Storage Aldwych Privacy Policy
This Privacy Policy explains how Storage Aldwych collects, uses, stores and protects personal data relating to its customers and prospective customers. It applies to all individuals who use, enquire about, or are otherwise customers of Storage Aldwych within our operating area.
Storage Aldwych is committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. We act as the data controller for the personal data described in this policy.
Personal Data We Collect
We collect and process personal data that is necessary for the provision of our storage services, to manage our relationship with you, and to meet our legal and regulatory obligations. The types of personal data we may collect include:
Identification data such as full name, title, date of birth, and a copy or details of identification documents where required for security or legal purposes.
Contact data such as residential or business address, billing address, and communication preferences.
Communication data including information you provide when you contact us in person, by post, or through online forms, as well as records of any correspondence or enquiries.
Contract and account data such as storage unit details, rental agreements, payment history, invoices, and information relating to access to your unit.
Payment and transaction data including the method of payment you use and records of payments made. Card details are processed via secure payment processors and are not stored in full by Storage Aldwych.
Security and access data such as CCTV images on or around our premises, access log data, entry codes, and information relating to security incidents.
Technical and usage data relating to your use of our website or online services, which may include IP address, device information, and basic usage statistics, where applicable and subject to cookie and privacy settings.
How We Collect Your Personal Data
We collect personal data directly from you when you:
Request a quote or further information about our services.
Enter into a storage agreement with us.
Communicate with us by any means.
Visit our premises where CCTV is in operation.
Use our website or online forms.
We may also receive personal data about you from third parties where this is lawful and necessary, for example from payment service providers confirming your transactions, or from law enforcement or regulatory bodies where required.
Lawful Basis for Processing
Storage Aldwych processes your personal data only where we have a lawful basis under the GDPR. These bases include:
Performance of a contract: We process personal data that is necessary to provide our storage services, manage your account, administer payments, and fulfil our contractual obligations to you.
Compliance with legal obligations: We process personal data to comply with laws and regulations, such as tax, accounting, health and safety, fraud prevention, and law enforcement requirements.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. These interests include securing our premises, managing our business operations, preventing and detecting crime or misuse of our services, and improving our services and customer experience.
Consent: In limited circumstances, we may rely on your consent, for example for certain forms of marketing communication where required by law. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide, administer, and manage storage services, including setting up and maintaining your account and contract.
To verify your identity where necessary for security or legal reasons.
To process payments, handle billing queries, and maintain financial records.
To communicate with you about your contract, your unit, access arrangements, and any changes to our services or terms.
To maintain security on our premises, including through CCTV monitoring and access control systems.
To handle enquiries, complaints, or disputes and to provide customer support.
To meet legal, regulatory, and compliance obligations, including responding to lawful requests from authorities.
To protect our rights, property, and the safety of our customers, staff, and the public.
Data Retention
Storage Aldwych keeps personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements.
In determining appropriate retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether those purposes can be achieved by other means, as well as applicable legal requirements.
In general, we retain customer account and contract data for a period after the end of the storage agreement to deal with any queries, disputes, or legal obligations. CCTV footage and access logs are kept for a shorter period unless required to be retained longer for the investigation of incidents or legal proceedings.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where this is necessary and lawful. These parties act as processors or, in some cases, independent controllers.
Processors that may process personal data on our behalf include:
IT and cloud service providers who host or support our systems, storage, and communications.
Payment service providers and financial institutions that process payments and assist with fraud prevention.
Security and facility service providers who support access control, CCTV systems, and site maintenance.
Professional advisers such as accountants, auditors, or legal advisers where necessary for legitimate business purposes and legal compliance.
All processors engaged by Storage Aldwych are required to process personal data only on our documented instructions, to keep it secure, and to comply with applicable data protection laws.
We may also share personal data with law enforcement agencies, courts, regulators, or other public authorities where required by law or where necessary to establish, exercise, or defend legal claims.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors or service providers, we take steps to ensure that appropriate safeguards are in place. These may include reliance on adequacy regulations, contractual clauses approved by data protection authorities, or other recognised safeguards designed to ensure that your data is protected to a standard equivalent to that in the United Kingdom.
Data Security
Storage Aldwych takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include restricting access to personal data to those employees, contractors, and processors who have a business need to know it, using secure systems and environments, and keeping our security measures under regular review. While we aim to protect your personal data, no system can be completely secure and we cannot guarantee absolute security.
Your Data Protection Rights
Under the GDPR and applicable data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions:
Right of access: You have the right to obtain confirmation as to whether we process personal data about you and to request a copy of that data.
Right to rectification: You have the right to request the correction of inaccurate personal data and to have incomplete data completed.
Right to erasure: You may have the right to request the deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected and we are not required to retain it.
Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested.
Right to data portability: In some cases, you have the right to receive personal data you provided to us in a structured, commonly used, and machine readable format and to have it transmitted to another controller, where technically feasible.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including any related profiling. We will stop processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.
Right to withdraw consent: Where we rely on consent, you have the right to withdraw that consent at any time.
Scope and Updates to This Policy
This Privacy Policy applies to all Storage Aldwych customers and prospective customers within our operating area, including visitors to our premises and users of our services.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be effective from the date of publication of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
