Storage Partmouth Park Privacy Policy
This Privacy Policy explains how Storage Partmouth Park collects, uses, stores, and protects personal data relating to existing and prospective customers. It applies to all Storage Partmouth Park customers and account holders in our operating area, including individuals and businesses using or enquiring about our storage services.
We are committed to complying with the UK General Data Protection Regulation and the EU General Data Protection Regulation where applicable, together with all relevant data protection and privacy laws. This Privacy Policy describes the categories of personal data we process, the purposes for which we process it, the lawful bases we rely on, and the rights you have in relation to your personal data.
Data Controller
Storage Partmouth Park is the controller of the personal data described in this Privacy Policy. This means we decide why and how your personal data is processed when you interact with us, including when you request information, sign a contract, access our premises, or make payments for storage services.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you use our services or contact us:
Identification and contact details such as your name, postal address, billing address, and communication preferences.
Account and contract information such as customer reference numbers, details of your storage unit, contract start and end dates, and records of correspondence or communications with you.
Verification data such as copies of identification documents and proof of address, where required to comply with legal or contractual obligations.
Payment and transaction details such as payment method, payment history, invoices, and records of amounts paid or outstanding. We do not store full payment card details if payment is processed by a third party provider.
Usage and access information such as logs relating to access to the storage facility, entry and exit timestamps, and records of your use of our services.
Security and CCTV data such as video recordings captured in and around our premises for safety and security purposes.
Communication data such as enquiries, complaints, feedback, and records of telephone calls where these are logged for service quality and training.
How We Collect Your Data
We collect personal data directly from you when you complete forms, sign a storage agreement, communicate with us by phone or in writing, make a payment, or visit our premises. We may also receive data from third party payment processors and, where permitted, from credit reference agencies or similar organisations to verify identity and assess risk in connection with our services.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis under GDPR. Depending on the context, we rely on the following lawful bases:
Contract: to take steps at your request before entering into a storage agreement and to perform our contract with you, including managing your account, taking payment, and providing access to the storage facility.
Legal obligation: to comply with legal and regulatory requirements, including tax, accounting, fraud prevention, crime prevention, and health and safety obligations.
Legitimate interests: to operate, manage, and improve our business, protect our premises and assets, ensure the security of our customers and staff, handle queries and complaints, and keep relevant records. When relying on legitimate interests, we assess and balance your rights and freedoms against our interests.
Consent: for specific optional activities, such as sending certain forms of direct marketing where consent is required. Where we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
Purposes for Which We Use Personal Data
We process your personal data for the following purposes:
To manage customer relationships, including setting up and administering accounts, preparing and managing storage agreements, responding to enquiries, and providing customer support.
To provide and maintain storage services, including granting facility access, managing unit allocations, and maintaining records relating to the services used.
To process payments and manage billing, including issuing invoices, processing payments through payment processors, handling refunds where applicable, and keeping financial records.
To ensure security and safety, including monitoring access to our facility, operating CCTV systems, preventing and detecting crime, and protecting people, property, and assets.
To meet legal and regulatory obligations, including record keeping, responding to lawful requests from authorities, and complying with tax and accounting requirements.
To communicate with you about your contract, service updates, changes to terms, and other information necessary for the performance of the service or for compliance with legal obligations.
To manage our business operations, including internal reporting, service improvements, and staff training using anonymised or aggregated information where possible.
Data Retention
We only keep personal data for as long as it is necessary for the purposes for which it was collected, or for as long as required by law. We take into account the nature of the data, the risks associated with holding it, and any legal, regulatory, or contractual requirements.
In general, personal data relating to your storage agreement and account will be kept for the duration of your contract and for a number of years after it ends, in line with legal limitation periods and tax or accounting rules. CCTV recordings and access logs are normally kept for shorter periods, unless we need to retain them longer in connection with an incident, dispute, or legal matter.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise processed so that you can no longer be identified from it.
Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as processors on our behalf. These processors are engaged to provide specific services and may include:
Payment processing providers that handle card and other electronic payments.
IT and system support providers that host or maintain our customer management systems, access control systems, and related infrastructure.
Security service providers that support CCTV, alarm, and access systems, and incident management.
Professional advisers such as accountants or legal advisers where this is necessary to obtain professional services or comply with legal obligations.
All processors are required to process your personal data only in accordance with our instructions, to implement appropriate security measures, and to comply with applicable data protection laws.
We may also share your personal data with law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or permitted to do so, or where it is necessary to protect our rights, property, customers, or the public.
International Transfers
Where it is necessary for us to transfer personal data outside the UK or European Economic Area, we will only do so where appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements. These safeguards may include standard contractual clauses or other approved transfer mechanisms.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, physical security for our premises, secure storage systems, restrictions on who can access personal data, and staff training on data protection responsibilities.
Your Data Protection Rights
Under GDPR, you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Partmouth Park customers in our area, subject to certain legal conditions and exemptions.
Right of access: you can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you, together with information about how it is used.
Right to rectification: you can ask us to correct or complete any inaccurate or incomplete personal data that we hold about you.
Right to erasure: in certain circumstances, you can ask us to delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction of processing: you can ask us to restrict the processing of your personal data in specific situations, for example while we are verifying its accuracy or considering an objection.
Right to data portability: in certain circumstances, you can request that we provide you with the personal data you have given to us in a structured, commonly used, and machine readable format, or that we transmit it to another controller where technically feasible.
Right to object: you can object to processing based on our legitimate interests where you believe your rights and interests outweigh ours. You can also object to direct marketing at any time.
Rights relating to automated decision making: you have rights in relation to decisions based solely on automated processing, including profiling, where these produce legal or similarly significant effects for you. Storage Partmouth Park does not typically rely on such automated decision making for the provision of its storage services.
You can exercise your rights by contacting us and providing sufficient information for us to identify you. We may need to request additional information to confirm your identity and to ensure your personal data is not disclosed to anyone who has no right to receive it.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
