Storage Chase Cross Privacy Policy
This Privacy Policy explains how Storage Chase Cross collects, uses, stores, and protects your personal data. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Chase Cross customers in the local area, including current, former, and prospective customers who make enquiries about our services.
Who We Are
Storage Chase Cross is a storage service provider offering storage units and related services to customers in the surrounding area. For the purposes of data protection law, Storage Chase Cross is the data controller in respect of the personal data we collect and process about you.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details, such as your name, postal address, billing address, and contact details.
Account and contract information, such as customer account numbers, storage unit numbers, contract start and end dates, details of services requested, and any notes relating to your account.
Payment and transaction information, such as payment method details, records of payments made, invoices issued, and information required for fraud prevention and anti money laundering checks where applicable.
Communications data, such as records of correspondence with you by post, online forms, or in person at our site, including queries, complaints, and feedback.
Security and access data, such as access logs, key fob or code usage, CCTV footage on and around our premises, and incident reports relating to the safety and security of you, our staff, and our property.
Technical and usage data, such as information about how you use our services and facilities, and information you choose to provide to us when you complete any forms or respond to surveys.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign a storage agreement, make a payment, or contact us with a question or complaint. We may also collect data through our security systems when you visit our premises.
In some cases, we may receive personal data about you from third parties, for example from payment service providers confirming a payment, or from law enforcement and regulatory bodies where this is lawfully required.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the circumstances, this may include:
Performance of a contract. We process your personal data to take steps at your request before entering into a contract and to perform our contract with you, including managing your storage account, processing payments, providing access to your storage unit, and handling customer service queries.
Compliance with legal obligations. We process certain data to meet our legal and regulatory obligations, for example in relation to tax and accounting rules, fraud prevention, health and safety requirements, and responding to requests from law enforcement or regulatory authorities.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests, provided that our interests are not overridden by your rights and freedoms. These interests include operating and securing our premises, maintaining accurate records, improving our services, preventing and investigating misuse of our facilities, and defending or establishing legal claims.
Consent. In limited situations, we may rely on your consent, for example where you choose to take part in an optional survey or specific marketing communications. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before your withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To manage enquiries, provide quotes, and help you choose appropriate storage options.
To set up, manage, and administer your storage contract and customer account.
To process payments, issue invoices, and manage any debt collection where necessary.
To provide access to our premises and storage units and to manage security, including through controlled access systems and CCTV monitoring.
To respond to your queries, requests, and complaints, and to provide customer support.
To maintain accurate business records, including account history and communication logs.
To protect our business, staff, and customers, including preventing and investigating misuse, damage, theft, or unlawful activity on our premises.
To comply with legal, regulatory, and administrative requirements.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where this is necessary for the purposes set out in this Privacy Policy or where we are legally required to do so. These third parties may include:
Payment service providers and banks that process payments on our behalf.
IT and system support providers that host, develop, or maintain our systems and databases.
Security service providers that support our access control or CCTV systems.
Professional advisers, such as accountants, auditors, or legal advisers, where needed for business management or legal purposes.
Debt recovery agencies, where this is necessary for the collection of unpaid fees.
Law enforcement agencies, regulators, courts, and other public authorities where we are required to share data under law or where sharing is necessary for the prevention or detection of crime or the protection of rights and safety.
Where third parties process personal data on our behalf, we ensure that they act as data processors under written contracts that require them to keep your data secure, use it only in accordance with our instructions, and comply with data protection laws.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations. The specific retention period will depend on the type of data and the nature of our relationship with you.
In general, we retain core account and contract details for a period after your contract ends to deal with any queries, disputes, or legal claims and to comply with tax and accounting rules. CCTV footage and access records are retained for shorter periods, unless a longer retention period is required in connection with an incident, investigation, or legal claim.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to you.
International Transfers
Our core storage and customer management systems are located within the United Kingdom or the European Economic Area. If in future we transfer personal data to service providers located outside these areas, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law, such as using standard contractual clauses or equivalent protections.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include controlled access to our premises and systems, staff training, and secure handling of physical and electronic records. While we take reasonable steps to secure your data, no system can be guaranteed as completely secure.
Your Data Protection Rights
You have several rights in relation to your personal data under data protection law. Subject to certain conditions and exceptions, these include:
Right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of that data.
Right to rectification. You have the right to ask us to correct or complete personal data that you believe is inaccurate or incomplete.
Right to erasure. You may ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You may request that we restrict the processing of your personal data in certain situations, such as while we check the accuracy of the data or consider an objection you have raised.
Right to object. You may object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or unless processing is required for legal claims.
Right to data portability. In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine readable format and to transmit that data to another controller.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw it.
Complaints
If you have concerns about how we handle your personal data, you can contact us to raise your concerns and we will do our best to resolve them. You also have the right to lodge a complaint with the relevant supervisory authority for data protection if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. When we make changes, we will update the date of the latest version and make the revised policy available to you. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use your personal data.
