Storage St Helier Privacy Policy
This Privacy Policy explains how Storage St Helier collects, uses and protects personal data relating to our customers and prospective customers in our service area. It is intended to meet the requirements of the UK General Data Protection Regulation and related data protection laws. By using our services, visiting our premises or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage St Helier customers, past, present and prospective, as well as individuals who contact us with enquiries, visit our facilities, or interact with us in relation to our storage services in the local area. It covers personal data processed in connection with quotations, bookings, contracts, payments, access to storage units, customer service and legal or regulatory compliance.
Data Controller
For the purposes of data protection law, Storage St Helier is the data controller for the personal data we collect and use in relation to our storage services. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable law.
Types of Personal Data We Collect
We only collect personal data that is relevant to the provision and management of our storage services and the running of our business. Depending on your relationship with us, we may collect and process the following categories of personal data:
Identification and contact details, such as your full name, postal address, billing address, date of birth, and any identifiers we use internally to manage your account.
Contact information, such as your communication preferences and records of correspondence and interactions with our team.
Contract and account data, such as storage unit number, contract term, pricing, deposit information, move-in and move-out dates, and notes relating to your account and service requirements.
Payment and billing information, such as payment method details, payment history, invoices, credit notes and records of any refunds or arrears. We keep this information in a secure format and only for as long as necessary.
Security and access information related to the operation and protection of our storage facilities, which may include access control information, entry and exit logs, and closed-circuit television footage at our premises, where installed and operated.
Technical and usage information relating to your interactions with any online services we provide, such as basic log information or device data, where this is necessary for security, service performance or to respond to enquiries.
How We Collect Personal Data
We collect personal data directly from you when you request a quotation, make a booking, sign a contract, pay for our services, contact us with questions, visit our premises or otherwise interact with us in connection with our services. Where appropriate and lawful, we may also obtain or verify certain information from third parties, such as payment providers, identity verification services, or public records, to help prevent fraud and meet our legal obligations.
Lawful Bases for Processing Your Data
We process your personal data only where we have a lawful basis under data protection law. Depending on the purpose, we may rely on one or more of the following lawful bases:
Contractual necessity. We process personal data that is necessary to enter into and perform our contract with you, including setting up and managing your storage unit, taking payment, handling deposits, providing customer support and managing move-in and move-out procedures.
Legal obligations. We process certain personal data to comply with legal and regulatory requirements, such as record-keeping, tax and accounting obligations, the prevention or detection of crime, and responses to lawful requests from public authorities or law enforcement.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, and where your interests and fundamental rights do not override those interests. These interests include managing and improving our storage services, maintaining the security of our premises, protecting our property and that of our customers, handling queries and complaints, pursuing or defending legal claims, and maintaining accurate internal records.
Consent. In limited cases, we may rely on your explicit consent, for example where we wish to send you certain types of marketing communications that are not based on our legitimate interests. Where processing is based on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes, in line with the lawful bases described above:
To provide, administer and manage our storage services, including taking bookings, preparing contracts, granting access to units and communicating with you about your storage arrangements.
To process payments, deposits and refunds, and to maintain accurate financial records for accounting, tax and audit purposes.
To maintain the safety and security of our premises, staff, customers and stored property, including through appropriate access controls and, where in use, security cameras.
To respond to your enquiries, requests, suggestions or complaints, and to provide ongoing customer support throughout your relationship with us.
To manage our business operations, including internal administration, reporting, risk management, training, quality control and service improvement.
To satisfy our legal and regulatory obligations, cooperate with authorities, and pursue or defend legal claims when necessary.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These service providers process personal data only in accordance with our written instructions and for specified purposes, and they are required to implement appropriate security measures.
Such processors may include providers of secure data storage and hosting, payment processing services, accounting and invoicing systems, customer relationship management tools, security and access control providers, and professional advisers such as accountants or legal advisers operating under confidentiality obligations.
We may also share your personal data with third parties where required by law, where necessary to protect our legal rights or the safety of our customers or staff, or in connection with a business transaction such as a transfer of operations, subject to appropriate safeguards.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet our legal, accounting and reporting obligations. In determining appropriate retention periods, we consider the type and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data and whether we can achieve those purposes by other means, as well as applicable legal requirements.
In general, we retain core customer account and contract information for a period after the end of our relationship with you, to resolve potential disputes, respond to queries, enforce our agreements and comply with tax and record-keeping requirements. Security-related records, such as access logs or CCTV footage where used, are typically retained for a shorter period unless they are required for an ongoing investigation, legal proceedings or to protect our rights or the rights of others.
Your Data Protection Rights
You have a number of rights under data protection law in relation to the personal data we hold about you. Subject to certain conditions and exceptions, you may:
Request access to your personal data and obtain a copy of the information we hold about you.
Request rectification of inaccurate or incomplete personal data.
Request erasure of your personal data where there is no longer a legal basis for us to retain or use it.
Request restriction of processing of your personal data in certain circumstances.
Object to processing where we rely on legitimate interests, including profiling based on those interests, on grounds relating to your particular situation.
Request the transfer of your personal data to you or to another service provider where technically feasible, in cases where the processing is based on your consent or on a contract and is carried out by automated means.
Where we rely on consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can address your concerns directly where possible.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular review of our procedures. While we strive to protect your personal data, no system can be guaranteed as completely secure, and you should take care to keep any access credentials or contract documents relating to your storage unit safe and confidential.
International Data Transfers
Where we use service providers or systems located outside the United Kingdom or the European Economic Area, we ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. This may include the use of recognised transfer mechanisms or contractual clauses that provide adequate protection for your data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection best practices. Any updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
