when you use our online tools or digital services, such as log data, device information and basic analytics data, where this is necessary to operate and protect our services.
How we collect personal data
We collect personal data directly from you when you make an enquiry, request a quote, enter into a storage agreement, communicate with us, visit our premises, make a payment, or use any of our services. We may also collect data automatically through security systems such as CCTV or access control when you enter or use our facilities. In some cases, we may receive limited personal data about you from third parties, for example where a business customer provides contact details of its authorised representatives, or where we receive information from payment service providers and banks in relation to your transactions.
Lawful bases for processing your data
We only process your personal data where we have a lawful basis under data protection law. Depending on the situation, we may rely on the following lawful bases:
Contractual necessity where processing is necessary for us to enter into or perform our contract with you, for example to set up your storage account, manage bookings and payments, provide you with access to your storage unit, and communicate with you about your agreement. Legal obligations where we must process personal data to comply with legal or regulatory requirements, for example accounting and tax rules, record keeping, fraud prevention, law enforcement requests and health and safety obligations. Legitimate interests where processing is necessary for our legitimate business interests and your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises and customers, monitoring access for safety, managing and improving our services, handling customer queries, and defending legal claims. Consent where you have clearly agreed to specific processing, for example certain marketing communications where consent is required. You can withdraw your consent at any time as described in the section on your rights.
How and why we use your personal data
We use your personal data for the following purposes:
To provide storage and related services, including assessing and handling enquiries, creating and managing customer accounts, allocating and managing storage units, processing payments, and providing access and support. To communicate with you about your contract, invoices, payments, notices, service changes, renewals, and any issues relating to your storage unit or our premises. To ensure security and safety, including controlling access to our facilities, monitoring for unauthorised access or misuse, safeguarding customers and staff, and investigating incidents or suspicious activity. To manage our business operations, including maintaining accurate records, managing debt and collections, carrying out internal audits and quality control, and maintaining appropriate insurance. To comply with legal and regulatory requirements, including responding to legitimate requests from law enforcement or regulatory authorities, and maintaining records necessary for tax and accounting purposes. To send you service-related information and, where permitted, relevant information about products or services that may be of interest to you. You can opt out of marketing communications at any time.
Data retention and storage
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. This means that we will generally keep customer and contract records for the duration of your agreement with us and for a period afterwards to address any queries, disputes, or legal claims, and to comply with statutory retention periods.
CCTV and access logs are retained for shorter periods unless they are required for the investigation of an incident, in which case they may be kept for as long as reasonably necessary in connection with that matter. When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe manner.
Use of data processors and third parties
In some cases we use carefully selected third party service providers, acting as data processors, to help deliver our services and manage our operations. These may include providers of payment processing, accounting and billing systems, secure data storage, customer management tools, security services, and professional advisers.
Where we use processors, they are only permitted to process personal data on our documented instructions and must apply appropriate technical and organisational measures to protect that data. They are not allowed to use your personal data for their own independent purposes. We may also share personal data with third parties acting as independent controllers where this is necessary, for example with law enforcement or regulatory bodies where required by law, with professional advisers such as lawyers or insurers in connection with legal claims, or with financial institutions in relation to payments and fraud prevention.
International transfers
Where personal data is processed or stored outside the United Kingdom or your local jurisdiction, we will ensure that appropriate safeguards are in place, such as using locations deemed to provide an adequate level of protection or putting in place standard data protection clauses or equivalent safeguards required by law. We will take steps to ensure that your rights and protections are maintained when your data is transferred internationally.
How we protect your data
We take appropriate technical and organisational measures to safeguard personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include secure access controls, restricted access to systems and records, encryption or pseudonymisation where appropriate, staff training on data protection, and regular review of our security procedures. While we cannot guarantee absolute security, we work to ensure that any personal data we process is protected to a level that is appropriate to the risks involved.
Your data protection rights
Data protection law gives you a number of rights in relation to your personal data, subject to certain conditions and exceptions. These include:
The right of access, which allows you to request confirmation of whether we process your personal data and to obtain a copy of that data along with certain information about how we use it. The right to rectification, which allows you to request correction of inaccurate or incomplete personal data. The right to erasure, in certain circumstances, which allows you to request that we delete your personal data where there is no longer a lawful basis for us to keep it. The right to restrict processing, which allows you to request that we limit the way we use your data in certain situations. The right to data portability, which allows you to receive certain personal data in a structured, commonly used and machine readable format and, where technically feasible, to have it transmitted to another controller. The right to object, which allows you to object to certain types of processing, including direct marketing and processing based on legitimate interests, in which case we will stop processing unless we have compelling legitimate grounds. Where we rely on consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
If you wish to exercise any of these rights, or have questions about how we handle your data, you can contact us using our usual contact methods.
Complaints and further information
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Contact details for supervisory authorities are publicly available from official government or regulator websites.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our operations, or applicable data protection laws. When we make material changes, we will take appropriate steps to bring the updated policy to your attention, for example by updating the version available at our premises or through our online channels. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process personal data for all Storage Shacklewell customers in our area.
