Storage Goodmayes Privacy Policy
This Privacy Policy explains how Storage Goodmayes collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Goodmayes service area. It is intended to comply with the UK General Data Protection Regulation and all applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Goodmayes customers, prospective customers, and account holders located in our operating area. It covers personal data collected through our storage facilities, customer service interactions, website forms, booking processes, and any other method through which you interact with Storage Goodmayes.
Data We Collect
Storage Goodmayes may collect and process the following categories of personal data:
Identification and contact data, such as your full name, postal address, billing address, and contact details including non-electronic contact methods you provide.
Account and contract data, such as customer reference numbers, unit numbers, contract start and end dates, rental terms, payment history, and account notes relating to the performance of your contract.
Payment and billing information, including transaction records and information required to process your payments. We do not store full card details where we use secure payment processors that handle this information on our behalf.
Communication data, including records of your communications with us, for example queries, complaints, and feedback provided to our staff at the facility or through remote communication channels.
Usage and operational data, such as facility entry and exit records, unit access logs where applicable, and information necessary for the security and operation of the storage premises.
Security and CCTV data, where CCTV is in operation at our premises, including images and recordings for safety, security, and crime prevention purposes.
Marketing preferences, including your choices about receiving marketing communications from us or your decision to opt out.
Lawful Bases for Processing
Storage Goodmayes processes personal data only where there is a lawful basis under data protection law. The main lawful bases we rely on are:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, including the provision of storage services, managing your booking, processing payments, and responding to service-related enquiries.
Legal obligation: We process personal data where necessary to comply with legal requirements, such as tax, accounting, health and safety, crime prevention, and regulatory obligations.
Legitimate interests: We process personal data for our legitimate business interests, provided these are not overridden by your rights and interests. These interests may include ensuring the security of our premises and customers, managing and improving our services, preventing fraud, and handling customer queries and complaints.
Consent: In some circumstances, we rely on your consent to process specific types of personal data, for example, where required for certain types of marketing activities. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
Storage Goodmayes uses the personal data we collect for the following purposes:
To set up and manage your storage account, including identity verification where appropriate, contract administration, unit allocation, and account maintenance.
To provide and manage storage services, including access control, facility management, customer support, and day to day operations.
To process payments, manage billing and invoices, address arrears, and handle refunds or adjustments as required.
To maintain safety and security at our premises, including the operation of access control systems and CCTV where installed, and to investigate incidents, theft, or damage.
To communicate with you about your contract, changes to our terms, service updates, and other essential information relating to your use of our services.
To respond to your requests, enquiries, and complaints, and to improve our customer service.
To conduct internal reporting, auditing, and business management activities, such as analysing service usage and improving our operations.
To send you marketing communications where you have not opted out and where we are permitted to do so by law, and to respect any preference you express not to receive such communications.
Data Retention
Storage Goodmayes keeps personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements.
Customer account and contract data are generally retained for a period after your contract ends, to allow us to respond to queries, manage potential disputes, and comply with legal obligations. The specific retention period may vary depending on statutory requirements and limitation periods for legal claims.
Payment and billing records are retained in line with tax and accounting laws, which generally require retention for a number of years after the end of the financial year in which a transaction took place.
CCTV footage and access logs are retained for a shorter period, only for as long as necessary for security, investigation of incidents, and compliance with any law enforcement requests, unless a longer retention is required in connection with a specific investigation or legal claim.
Marketing preference and opt out records may be retained to ensure that we respect your choices about how we contact you.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in a way that protects your privacy.
Use of Data Processors and Third Parties
Storage Goodmayes may engage carefully selected third parties to process personal data on our behalf. These service providers act as data processors and are only permitted to process personal data according to our documented instructions and for specified purposes.
Examples of such processors include payment processing providers, account management and billing system providers, secure data storage providers, and companies that support our facility access and security systems.
Where we use processors, we ensure that appropriate contractual and technical safeguards are in place to protect your personal data, including obligations of confidentiality, data security, and assistance with data subject rights where required.
We may also share personal data with other third parties where we are required to do so by law, where it is necessary to protect our legal rights or those of others, or in connection with legal proceedings, law enforcement requests, or regulatory enquiries.
International Data Transfers
Where personal data is transferred outside the United Kingdom, we will ensure that such transfers comply with applicable data protection laws. This may include the use of appropriate safeguards such as standard contractual clauses or reliance on adequacy regulations where applicable. We will take steps to ensure that any overseas recipient provides an adequate level of protection for your personal data.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data held by Storage Goodmayes. These include:
Right of access: You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you, together with certain supporting information.
Right to rectification: You can ask us to correct or update any inaccurate or incomplete personal data that we hold about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You can request that we restrict the way we process your personal data in certain situations, for example while we consider a request to rectify your data.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine readable format, and to have that data transmitted to another controller where technically feasible.
Right to object: You can object to processing based on our legitimate interests where you believe your rights and interests override our justification. You always have the right to object to the processing of your personal data for direct marketing, and we will respect this without question.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal, but it may affect our ability to continue providing certain services that rely on that consent.
To exercise any of these rights, you may contact Storage Goodmayes using the contact details provided in our customer documentation or at our facility. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by law.
Security of Your Personal Data
Storage Goodmayes takes the security of personal data seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include physical security at our premises, access controls, staff training, and secure storage solutions. While we take reasonable steps to safeguard your personal data, no system can be completely secure, and we cannot guarantee absolute security.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be made available through our usual customer information channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
