Storage Colyers Privacy Policy
This Privacy Policy explains how Storage Colyers collects, uses, stores and protects personal data in connection with our storage services. It applies to all Storage Colyers customers in our operating area, as well as prospective customers, website visitors and any individual who interacts with us in relation to our services.
We are committed to complying with the UK General Data Protection Regulation and any applicable data protection laws. This Privacy Policy is intended to be clear and understandable so you can make informed decisions about your personal data.
1. Data controller
For the purposes of data protection law, Storage Colyers is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed when you use our services or interact with us.
2. Personal data we collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:
Identity data such as full name, title, date of birth and identification numbers required to verify your identity.
Contact data such as postal address, billing address, service address, country or region, and any other contact details you choose to share with us.
Account and contract data such as customer reference numbers, contract details, storage unit numbers, rental terms, invoices, payment history and communication records relating to your account.
Payment and transaction data such as records of payments made, payment method type and amounts. We do not retain full payment card details where payments are processed through third party payment providers.
Usage and service data such as information about your use of storage services, access logs to the extent necessary for security and operational purposes, and information about any additional services you request.
Communication data such as emails, letters, forms, and notes of telephone or in person conversations, including queries, feedback, complaints and any correspondence relating to our services.
Technical and website data such as internet protocol address, device type, browser type and version, approximate location derived from your device or network, and information about how you use our website, where this is collected through standard logging or analytics tools.
Security and CCTV data such as images recorded on our premises for the purposes of safety and crime prevention, together with related access control records where applicable.
We collect personal data directly from you when you contact us, request a quote, sign a contract, make a payment, visit our premises or communicate with us. We may also receive data from publicly available sources and from service providers who support our operations, such as payment processors.
3. Lawful bases for processing
We process your personal data only where we have a lawful basis under applicable data protection legislation. Depending on the context, we rely on one or more of the following legal bases:
Contract. We process your personal data where it is necessary to enter into or perform a contract with you, including creating and managing your account, providing storage services, processing payments and handling queries related to your contract.
Legal obligation. We process certain data to comply with our legal obligations, such as tax and accounting rules, record keeping laws, responding to lawful requests from public authorities and ensuring health and safety on our premises.
Legitimate interests. We process personal data when it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes managing our business, securing our premises, preventing fraud, improving our services, maintaining our website and communicating with you about service-related matters.
Consent. In some limited cases, we may rely on your consent, for example where required by law for certain forms of direct marketing or optional analytics. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4. How we use personal data
We use personal data for the following purposes, based on the lawful bases described above:
To provide and manage storage services, including creating customer records, setting up and managing storage units, processing bookings and renewals and facilitating payments.
To communicate with you about your account, including service updates, reminders, changes to terms, and responses to your questions or complaints.
To operate, maintain and secure our facilities, including access control, CCTV monitoring for safety and crime prevention, and incident management.
To maintain accurate internal records, including contracts, invoices, receipts, and service history for audit, tax and regulatory purposes.
To improve our services and operations, including service quality monitoring, staff training, service development and analysis of aggregated usage trends.
To protect our legal rights, including debt recovery, management of claims and disputes, and compliance with applicable laws and regulatory requirements.
Where permitted, to send you information about services that are related to those you already receive from us, and that we believe may be of interest to you. You can opt out of such communications at any time.
5. Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, customer account and contract data is retained for a period after your relationship with us ends, to comply with legal obligations and in case of disputes or queries regarding your former account. Payment and transaction data is kept in line with financial record keeping rules. CCTV and access control data is retained for a shorter period, unless it is required for the investigation of an incident or to assert or defend legal claims.
When we no longer need your personal data, we will securely delete or anonymise it so that it can no longer be associated with you.
6. Data processors and other recipients
We may share your personal data with trusted third parties who process data on our behalf as data processors. These service providers are only permitted to process your data in accordance with our instructions and are required to implement appropriate technical and organisational measures to protect your data.
Such processors may include providers of payment processing services, customer relationship management systems, cloud storage providers, IT support and maintenance providers, document management and archival services, and security and CCTV system support providers.
We may also share personal data with other third parties where necessary and lawful, such as professional advisers including auditors, accountants, lawyers, insurers and insurance brokers, debt collection agencies, courts, law enforcement authorities, regulators and government bodies when required by law or to protect our legal rights.
Where we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection law.
7. Your data protection rights
You have a number of rights under data protection law in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access. You can request confirmation as to whether we process your personal data and, if so, receive a copy of that data along with information about how and why we process it.
Right to rectification. You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data. This right is not absolute and may not apply where we need to retain the data for legal or contractual reasons.
Right to restriction of processing. You can ask us to restrict the processing of your personal data in certain situations, for example while we are assessing a request to rectify your data.
Right to data portability. In some cases, you can request that we provide certain personal data to you or to another organisation in a structured, commonly used and machine-readable format.
Right to object. You can object to our processing of your personal data based on our legitimate interests, including profiling based on those interests. You also have the right to object at any time to the processing of your personal data for direct marketing.
Rights related to automated decision making. You have rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects about you, where such processes are used.
To exercise any of these rights, you can contact us using your usual communication channels with Storage Colyers. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by applicable data protection law.
8. Security of your data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include physical security of our premises, access controls, staff training, secure systems and procedures for handling personal data.
9. Policy scope and updates
This Privacy Policy applies to all Storage Colyers customers in our operating area, as well as users of our services and website visitors. It does not create any contractual rights beyond those already present in your agreements with us, but it explains how we meet our obligations under data protection law.
We may update this Privacy Policy from time to time to reflect changes in our practices, in the law or in the services we offer. The updated version will apply from the date it is made available. We encourage you to review this Policy periodically so that you remain informed about how we handle your personal data.
