Storage Queensbury Privacy Policy
This Privacy Policy explains how Storage Queensbury collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all Storage Queensbury customers and prospective customers in our operating area, including anyone who makes an enquiry, obtains a quote, signs a storage agreement or otherwise uses our services.
Who we are and scope of this policy
Storage Queensbury is the controller of the personal data described in this Privacy Policy. As the data controller, we decide what personal data we collect, the purposes for which we use it and how it is processed, in accordance with applicable data protection laws.
This Privacy Policy applies whenever you interact with Storage Queensbury in relation to our storage services, whether in person, by post, via forms, or by any other means we make available from time to time.
Personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identification and contact information, such as your full name, postal address, billing address, contact address, and other contact details you choose to provide.
Account and contract information, such as customer reference numbers, storage unit numbers, contract start and end dates, payment history, and communications relating to your account.
Payment and billing information, such as billing details and records of payments made to us. We do not store full payment card details if payments are processed through an external payment provider.
Verification and security information, such as identity documents you provide for verification purposes, details required to comply with legal and regulatory obligations, and records related to site access, including security logs and, where used, CCTV images recorded on our premises.
Communication information, such as enquiries, complaints, feedback and any correspondence between you and Storage Queensbury in any form.
Usage and technical information, where applicable, such as information about how you interact with our services, for example the dates and times of site access and other operational records that relate to your use of a storage unit.
Lawful bases for processing your personal data
We only process your personal data when we have a lawful basis to do so. Depending on the circumstances, we rely on one or more of the following lawful bases:
Contract. We process personal data where it is necessary to enter into, perform or manage a contract with you, such as a storage agreement. This includes setting up your account, managing your bookings, processing payments, providing customer support and communicating with you about your contract and services.
Legal obligation. We process personal data where we are required to do so to comply with legal or regulatory obligations. This can include identity checks, financial record keeping, tax and accounting obligations, health and safety requirements and responding to lawful requests from public authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests. Our legitimate interests include managing and improving our services, ensuring the security and safety of our premises and customers, preventing and detecting fraud or misuse, and maintaining accurate records of our business activities.
Consent. In limited cases we may rely on your consent, for example where required for specific types of optional communications. Where we rely on consent, you are free to withdraw it at any time, and we will explain how you can do this at the point we ask for your consent.
How we use your personal data
We use your personal data for purposes that include:
Providing, managing and administering storage services and related customer support.
Setting up and managing your account, preparing and administering contracts, invoicing and taking payments.
Verifying your identity, assessing and managing security at our premises and protecting our property and that of our customers.
Maintaining safety and security, including through the use of security logs and CCTV where operated on our premises.
Communicating with you about your account, your storage unit, upcoming renewals, changes to our terms and conditions or this Privacy Policy, and other service-related information.
Carrying out internal record keeping, audits, financial management and reporting.
Responding to your enquiries, resolving complaints and handling disputes.
Meeting our legal and regulatory obligations and cooperating with law enforcement or regulatory authorities where required.
Data sharing and processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors may provide services such as payment processing, secure data hosting, IT support, document storage, customer administration and security systems.
Where we use processors, they are only permitted to handle your personal data in accordance with our written instructions, must keep your data secure, and are not allowed to use it for their own purposes.
We may also share personal data with other third parties in limited circumstances, for example:
With professional advisers, such as accountants, auditors or legal advisers, where this is necessary for the services they provide to us.
With public authorities, regulators, law enforcement agencies or courts, where we are required to do so by law or to protect our rights or the rights of others.
With third parties involved in a business transaction, such as a sale or restructuring of our business, in which case we will ensure appropriate safeguards are in place.
We do not sell your personal data to third parties.
International transfers
Where we use service providers or systems that involve the transfer of personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data. These safeguards may include adequacy regulations, standard contractual clauses or other lawful mechanisms approved under data protection law.
Data retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we keep your core customer and contract information for the duration of your relationship with Storage Queensbury and for a defined period after your contract ends, to enable us to respond to queries, handle disputes and comply with our legal obligations.
Retention periods may vary depending on the type of data, the nature of our relationship with you and our legal obligations. When personal data is no longer required, we will delete it or anonymise it in a secure manner.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular review of our security practices.
While we take reasonable steps to secure your data, no system can be completely secure. We will notify you and any applicable regulator of a personal data breach where we are legally required to do so.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access. You can request confirmation that we process your personal data and request a copy of the personal data we hold about you.
Right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to object. You can object to our processing of your personal data where we are relying on legitimate interests as the lawful basis, including profiling on that basis, and we will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms or we need to continue processing for legal claims.
Right to data portability. In certain circumstances, you can request that we provide you with personal data you have given to us in a structured, commonly used and machine readable format, or request that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.
You also have the right to raise a concern or make a complaint about how we handle your personal data with a supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. When we make changes, we will update the version made available to you and indicate the date of the latest revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
