Storage Park Royal Privacy Policy
This Privacy Policy explains how Storage Park Royal collects, uses, stores and shares personal data about customers and prospective customers. It applies to all Storage Park Royal customers and users of our services in the Storage Park Royal area, whether you contact us online, by phone, in writing or visit our facility in person.
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Who we are and scope of this policy
Storage Park Royal is a self‑storage service provider operating in the Storage Park Royal area. In this Privacy Policy, references to we, us or our refer to the storage business that determines how and why your personal data is processed. For the purposes of data protection law, we act as the data controller in relation to the personal data described in this policy.
This Privacy Policy applies to all Storage Park Royal customers, former customers, prospective customers, visitors to our premises and individuals who interact with us in connection with our services.
Personal data we collect
We may collect and process the following categories of personal data about you, depending on how you use our services:
Identification and contact details, such as your name, postal address, billing address, contact address, date of birth, and any identification documents you provide for verification purposes.
Contact information, such as your email address and any other contact details you choose to share so we can communicate with you about your booking, account, payments and enquiries.
Account and contract information, such as customer reference numbers, storage unit details, contract start and end dates, access credentials, and any communications or notes related to your account.
Payment and billing information, such as payment method details that you provide to pay for storage services, transaction history, invoices, payment status and related financial records. Where we use third party payment processors, your card or bank details are processed on their secure systems and not stored in full by us.
Usage and access information, such as details of your use of our storage facility, access logs or codes, CCTV footage within and around our facility, and records of your interactions with our staff.
Communications and enquiry data, such as the content of emails, letters, forms, or messages you send to us and any responses we provide, including service requests, complaints and feedback.
Marketing preferences, such as your choices about whether you wish to receive information about our products, services, promotions or updates, and records of any consents you give or withdraw.
How we collect your data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, create or manage an account, make a payment, visit our facility, contact us or otherwise use our services.
We may also receive personal data about you from third parties, such as identity verification providers, payment processors, credit reference agencies where lawful, and other service providers who assist us in delivering our services.
Lawful bases for processing your data
We only process your personal data where we have a lawful basis to do so under GDPR. Depending on the context, this may include:
Contractual necessity. We process your personal data where it is necessary to enter into or perform a contract with you, including setting up your account, managing your storage agreement, taking payments, handling access to your unit and providing customer support.
Legal obligation. We may process your personal data where we are required to do so to comply with legal or regulatory obligations, such as tax, accounting, law enforcement or court requirements, and to maintain appropriate records.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. This can include ensuring the security of our facility, preventing fraud, operating CCTV for safety and asset protection, improving our services, managing business operations and maintaining accurate records.
Consent. In some cases, we rely on your consent to process your personal data, for example for certain types of direct electronic marketing or optional services. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
How we use your personal data
We may use your personal data for the following purposes:
To provide storage services to you, including creating and managing your customer account, administering your storage agreement, managing access to the facility and your unit, and communicating with you about your service.
To process payments and manage billing, including taking and recording payments, issuing invoices, dealing with arrears and recovering debts where necessary.
To respond to enquiries and provide customer support, including handling complaints, questions, feedback and service requests.
To ensure the security and safety of our customers, staff and property, including using CCTV and access control systems, monitoring facility usage and investigating incidents.
To comply with laws and regulations, including tax and accounting requirements, record keeping obligations and lawful requests from public authorities.
To manage and improve our business, including monitoring service quality, conducting internal audits, training staff, and analysing usage patterns to enhance our services.
To carry out marketing activities where permitted, including sending information about our services or promotions, subject to your marketing preferences and applicable laws.
Data retention and storage
We will retain your personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements.
In general, we keep customer account and contract information for as long as you have an active storage agreement with us and for a reasonable period afterwards to handle queries, disputes or legal claims. Financial records and invoices are typically retained for the period required under applicable tax and accounting laws. CCTV footage and access logs are retained for shorter periods, unless required for investigating specific incidents or fulfilling legal obligations.
When we no longer need your personal data for the purposes described in this Privacy Policy, we will securely delete, anonymise or destroy it in accordance with our data retention procedures.
Data processors and third party recipients
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions, under a written contract, and are required to implement appropriate technical and organisational measures to protect your data.
Types of data processors and third parties we may use include:
Payment service providers that process card or bank transactions on our behalf.
IT and cloud service providers that host or support our systems, databases, communications and data storage.
Security and maintenance providers that assist with CCTV, access control, facility management and security systems.
Professional advisers such as accountants, auditors or legal advisers where reasonably necessary for the management of our business.
Debt recovery agencies or similar service providers for the purpose of recovering outstanding amounts owed to us.
We may also share personal data where required by law or in connection with legal proceedings, for example with law enforcement authorities, courts or regulatory bodies. In any such case, we will only disclose the minimum information necessary.
International transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is stored on servers in other countries, we will ensure that appropriate safeguards are in place to protect your personal data in line with data protection laws. This may include using countries with an adequacy decision, standard contractual clauses or equivalent measures.
Your data protection rights
Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal data we hold about you, along with certain information about how it is used.
Right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. You have the right to request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You have the right to ask us to restrict the processing of your personal data in certain situations, such as while we verify the accuracy of your data or consider an objection you have raised.
Right to data portability. You have the right, in certain circumstances, to receive the personal data you have provided to us in a structured, commonly used and machine readable format, and to have that data transmitted to another controller where technically feasible.
Right to object. You have the right to object at any time to processing of your personal data based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds to continue or need to do so for legal claims. You also have the right to object at any time to the use of your data for direct marketing.
Right not to be subject to automated decision making. You have the right not to be subject to decisions based solely on automated processing, including profiling, which significantly affect you, unless certain conditions are met.
You can exercise your rights by contacting us using the contact methods you normally use for dealing with Storage Park Royal. We may need to verify your identity before responding to certain requests to protect your privacy and security.
Marketing communications
We may use your contact details to send you information about our services, offers or promotions where we have a lawful basis to do so, for example your consent or our legitimate interests, and subject to electronic marketing rules.
You can ask us to stop sending you marketing communications at any time by following any unsubscribe instructions in our messages or by contacting us. Please note that even if you opt out of marketing, we may still send you non marketing communications related to your contract, service or account.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, secure storage, encryption, staff training and regular review of our security practices.
Updates to this Privacy Policy
We may update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
