Storage Rush Green Privacy Policy
This Privacy Policy explains how Storage Rush Green collects, uses, stores, and protects personal data relating to customers and prospective customers in our local service area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our self-storage services, contacting us, or providing your personal data in any way, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Rush Green customers and prospective customers in our service area, including individuals, businesses, and any authorised users of our storage units and related services. It covers all personal data processed by us in connection with enquiries, bookings, contracts, access to our premises, and payment for our services.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your full name, postal address, billing address, date of birth, and any identification numbers you provide for verification purposes.
Contact information, such as your email address and any other contact details you provide to allow us to communicate with you.
Account and contract information, such as your customer reference number, storage unit number, contract start and end dates, details of services requested, and any communications relating to your contract.
Payment and transaction information, such as the method of payment, recurring payment authorisation, billing history, and records of transactions for our services. We do not store full card details when processed through secure payment providers.
Access and security data, such as key or access code records, access logs for our premises, CCTV recordings, and records of any security incidents on site.
Communication records, such as emails, written correspondence, and notes of telephone calls or conversations relating to enquiries, bookings, complaints, and customer support.
Marketing preferences, such as your choices on receiving marketing communications and information about our services and offers.
How We Collect Your Personal Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a contract, access our premises, make a payment, or contact us for any reason.
We may also collect personal data from third parties where this is necessary and lawful, for example from payment providers, credit reference agencies, or law enforcement bodies in accordance with applicable law.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, and handling payments.
Legal obligation: We process personal data where it is necessary for compliance with our legal obligations, such as tax and accounting requirements, fraud prevention, and responding to lawful requests from authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, improving our services, handling customer queries, and maintaining business records.
Consent: In some circumstances, we may rely on your consent to process your personal data, for example, for certain types of marketing communications. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to your enquiries, provide quotes, and manage bookings for storage units and related services.
To set up and manage your customer account, including verifying your identity, administering contracts, and providing customer support.
To process payments, manage invoices, and maintain accurate financial records.
To maintain the safety and security of our premises, including managing access control systems, monitoring CCTV, and investigating any security incidents or misuse of our facilities.
To communicate with you about your account, contract changes, service updates, and important information regarding your use of our storage services.
To send you marketing communications about our services, promotions, or offers when permitted by law or where you have given your consent, and to manage your marketing preferences.
To comply with legal and regulatory obligations, respond to requests from public authorities, and exercise or defend legal claims.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and regulations.
Customer account and contract data are generally retained for the duration of your contract and for a period after termination to comply with legal obligations and handle any queries or disputes.
Financial and transaction records are retained in accordance with tax and accounting requirements.
CCTV recordings and access logs are kept for a limited period necessary to ensure security and to investigate incidents, unless a longer retention period is required in connection with an investigation or legal proceedings.
Marketing data is retained while you remain an active customer or have not withdrawn your consent or objected to marketing communications, subject to periodic review.
Data Processors and Third Parties
We may engage carefully selected third-party service providers to act as data processors on our behalf. These processors may provide services such as payment processing, secure data storage, IT support, customer management systems, marketing support, and security monitoring.
These service providers are only permitted to process personal data on our instructions and are required to implement appropriate technical and organisational measures to protect your data. They are not allowed to use your personal data for their own purposes.
We may also share personal data with other third parties in limited circumstances, such as professional advisers, insurers, law enforcement agencies, or regulatory bodies, where required by law or necessary to protect our rights, property, or the safety of our customers and staff.
We do not sell your personal data to third parties.
International Transfers
Where we transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data, such as using standard contractual clauses or transferring to countries that provide an adequate level of data protection under applicable law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions.
Right of access: You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
Right to rectification: You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.
Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You have the right to request that we restrict processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or you have objected to processing.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to request that we provide your personal data in a structured, commonly used, machine-readable format or transmit it to another controller where technically feasible.
Right to object: You have the right to object to processing of your personal data where it is based on legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds to continue. You always have the right to object to direct marketing.
Rights in relation to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, unless specific conditions apply.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have any questions about how we handle your personal data, you can contact us using the contact details provided on our website or in your contract documents.
You also have the right to lodge a complaint with the UK Information Commissioners Office if you believe that your data protection rights have been infringed. Further information about how to do this is available from the Information Commissioners Office.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include physical security at our premises, access controls, staff training, and the use of secure systems and practices when working with personal data.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. The most current version will always be made available to you. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
