Storage Isleworth Privacy Policy
This Privacy Policy explains how Storage Isleworth collects, uses, stores, and protects personal data relating to all of our customers and prospective customers in the Isleworth area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018, together referred to in this Policy as GDPR.
By using our services, making an enquiry, or otherwise providing personal data to Storage Isleworth, you acknowledge that you have read and understood this Privacy Policy.
Scope and data controller
This Privacy Policy applies to all Storage Isleworth customers, prospective customers, and users of our storage services in the Isleworth area, including individuals, sole traders, and representatives of business customers.
Storage Isleworth is the data controller in respect of the personal data described in this Privacy Policy. As data controller, we decide how and why your personal data is used and are responsible for ensuring that such use complies with GDPR.
Personal data we collect
The personal data we collect will depend on your relationship with us and how you interact with us. We may collect and process the following categories of personal data:
Identification and contact details, such as name, postal address, billing address, and contact details.
Account and contract information, such as storage unit number, contract dates and terms, and communication preferences.
Payment and billing information, such as payment method details and transaction records. Full payment card details are processed securely by our payment service providers and are not retained by us where this is not necessary.
Access and security information, such as CCTV footage of entrances, corridors, and communal areas, gate or door access logs, and records of visits.
Communication records, such as emails, letters, or notes of telephone conversations and customer service interactions.
Technical information, such as basic device and browser information or usage data generated when you interact with any online services we may provide.
We do not intentionally collect special categories of personal data such as health data, biometric data, or information on criminal convictions, except where this is strictly necessary and lawful for a specific purpose and you choose to provide it to us.
How we collect personal data
We may collect personal data directly from you when you contact us to enquire about storage, request a quote, sign a contract, make a payment, visit our premises, or communicate with us by any channel.
We may also receive personal data from third parties, for example from payment processors who confirm the status of a payment, from comparison or referral services where you have requested contact from us, or from law enforcement authorities when we are required to cooperate with them.
Lawful basis for processing
Under GDPR we must have a lawful basis for each type of processing that we carry out. Storage Isleworth relies on the following lawful bases:
Contract. We process your personal data where this is necessary to enter into a contract with you or to perform a contract, for example to set up your storage unit, manage your account, issue invoices, or handle payments and renewals.
Legal obligation. We process personal data to comply with our legal obligations, such as record keeping, responding to requests from law enforcement, or complying with tax and accounting requirements.
Legitimate interests. We process personal data where this is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Examples include ensuring the security of our premises, preventing and detecting fraud, managing customer queries and complaints, improving our services, and maintaining accurate business records.
Consent. In some cases we rely on your consent, for example for certain types of marketing communications where this is required by law. Where we rely on consent, you may withdraw your consent at any time.
How we use your personal data
Storage Isleworth uses personal data for the following purposes:
To provide and manage storage services, including setting up your account, granting access to facilities, administering contracts, and handling moves in and out.
To process payments and manage billing, including issuing invoices, processing payments or refunds, and maintaining accounting records.
To maintain the safety and security of our premises and customers, including by using CCTV and monitoring access logs to prevent unauthorised access, damage, or theft.
To respond to enquiries and provide customer support, including handling requests for quotes, changes to your contract, and complaints.
To send service communications, such as notices about changes to your booking, access arrangements, pricing, or terms and conditions.
To conduct limited direct marketing related to our services where permitted by law, and to manage your marketing preferences.
To comply with legal and regulatory obligations, handle disputes, and establish, exercise, or defend legal claims.
Data retention
Storage Isleworth retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law. We apply the following general retention principles:
Customer account and contract data are normally retained for the duration of your contract and for a defined period after your contract ends, to deal with any queries, disputes, or legal obligations. This period will generally not exceed six years unless a longer period is required by law.
Payment and transaction records are kept for the periods required by tax and accounting legislation.
CCTV footage is retained for a limited period that is appropriate for security and investigative purposes, after which it is securely deleted or overwritten unless it must be retained longer in connection with a specific incident.
Marketing data is kept for as long as you remain subscribed or until you object to or opt out of marketing communications, after which we retain only minimal data required to respect your preference.
When retention periods expire, personal data is securely deleted, anonymised, or archived in a way that preserves your rights.
Sharing personal data and processors
We may share your personal data with third parties where this is necessary and lawful. These third parties may act as data processors on our behalf or, in some circumstances, as independent controllers.
Categories of data processors we may use include payment service providers, IT and cloud service providers, customer relationship and communication service providers, security and CCTV system providers, professional advisors such as accountants or legal advisers, and document storage or shredding providers.
Where we use data processors, they are only permitted to process personal data in accordance with our instructions and for the purposes described in this Privacy Policy. We require them to implement appropriate technical and organisational measures to protect personal data.
We may also share personal data with law enforcement authorities, regulators, courts, or other public authorities where we are legally required or permitted to do so, or where this is necessary to protect our rights, property, or the safety of our customers and staff.
We do not sell your personal data.
International transfers
Where personal data is transferred outside the United Kingdom, for example if a cloud service provider uses servers located in another country, we ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, so that your personal data remains protected in a manner consistent with GDPR requirements.
Your data protection rights
Under GDPR, you have a number of rights in relation to the personal data that we hold about you. These rights are subject to certain conditions and legal exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of that data.
Right to rectification. You have the right to ask us to correct inaccurate or incomplete personal data.
Right to erasure. You may request that we delete your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and we have no other lawful basis for processing.
Right to restriction of processing. You may ask us to restrict the processing of your personal data in specific situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests and to object at any time to the processing of your personal data for direct marketing.
Right to data portability. In some cases you may request that we provide your personal data in a structured, commonly used, and machine readable format and that we transfer it to another controller where this is technically feasible.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or if you have any questions about this Privacy Policy or how Storage Isleworth handles your personal data, you may contact us using the contact details provided on our website or in your contract documentation.
You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can seek to resolve your concerns.
Security of your personal data
Storage Isleworth takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, secure storage, staff training, and regular review of our security arrangements.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will be made available through our usual communication channels and will take effect from the date of publication.
This Privacy Policy applies to all Storage Isleworth customers and prospective customers in the Isleworth area and was last updated on the date stated at the top of this document or in the version information supplied with it.
