Storage Wembley Park Privacy Policy
This Privacy Policy explains how Storage Wembley Park collects, uses, stores, and shares personal data about customers and prospective customers. It applies to all Storage Wembley Park customers and users of our storage services in the Wembley Park area. We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act and to processing your personal data lawfully, fairly, and transparently.
Who This Policy Applies To
This Privacy Policy applies to all individuals who enquire about, use, or have used storage services provided by Storage Wembley Park in the Wembley Park area. This includes personal customers, business customers, guarantors, payers, and any authorised persons you nominate to access your unit or account information.
Types of Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identification and contact details such as full name, postal address, billing address, date of birth, and identification document details where required for verification purposes.
Contact details such as email address and other contact information you choose to provide so that we can communicate with you about your enquiries, bookings, and contracts.
Contract and account information such as storage unit number, contract start and end dates, rental charges, payment status, invoices, and communication records relating to your account.
Payment and billing information such as details of the method you use to pay us and transaction history. We do not store full bank card details when payments are processed by secure third party payment providers.
Usage information such as access logs, unit entry and exit times, and records of your interactions with our customer service team.
Security and CCTV information including video images captured by CCTV systems on or around our premises, which are used for security, crime prevention, and health and safety purposes.
Technical data such as IP address, browser type, and basic device information where you access our online services. This may be collected for security, troubleshooting, and performance monitoring.
How We Collect Personal Data
We collect personal data directly from you when you make an enquiry, request a quote, visit our premises, sign a storage agreement, make a payment, or contact us by any means. We may also receive data from third parties, for example when a business provides contact details for its authorised users, or from payment service providers who confirm that a transaction has been completed.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the circumstances, the lawful basis may be:
Contractual necessity where processing is required to take steps at your request before entering into a contract, or to perform a contract we have with you, such as managing your storage agreement, taking payments, and providing access to your unit.
Legal obligation where we must process certain information to comply with legal or regulatory requirements, such as tax, accounting, and health and safety obligations, or where we are required to assist law enforcement authorities.
Legitimate interests where we have a legitimate business interest that is not overridden by your interests or fundamental rights and freedoms. These interests may include maintaining site security and safety, preventing and detecting crime, managing our business operations, recovering debts, and improving our services.
Consent where you have given clear, informed consent for a specific purpose, such as receiving certain types of marketing communications. You can withdraw your consent at any time.
How We Use Your Personal Data
We use personal data for the following main purposes:
To provide storage services including setting up and managing your account, allocating storage units, processing payments, and providing customer service support.
To manage our relationship with you including responding to your enquiries, sending information about your booking or contract, handling complaints, and notifying you about changes to our services or terms.
To ensure security and safety including verifying your identity where appropriate, maintaining secure access to our facilities, operating CCTV, and monitoring access logs.
To manage our business including financial reporting, audits, accounting and billing processes, debt collection activities, and internal management information.
To comply with law including retaining certain records for tax, regulatory, and law enforcement purposes, and responding to valid information requests from public authorities.
To send you relevant information about our services where permitted by law. You can opt out of direct marketing at any time.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. In determining appropriate retention periods, we consider the nature and sensitivity of the data, potential risks from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.
In general, core contract and billing records will be retained for a minimum period required by law after your contract ends. CCTV recordings are usually retained for a shorter period, unless they are needed for the investigation of an incident or to establish or defend legal claims, in which case they may be kept for longer. When personal data is no longer required, it will be securely deleted or anonymised.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy and where there is a lawful basis to do so.
Service providers acting as data processors who provide services such as payment processing, IT hosting and maintenance, customer relationship management tools, email and communication platforms, security and access control systems, and professional advisers such as accountants or auditors. These processors are required to process personal data only on our instructions and to protect it appropriately.
Law enforcement, regulators, and other authorities where we are legally required or permitted to do so, or where such disclosure is necessary to protect our rights, property, or the safety of our customers or others.
Debt collection agencies and legal representatives where necessary to recover unpaid charges or manage claims.
We do not sell your personal data. If any data is transferred outside the United Kingdom or European Economic Area, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal protections.
Security of Your Personal Data
We take suitable technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures may include access controls, encryption or pseudonymisation where appropriate, secure storage, staff training, and regular review of our security procedures. While no system is completely secure, we take reasonable steps to reduce the risk of security incidents and to respond appropriately should an incident occur.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
The right of access you can request confirmation of whether we process your personal data and, if so, obtain a copy along with information about how it is used.
The right to rectification you can ask us to correct or complete personal data that is inaccurate or incomplete.
The right to erasure you can request that we delete personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and there is no legal reason for us to keep it.
The right to restrict processing you can ask us to restrict the use of your data in certain situations, such as while we are considering an objection raised by you.
The right to data portability you can request that we provide certain data to you or another organisation in a structured, commonly used, and machine readable format, where processing is based on consent or contract and carried out by automated means.
The right to object you can object to processing based on our legitimate interests and to direct marketing at any time.
The right to withdraw consent where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how your personal data is being handled. In the United Kingdom, this is the Information Commissioners Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. When we make significant changes, we will take reasonable steps to bring the updated policy to your attention. The latest version will always apply to the processing of your personal data.
