Storage Cranford Privacy Policy
This Privacy Policy explains how Storage Cranford collects, uses, stores and protects personal data relating to our self-storage and associated services. It applies to all Storage Cranford customers and prospective customers in the surrounding area, as well as visitors to our premises and individuals who contact us in connection with our services.
Storage Cranford is committed to processing personal data in accordance with the UK General Data Protection Regulation and any applicable data protection laws. This Privacy Policy describes the categories of data we process, the purposes and lawful bases for processing, how long we keep data, with whom it is shared, and the rights you have in relation to your personal data.
Data Controller
For the purposes of data protection law, Storage Cranford is the data controller in respect of the personal data we collect and use in connection with our storage services and related activities.
Categories of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, title, date of birth, and identification document details where required for verification or fraud prevention purposes.
Contact details including residential address, correspondence address, and contact information that you provide to us so that we can communicate with you about your storage agreement and related services.
Account and contract information such as customer reference numbers, details of your storage unit or units, contract start and end dates, payment history, and communications relating to your contract and any enquiries or complaints.
Payment and billing information including billing address and limited payment details as necessary to process your payments and maintain financial records. Card details are processed only via secure payment providers and are not stored by Storage Cranford beyond what is required for transaction records.
Usage and interaction data relating to your use of our services, such as access logs for storage facilities, key fob or access code usage where applicable, and records of telephone or in-person enquiries relevant to your contract.
Security and CCTV data including images captured by closed circuit television systems installed at our sites for security, safety and crime prevention purposes, as well as incident reports and related records where an event occurs on our premises.
Marketing preferences and communication history such as your stated preferences about receiving service updates or marketing messages, and records of communications you have with us regarding those preferences.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are as follows.
To provide storage services and manage your contract. We use your identification, contact, and account information to set up and manage your customer account, administer your storage agreement, take payment, handle renewals, and respond to your enquiries. The lawful basis is the performance of a contract or taking steps at your request before entering into a contract.
To comply with legal and regulatory obligations. We may process your data to comply with record keeping, tax, accounting, and law enforcement requirements, or to respond to lawful requests from public authorities. The lawful basis is compliance with legal obligations to which we are subject.
For security, safety and loss prevention. We use CCTV images, access logs and related information to protect our premises, customers, staff, and property, and to prevent, detect and investigate crime, fraud or unauthorised access. The lawful basis is our legitimate interests in maintaining a safe and secure environment, balanced against your rights and freedoms.
For customer service and dispute resolution. We may process your personal data to handle queries, complaints, or disputes, to respond to feedback, and to manage claims or legal proceedings. The lawful basis is our legitimate interests in managing our business, improving customer service, and defending legal rights.
For marketing and service communications. We may use your contact and preference data to send you information about our services, offers, and updates relevant to Storage Cranford. Where required by law, we will obtain your consent before sending marketing communications. In other cases we rely on our legitimate interests in promoting our services, and you may opt out at any time.
For business planning and management. We may use aggregated or pseudonymised data derived from your personal data for internal reporting, service improvement, and planning. The lawful basis is our legitimate interests in operating and improving our business while using the minimum personal data necessary.
Data Retention
We keep personal data only for as long as reasonably necessary to fulfil the purposes set out in this Privacy Policy and to meet our legal, regulatory, tax, accounting or reporting requirements. The specific retention period depends on the nature of the information and the context in which it is processed.
Customer contract data, including identification, contact, and account information, is typically retained for a defined number of years after your contract ends to enable us to respond to queries, address potential disputes, and comply with legal record keeping obligations.
Payment and billing information is held for the period required by tax and accounting legislation, after which it is securely deleted or anonymised.
CCTV recordings are kept for a limited period, normally only as long as is necessary for security and incident investigation, unless an incident requires us to retain particular footage for a longer period in connection with a claim or law enforcement investigation.
Marketing preference data is retained while you remain a customer or until you withdraw your consent or object to processing, after which we maintain only a minimal record of your preference to ensure it is respected.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged under written contracts that require them to process your data only in accordance with our instructions, to implement appropriate security measures, and to maintain confidentiality.
Categories of processors may include payment processing providers that handle transactions on our behalf, information technology and cloud service providers that host or support our systems, security service providers who help operate and maintain CCTV and access control systems, and professional advisers such as accountants or legal advisers who assist us with compliance and business management.
We may also share personal data with third parties acting as independent controllers where required by law or necessary for our legitimate interests. This may include law enforcement agencies, regulators, courts, or other public authorities in connection with investigations, legal proceedings, or compliance obligations, and insurance providers in relation to claims or incidents occurring at our premises.
We do not sell your personal data to third parties. Where data is transferred outside the United Kingdom or European Economic Area, we will ensure that an appropriate level of protection is in place through mechanisms permitted by data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data held by Storage Cranford. These rights are subject to certain conditions and legal exceptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request that we correct or complete personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, such as while we verify the accuracy of the data or consider an objection you have raised.
Right to object. You have the right to object to processing that is based on our legitimate interests, including profiling on that basis. We will stop processing unless we can demonstrate compelling legitimate grounds. You also have an absolute right to object at any time to the processing of your personal data for direct marketing purposes.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine readable format, and to have it transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business operations, or legal obligations. Any updated version will apply to all ongoing and new interactions with Storage Cranford from the date it is made available.
You should review this Privacy Policy periodically to stay informed about how we handle your personal data and your rights in relation to that data.
