Storage Bankside Privacy Policy
This Privacy Policy explains how Storage Bankside collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It is intended to provide clear information about your rights under the UK General Data Protection Regulation and related data protection laws, and how you can exercise those rights.
This Privacy Policy applies to all Storage Bankside customers and individuals who make enquiries, request quotes, visit our premises, use our services or interact with us in the Storage Bankside area. By engaging with us, you acknowledge that you have read and understood this Privacy Policy.
Who we are and scope of this policy
Storage Bankside is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data. This Privacy Policy covers personal data that we collect directly from you, from your use of our services, and in some cases from third parties who assist us in providing our services.
We are committed to handling your personal data lawfully, fairly and transparently, and to complying with applicable data protection laws in the United Kingdom and the wider European data protection framework where relevant.
Personal data we collect
We only collect personal data that we need in order to provide and manage our storage and related services, to operate our business, and to meet our legal obligations. The categories of personal data we may collect include:
Identification and contact details, such as your full name, postal address, billing address, contact address, and other contact details you choose to provide.
Account and contract details, such as customer reference numbers, storage unit number, contract dates, agreed services, payment status, and communications related to your account.
Payment and transaction information, such as records of payments made, payment methods used, amounts due, payment history and related financial records. We do not store full payment card details where payment processors handle these directly, but we may receive limited information such as the last four digits of a card, card type and transaction confirmation.
Security and access information, such as access codes, key or fob references, vehicle registration numbers where recorded for access control purposes, and records of entry and exit from our facilities.
Communication records, such as emails, letters, forms, and notes of telephone or in-person conversations related to your enquiries, bookings, complaints or feedback.
Technical and usage data relating to our website or online services, such as IP address, device type, and usage logs, to the extent that this data identifies or can be linked to an individual.
How we collect your personal data
We collect personal data from you when you contact us to request information, obtain a quote, make a booking, sign a storage agreement, make a payment, access your storage unit, submit a query or complaint, or otherwise communicate with us. We may also collect personal data when you visit our website or use any online forms.
In some cases, we may receive personal data from third parties, such as payment processors, referral partners, or service providers involved in delivering storage and related services to you. Where this happens, we only receive the data necessary for the relevant purpose and we ensure that there is a lawful basis for this sharing.
Lawful basis for processing
We process your personal data only where we have a lawful basis to do so. Depending on the context, the lawful basis may be one or more of the following:
Contract performance. We process personal data where it is necessary to enter into, or perform, a contract with you. This includes processing required to set up an account, provide storage services, manage your contract, take payments, respond to service requests and administer your account.
Compliance with legal obligations. We process personal data where required to comply with laws and regulations, including tax, accounting, anti-fraud and health and safety obligations, and any lawful requests from authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or those of a third party, provided that your interests and fundamental rights do not override those interests. Examples include maintaining site security, preventing fraud, improving our services, managing and defending legal claims, and communicating with existing customers about service changes.
Consent. In some limited circumstances, we may rely on your explicit consent to process personal data. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use the personal data we collect for the following purposes:
To provide, manage and administer storage and related services to you, including setting up your account, providing access to your storage unit, handling queries and performing our contractual obligations.
To process payments, manage billing, send invoices and receipts, and maintain appropriate accounting records.
To maintain the safety and security of our facilities, including controlling access, monitoring activity where appropriate, and supporting the prevention and detection of crime or misuse.
To communicate with you about your account, including important information about your contract, changes to services, reminders, notices and responses to your questions or requests.
To manage our business operations, including internal reporting, service quality monitoring, staff training, and the handling of complaints or disputes.
To comply with legal and regulatory requirements, to cooperate with law enforcement or regulatory authorities where required, and to establish, exercise or defend legal claims.
Data sharing and processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to protect your personal data and to keep it confidential.
Categories of processors and third-party recipients may include:
Payment service providers and banks for the purpose of processing payments, refunds and chargebacks.
IT and system support providers who host or support our business systems, website and communication tools.
Security and facility management providers who assist with access control and the security of our premises.
Professional advisers such as accountants, auditors and legal advisers, where necessary for legitimate business and legal purposes.
We may also share personal data where required by law, regulation or legal process, or where we believe it is necessary to protect our rights, property or the safety of our customers, staff or the public.
International transfers
Where we use service providers or systems that involve transferring personal data outside the United Kingdom or the European Economic Area, we take appropriate steps to ensure that your personal data remains protected. This may include using data transfer mechanisms recognised by data protection law, such as standard contractual clauses or other appropriate safeguards.
Data retention
We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, and in line with legal, regulatory and operational requirements. In determining appropriate retention periods, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means.
Generally, we keep customer account and contract information for a period after your relationship with us ends, to comply with legal obligations, resolve disputes, enforce our agreements and maintain business records. Where personal data is no longer needed, we securely delete or anonymise it.
Your data protection rights
Under data protection law, you have certain rights in relation to the personal data we hold about you. These rights include:
Right of access. You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data and certain related information.
Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure. In some circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of data or consider an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing your data unless we have compelling legitimate grounds that override your interests or the processing is needed for legal claims.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.
How to exercise your rights and complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the usual contact methods for Storage Bankside. We may need to verify your identity before processing your request, to protect your privacy and security.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your rights have been infringed or that your personal data has been handled in a way that does not comply with data protection law. We encourage you to contact us first, so that we can try to resolve any concerns directly.
Security of your personal data
We take appropriate technical and organisational measures to protect the personal data we hold against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures are designed to provide a level of security appropriate to the risks presented by the data and the processing activities involved. However, no system can be completely secure and we cannot guarantee absolute security of information transmitted to or stored by us.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory developments, or our internal practices. When we make changes, we will revise the date of the update and, where appropriate, take steps to inform you of significant changes. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
