Storage Isle of Dogs Privacy Policy
This Privacy Policy explains how Storage Isle of Dogs collects, uses, stores, and protects personal data about customers in the local area. It also explains the rights you have under data protection law, including the UK General Data Protection Regulation and the Data Protection Act.
This Privacy Policy applies to all Storage Isle of Dogs customers and prospective customers in the local area, including individuals and business contacts, who use or enquire about our storage services.
Who We Are and Scope of This Policy
Storage Isle of Dogs is a storage services provider operating in the Isle of Dogs area. In relation to the personal data we collect and process, we act as a data controller. This means we determine the purposes and means of processing your personal data.
This Privacy Policy covers personal data processed in connection with enquiries, bookings, contracts, access to our storage facilities, payments, communications, and related services.
Personal Data We Collect
We collect and process a range of personal data about you when you interact with us, including when you make an enquiry, request a quote, sign a storage agreement, access our facilities, or communicate with us. The types of data we collect may include:
Identification and contact details, such as your full name, postal address, billing address, and communication preferences. Verification and account details, such as date of birth where required for identity checks, your chosen password or security information for account access where relevant, and customer reference numbers. Communication data, such as details of your enquiries, complaints, and correspondence with us, and any feedback you provide. Contract and service data, such as details of your storage unit, contract dates, access permissions, records of visits to the facility where these are logged, and any additional services requested. Financial and payment data, such as payment status, payment method description, and transaction records. We do not store full payment card numbers where card processing is managed by a third party payment processor. Technical data, such as basic device and usage information when you interact with any of our online tools or platforms, including access logs and security logs where used to protect our systems. Security and facility data, such as CCTV recordings in and around our facilities, entry and exit records where access systems are in place, and incident reports relating to security matters.
How We Collect Your Data
We collect personal data directly from you when you contact us by phone, complete forms in person, complete forms online where made available, sign a storage agreement, make a payment, or otherwise communicate with us.
We may also collect data automatically through facility access systems and CCTV for safety and security purposes, and in some cases from third parties such as payment processors, credit reference agencies where checks are carried out, or public sources where appropriate to verify identity or business details.
Lawful Basis for Processing Your Data
We only process your personal data where we have a valid lawful basis under data protection law. Depending on the specific processing activity, this may include:
Contract: We process your data where it is necessary to enter into or perform a contract with you, for example to set up and manage your storage agreement, take payment, and provide customer service. Legal obligation: We may process your data where it is necessary to comply with legal or regulatory obligations, such as financial record keeping, fraud prevention, or responding to lawful requests from authorities. Legitimate interests: We may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This can include facility security, improving our services, managing our business operations, and protecting our property and customers. Consent: In limited circumstances, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To handle enquiries and provide quotes for storage services in the local area. To set up, administer, and manage your storage agreement and account. To process payments, manage billing, and recover debts. To maintain the safety and security of our facilities, including use of CCTV and access records. To communicate with you about your contract, service updates, changes to terms, or important notices. To respond to complaints, queries, and requests you make about our services. To manage our business operations, including reporting, audits, risk management, and service improvement. To comply with applicable laws, regulations, and law enforcement requests. To send you service related information and, where permitted, limited marketing communications about similar services that may be of interest to you. You can object to marketing at any time.
Data Sharing and Use of Processors
We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy and where permitted by law. These third parties act either as independent controllers or as data processors acting on our behalf.
Data processors are third party service providers that process personal data on our instructions and for our purposes. They may include:
Payment processing providers handling card and bank transactions. IT and cloud service providers who host or support our systems and data storage. Security service providers supporting CCTV, access control, and alarm monitoring. Professional advisers such as accountants, auditors, and legal advisers, where needed for business and compliance purposes. Customer management and communication service providers supporting our customer relationship systems.
Where we use data processors, we require them by contract to keep your data secure, to use it only in accordance with our instructions, and to comply with data protection laws.
We may also share data where required by law, such as with law enforcement authorities, regulatory bodies, or courts, and in connection with business restructuring or transfers where permitted.
Data Retention
We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy, and to meet legal, accounting, or reporting requirements.
In general, we retain:
Core customer and contract data for the duration of your agreement and for a period after it ends, to handle queries, disputes, and legal obligations. Financial and transaction records for the period required by tax and accounting laws. CCTV and security records for a limited period, typically only as long as needed for security monitoring, incident investigation, and legal or insurance purposes. Communication records, including complaints and enquiries, for a reasonable period to manage our relationship with you and improve our services.
When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a secure manner.
International Transfers
Some of our service providers may be located outside the United Kingdom or the European Economic Area. Where this is the case and your personal data is transferred internationally, we will ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your data in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
Right of access: You can request confirmation that we process your personal data and obtain a copy of that data. Right to rectification: You can request that inaccurate or incomplete data be corrected. Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to retain it. Right to restriction: You can ask us to restrict the processing of your data in certain situations, such as while we are verifying its accuracy or assessing an objection. Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request to receive your data in a structured, commonly used, machine readable format and ask us to transfer it to another controller where technically feasible. Right to object: You can object to processing based on our legitimate interests, including profiling, and we will stop the processing unless we have compelling legitimate grounds that override your interests. You can always object to direct marketing, and we will honour this. Rights related to automated decision making: You have rights in relation to automated decision making and profiling where it has legal or similarly significant effects, although we do not generally carry out such processing in relation to our storage services.
We may need to verify your identity before responding to certain requests. We will respond within the timescales required by law.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These measures include access controls, physical security at our facilities, staff training, secure systems, and regular review of our security arrangements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our practices, or legal requirements. When we make changes, we will update the version made available to customers. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.
