Storage Falconwood Privacy Policy
This Privacy Policy explains how Storage Falconwood collects, uses, stores, and protects personal data about individuals who use our storage facilities and related services. It applies to all Storage Falconwood customers within our service area, as well as prospective customers who contact us or request information about our services.
Scope of this Privacy Policy
This Privacy Policy applies to personal data that we collect and process when you enquire about, sign up for, or use storage units or associated services provided by Storage Falconwood. It also covers data collected when you visit our premises, interact with our staff, or communicate with us through any channel, including in person and by written correspondence.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data, such as your full name, date of birth, and government-issued identification details that you present for verification when entering into a contract.
Contact details, such as your home or billing address, and any other address you provide, as well as details necessary to administer your account and correspondence.
Account and contract information, such as storage unit number, contract dates, payment history, and records of communications relating to your account.
Payment and transaction data, such as payment method details you provide at the point of payment, and records of invoices, charges, and receipts. Full payment card details are not retained by us beyond what is necessary to process the transaction or comply with legal obligations.
Security and access information, such as access codes, licence plate information if recorded for security purposes, entry and exit logs, and information captured by CCTV systems on or around our premises.
Communication data, such as information contained in emails, letters, forms, or other messages you send to us, together with our responses and any related notes.
Lawful Bases for Processing Personal Data
We process your personal data only where we have a valid lawful basis under the UK General Data Protection Regulation and any applicable local legislation. Depending on the context, our lawful bases include:
Performance of a contract. We process personal data that is necessary to enter into and fulfil our storage agreements with you, including setting up your account, managing payments, providing access to your unit, and communicating with you about your contract.
Compliance with legal obligations. We may be required to process certain information to meet tax, accounting, security, or other regulatory requirements. This can include retaining records for a set period or sharing information with public authorities when legally required to do so.
Legitimate interests. We process personal data where it is necessary for our legitimate interests as a business and where those interests are not overridden by your rights and freedoms. This includes maintaining the security of our premises, preventing fraud or misuse of our facilities, managing and improving our services, and handling general business administration.
Consent. In limited circumstances, we may rely on your explicit consent, for example for optional communications not strictly necessary for our contractual relationship. Where we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To create, manage, and administer storage contracts and customer accounts.
To verify your identity and eligibility for our services.
To take and process payments and maintain financial and transactional records.
To provide customer support, handle queries, and manage complaints or disputes.
To secure and monitor access to our premises, including the use of CCTV and access control systems.
To comply with applicable laws and respond to lawful requests from public and regulatory authorities.
To protect our rights, property, and safety, and those of our customers, staff, and visitors.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting, or reporting requirements. In general:
Customer account and contract data are retained for the duration of your contract and for a reasonable period after it ends, to manage any outstanding queries or disputes and meet legal obligations.
Financial and transactional records are retained for the period required by tax and accounting laws.
Security-related data, including CCTV recordings and access logs, are kept for a limited period that is proportionate to our security needs, unless a longer retention period is required in connection with an incident, claim, or investigation.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in line with our internal policies and any applicable legal requirements.
Use of Data Processors
We may engage carefully selected third-party service providers to process personal data on our behalf. These data processors may support activities such as secure data hosting, payment processing, accounting and administration, security and access systems, and document storage.
When we use data processors, they act only on our documented instructions and are bound by contractual obligations to protect personal data, maintain confidentiality, and implement appropriate technical and organisational measures. They are not permitted to use your personal data for their own purposes.
Sharing Personal Data
We may share your personal data with:
Professional advisers, such as accountants, auditors, or legal advisers, where this is necessary to obtain professional services or manage legal rights and obligations.
Public authorities, law enforcement, or regulatory bodies, where required to comply with legal obligations or lawful requests.
Other third parties, where necessary in connection with the sale, merger, or reorganisation of our business, in which case appropriate safeguards will be applied to protect your data.
We do not sell your personal data for marketing purposes.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we take steps to ensure that an adequate level of protection is in place. This may include relying on adequacy regulations or implementing standard contractual clauses or equivalent safeguards recognised under data protection laws.
Security of Your Personal Data
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, and internal policies and training designed to ensure that personal data is handled responsibly and only by those who need it for their role.
Your Data Protection Rights
As a customer of Storage Falconwood within our service area, you have certain rights in relation to your personal data, subject to applicable law. These include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no ongoing lawful basis for retention.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. Where we process your personal data on the basis of legitimate interests, you may object to this processing on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request that certain personal data is provided to you or to another controller in a structured, commonly used, and machine-readable format.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of any processing that took place before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any significant changes will be made available at our premises or through other appropriate means. The current version will always state the date on which it last took effect.
Contact and Further Information
If you have any questions about this Privacy Policy or about how Storage Falconwood handles your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details provided on our official customer correspondence or at our premises.
