Storage Bickley Privacy Policy
This Privacy Policy explains how Storage Bickley collects, uses, stores, and protects personal data relating to our customers and prospective customers. It applies to all Storage Bickley customers in our service area and to anyone who contacts us to enquire about our services.
Who this policy applies to
This Privacy Policy applies to individual customers, business customers where personal data is involved, prospective customers who make enquiries, former customers whose information we retain for a limited time, and visitors to our premises in the Storage Bickley service area where personal data is processed.
Types of personal data we collect
We may collect and process the following categories of personal data when you interact with Storage Bickley, enter into a storage contract, visit our premises, or use our services:
Identity and contact details, such as your name, title, postal address, billing address, and any other contact details you choose to provide. Contract and account information, such as unit numbers, contract dates, payment status, rental history, and correspondence relating to your storage agreement. Payment and transaction information, such as payment amounts, dates, methods of payment, and relevant billing details. We do not store full card details; these are processed securely by our payment processors. Communication data, such as enquiries, complaints, feedback, and any messages or notes recorded when you contact us in person, by phone, or in writing. Security and access data, such as CCTV footage on and around our premises, access logs, gate entry records, and information relating to the security of our facilities. Technical and usage information, where applicable, such as basic technical information collected through our website or online tools, including IP address, device information, and general usage data.
How we collect your data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment to Storage Bickley, visit our premises, or communicate with us. We may also collect data automatically through security systems, such as CCTV and access control records, and technical systems associated with our site or online tools where these are in use.
Lawful basis for processing
Storage Bickley processes personal data only where we have a lawful basis under the UK General Data Protection Regulation and related data protection laws. The main lawful bases we rely on are:
Contract: We process personal data where it is necessary to enter into and perform a storage contract with you, including administration, billing, communication about your unit, and managing your account. Legal obligation: We process personal data where we are required to do so by law, such as for tax and accounting obligations, fraud prevention, responding to requests from law enforcement or regulatory authorities where we are legally obliged to comply, and maintaining statutory records. Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes securing our premises, monitoring access and use of storage units, improving our services, handling enquiries and complaints, managing business operations, and protecting our property and that of our customers. Consent: In some limited cases, we may rely on your consent to process personal data, such as certain types of optional marketing. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
Storage Bickley uses your personal data to set up and manage your storage agreement, receive and process payments, administer billing and account queries, and contact you regarding your unit, payments, contract renewals, or important changes to our terms or services. We also use it to provide customer service and respond to enquiries, manage the safety and security of our premises, staff, customers, and stored goods, maintain and improve our services and facilities, carry out internal reporting, administration, and record-keeping, meet legal, regulatory, and compliance obligations, and, where permitted, send you relevant information about Storage Bickley services that may be of interest.
Data sharing and processors
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These processors only process your data in accordance with our instructions and for the purposes described in this Privacy Policy. Categories of processors and recipients may include payment processing providers that handle card and electronic payments, IT and systems support providers that assist with operation and maintenance of our systems, secure document storage or shredding providers, professional advisers such as accountants and legal advisers where necessary, and security and maintenance contractors involved in the security, upkeep, and management of our premises.
We may also share personal data with law enforcement or other authorities where required by law or where it is necessary to protect the rights, property, or safety of Storage Bickley, our customers, or others.
International transfers
Where we use service providers that are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data receives an adequate level of protection. These measures may include using contracts based on approved standard contractual clauses or relying on decisions confirming that the country provides an adequate level of data protection.
Data retention
Storage Bickley keeps personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
In general, we retain customer contract and billing records for a period required by applicable tax and accounting laws from the end of the relevant financial year. Security and CCTV footage is typically retained for a limited period, only long enough to investigate incidents, ensure site security, or meet legal requirements, after which it is securely deleted or overwritten unless a longer retention period is necessary in connection with a specific investigation or legal claim. Enquiry and communication records are retained while we deal with your enquiry and for a reasonable period afterwards, particularly where they relate to a contract, complaint, or potential legal claim.
When the applicable retention period expires, we either securely delete or anonymise your personal data so that it can no longer be associated with you.
How we protect your data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures include physical security controls at our premises, restricted access to personal data based on job role and need to know, security measures relating to our IT and information systems, contractual obligations for processors handling data on our behalf, and regular monitoring of our processes and controls.
Your data protection rights
Under data protection laws, including the UK General Data Protection Regulation, you have a number of rights in relation to the personal data that we hold about you. These include:
The right of access: You can request a copy of the personal data we hold about you and information about how we process it. The right to rectification: You can request that we correct inaccurate or incomplete personal data. The right to erasure: In some circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing. The right to restriction of processing: You can ask us to restrict the processing of your personal data in certain situations, for example while we are checking its accuracy or considering an objection. The right to object: You can object to processing based on legitimate interests in certain circumstances, and you have an absolute right to object to direct marketing. The right to data portability: In some cases, you can request that certain personal data be provided in a structured, commonly used format, or transferred to another organisation where this is technically feasible and where processing is based on consent or contract.
These rights are subject to conditions and exemptions under applicable law. If you exercise these rights, we will respond in accordance with legal requirements. We may need to verify your identity before acting on your request.
Complaints and contact
If you are concerned about how Storage Bickley handles your personal data, you can raise your concerns with us so that we can try to resolve the issue. You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom, this is the Information Commissioners Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any updates will take effect from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect and use your personal data.
