Storage Turnpike Lane Privacy Policy
This Privacy Policy explains how Storage Turnpike Lane collects, uses, stores, and protects personal data relating to our customers. It applies to all Storage Turnpike Lane customers in the surrounding area, including individuals and businesses who use or enquire about our storage services, either in person, by post, by telephone, or through any online or digital channels we operate.
We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy sets out the categories of personal data we process, the lawful bases we rely on, how long we keep personal data, who we share it with, and the rights you have in relation to your information.
Data Controller
Storage Turnpike Lane is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We collect and process a range of personal data about customers, prospective customers, and where relevant, authorised users or representatives. The information we may collect includes:
Identification details such as full name, title, date of birth, and proof of identity information shown on official documents such as passports or driving licences, where required for security and verification purposes.
Contact details including residential address, billing address, and, where provided, email address and postal address used for correspondence and invoicing.
Account and contract information including storage unit numbers, contract start and end dates, services purchased, payment history, invoices, and related correspondence.
Payment-related information such as the method of payment used and records of transactions. We do not store full card details where payment is processed through a secure payment provider.
Security and access information such as access codes, key or fob numbers, and, where in use, CCTV images captured on our premises for security, crime prevention, and safety purposes.
Communication records including enquiry details, complaints, feedback, and any other correspondence you have with us in writing, by telephone, or through online forms.
In some cases we may collect information about authorised persons or emergency contacts you nominate, such as their name and contact details, so that we can manage your account and access rights appropriately.
How We Collect Personal Data
We collect personal data directly from you when you enquire about our services, make a booking, enter into a storage agreement, make a payment, contact us with a query or complaint, or interact with our staff or systems on site.
We may also obtain personal data from other sources where lawful, for example from publicly available records used for identity verification or credit checking, or from persons you have authorised to act on your behalf.
Lawful Bases for Processing
We only process personal data when we have a lawful basis under data protection law. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, including to set up and manage your storage agreement, handle payments, administer your account, and provide customer support.
Legal obligation: We process personal data where necessary to comply with our legal and regulatory obligations, such as record-keeping, accounting, fraud prevention, crime prevention, and responding to lawful requests from law enforcement or regulatory authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where your interests or fundamental rights do not override those interests. This includes securing our premises with CCTV, protecting our property and the property stored on site, monitoring access, managing and improving our services, recovering debts, and handling queries or complaints.
Consent: In limited situations, we may rely on your consent, for example for certain types of optional communication that are not necessary for your contract or our legitimate interests. Where we rely on consent, you can withdraw it at any time by contacting us.
How We Use Personal Data
We use personal data for the following purposes:
To provide storage and related services, including setting up and managing your storage unit, processing bookings, managing renewals, and organising access to the premises.
To verify identity and carry out necessary checks for security, anti-fraud, and risk management purposes, where appropriate.
To issue invoices, collect payments, manage any arrears, and maintain accurate financial records.
To operate and monitor security measures such as CCTV and access controls, in order to safeguard customers, staff, and property and to prevent and detect crime.
To communicate with you about your contract, including sending notices, updates, and service information relating to your use of our facilities.
To respond to enquiries, handle complaints, and manage our relationship with you as a customer.
To comply with legal and regulatory obligations, including responding to requests from public authorities where we are legally required to do so.
To analyse how our services are used and improve our operations, safety, and customer experience, using aggregated or anonymised data wherever practicable.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected and to meet our legal and regulatory obligations.
Customer account and contract information is generally retained for a period after your contract ends, to deal with any queries, disputes, or claims and to comply with tax and accounting rules. CCTV recordings are kept for a shorter period, typically only as long as required for security monitoring, incident investigation, or law enforcement enquiries, after which they are securely overwritten or deleted.
When we no longer need personal data, we will securely delete or anonymise it so that it can no longer be linked to you.
Data Sharing and Processors
We may share your personal data with third parties where this is necessary and lawful, and subject to appropriate safeguards.
Service providers acting as data processors may process personal data on our behalf, for example providers of payment processing services, IT support and hosting, security systems such as CCTV and access control solutions, and storage or document management services. These processors are only permitted to use your personal data in accordance with our instructions and must protect it with appropriate technical and organisational measures.
We may also disclose personal data to professional advisers such as accountants, auditors, or legal advisers where this is necessary for the management of our business or to protect our legal rights.
Where required by law, we may share personal data with law enforcement agencies, regulatory bodies, or courts, for example to prevent or detect crime, fraud, or to respond to lawful requests and orders.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These may include using countries with an adequacy decision or entering into contracts that contain standard data protection clauses approved by relevant authorities.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions.
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification: You have the right to ask us to correct or complete inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while we are verifying the accuracy of data you believe is incorrect.
Right to object: You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds which override your interests, rights, and freedoms or the processing is required for legal claims.
Right to data portability: In certain situations, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine readable format and to have it transmitted to another controller where technically feasible.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdrew it.
How To Exercise Your Rights
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy, you can contact us using the contact details provided on our customer documentation or on site. We may need to verify your identity before we can respond fully to your request, particularly where the request involves access to detailed information.
We aim to respond to legitimate requests without undue delay and within the timeframes required by law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so we can seek to resolve the issue. You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in your jurisdiction.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or the way we process personal data. Any significant changes will be made available to customers, and the updated version will apply from the date it is published.
Continued use of our storage services after any update to this Privacy Policy will be taken as acceptance of the updated terms to the extent permitted by law.
