Privacy Policy - Bankside Storage

Bankside Storage is committed to protecting the privacy and personal data of all customers in area. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018. It applies to all Bankside Storage customers in area, including prospective customers, current customers, visitors, and individuals who interact with our services in any way.

By using our services, you acknowledge that we process personal data as described in this policy. We aim to be transparent, fair, and lawful in everything we do, and we only collect and use information where we have a valid reason to do so.

1. Data We Collect

We may collect and process a range of personal data depending on how you interact with us. This may include:

Identity information such as your name, date of birth, and identification details.
Contact information such as your address, email address, and telephone number.
Account and contract information such as storage unit details, rental dates, payment status, and correspondence relating to your agreement.
Financial information such as payment card details, billing records, and transaction history.
Access and security information such as entry logs, CCTV recordings, and records of site access.
Communication records such as emails, phone calls, complaint details, and support requests.
Technical information such as device identifiers, IP address, and basic usage data where applicable.

We do not intentionally collect special category data unless it is necessary and permitted by law. If such data is ever provided to us, we will handle it with extra care and only where there is a lawful basis to do so.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide storage services and manage your account.
To verify identity and prevent fraud.
To process payments and manage billing.
To communicate with you about your contract, service updates, or operational matters.
To maintain safety and security on our premises.
To comply with legal, regulatory, and tax obligations.
To manage complaints, disputes, and legal claims.
To improve our services and ensure effective administration.

We only use personal data when it is relevant, necessary, and proportionate to the purpose for which it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. We rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up your storage agreement, managing payments, and providing the services you request.

Legal Obligation

We may process personal data to comply with laws and regulations, including accounting, tax, fraud prevention, health and safety, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. These interests may include securing our premises, protecting property, managing business operations, and preventing misuse of our services.

Consent

In limited circumstances, we may rely on your consent, for example if we need permission for a specific optional activity. Where consent is used, you may withdraw it at any time, but this will not affect the lawfulness of processing carried out before withdrawal.

We do not process your personal data for purposes that are incompatible with those stated above without notifying you and, where required, obtaining a further lawful basis.

4. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, security, and reporting requirements. Retention periods vary depending on the type of information and the reason it is held.

Contract and account records may be kept for the duration of the agreement and for a period afterwards to manage queries, disputes, and legal claims.
Financial and billing records are retained in line with tax and accounting obligations.
Security records such as access logs and CCTV footage are retained for a limited period unless required longer for investigation or legal reasons.
Correspondence and complaint records may be kept as long as necessary to resolve issues and demonstrate compliance.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. We do not keep personal data indefinitely.

5. Sharing Data with Processors and Other Recipients

We may share personal data with trusted third parties where this is necessary for the delivery of our services or where required by law. These may include:

Payment processors who handle card or transaction processing.
IT and cloud service providers who support data storage, system maintenance, and communications.
Security providers who assist with site monitoring, access control, or CCTV systems.
Professional advisers such as accountants, auditors, insurers, or legal advisers.
Regulatory, law enforcement, or government bodies where disclosure is required by law or necessary to protect rights and safety.

Where we use processors, they act only on our instructions and are contractually required to protect personal data, keep it confidential, and comply with data protection law. We ensure appropriate safeguards are in place before sharing any personal data.

We do not sell your personal data.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, restricted permissions, staff training, and regular review of our security practices.

While no system can be guaranteed completely secure, we work to maintain a level of protection that is appropriate to the nature of the data we process. If a personal data breach occurs, we will respond in line with legal requirements and take steps to limit the impact.

7. Your Rights

As a data subject, you have rights under data protection law. Subject to conditions and exceptions, these may include:

Right of access – to request a copy of your personal data.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of personal data in certain circumstances.
Right to restriction – to ask us to limit processing in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain information in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

8. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where necessary and lawful in connection with a customer agreement or legal obligation. If we become aware that we have collected data inappropriately, we will take reasonable steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, guidance, or our business practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

In summary, Bankside Storage processes personal data fairly, lawfully, and transparently, with clear limits on collection, retention, and disclosure. We respect your privacy rights and are committed to handling your information responsibly for all Bankside Storage customers in area.