Storage Belmont Privacy Policy
This Privacy Policy explains how Storage Belmont collects, uses, stores, and protects personal data relating to customers and prospective customers in the local area. It also describes your rights under applicable data protection laws, including the United Kingdom General Data Protection Regulation and the EU General Data Protection Regulation where applicable.
By using Storage Belmont services, entering into a storage agreement, or contacting us with an enquiry, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Belmont customers, former customers, prospective customers, and authorised users of storage units in the Storage Belmont service area. It covers personal data collected in person at our premises, by post, over the phone, and through any digital forms or tools we may use.
Storage Belmont acts as the data controller for the personal data described in this Privacy Policy, meaning we determine the purposes and means of processing your personal data.
Types of Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification data, such as your full name, date of birth, and identification document details where required for verification and security.
Contact details, such as your residential address, correspondence address, and contact details for any alternative contact person you nominate.
Communication data, including records of enquiries, complaints, and correspondence between you and Storage Belmont, as well as any notes relating to discussions about your account or services.
Contract and account data, such as storage unit numbers, rental period, payment records, billing history, notices served, and details of any disputes or claims.
Payment and billing data, such as payment method details, transaction records, and billing status. We do not store full card details if payments are processed through a secure payment service provider.
Security and access data, which may include CCTV footage captured on our premises, gate and door access logs, and records of authorised users added to your account.
Technical and usage data, where applicable, such as data about your use of any online booking or account management tools we may provide, including access time and basic device details.
Lawful Basis for Processing Personal Data
We will only process your personal data where we have a lawful basis to do so under GDPR. Depending on the context, we rely on the following lawful bases:
Performance of a contract. We process personal data when it is necessary to enter into, manage, or perform a storage agreement with you. This includes taking steps at your request before entering into a contract, such as providing a quotation or reservation.
Legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, including tax and accounting rules, health and safety obligations, prevention of fraud or crime, and responding to lawful requests from public authorities.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, and where those interests are not overridden by your rights and freedoms. Our legitimate interests include operating and improving our storage services, ensuring site security and safety, managing customer relationships, handling complaints, and protecting our property and legal rights.
Consent. In limited situations, we may rely on your consent, for example, for specific marketing communications that are not based on our legitimate interests. Where we rely on consent, you can withdraw it at any time.
How We Use Personal Data
We use your personal data for the following purposes:
To provide storage services, including assessing your storage needs, setting up and managing your account, granting access to storage units, administering payments, and communicating about your storage agreement.
To maintain security and safety at our premises, including the monitoring of CCTV footage, access control systems, and visitor logs to help prevent and detect crime, protect our customers and staff, and safeguard property.
To manage our relationship with you, including handling enquiries, providing customer support, resolving complaints, issuing required notices, and sending information about changes to our terms or policies.
To conduct internal administration and business operations, including accounting, auditing, record keeping, and analysis of service usage to improve or adapt our services.
To comply with applicable laws and regulations, respond to lawful requests from public authorities, enforce our contracts, and pursue or defend legal claims.
Data Retention
Storage Belmont retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. The specific retention period depends on the nature of the data and our obligations, but the following principles generally apply:
Customer account and contract data are kept for the duration of your storage agreement and for a period afterwards to handle any queries, disputes, or legal claims. This period is determined in line with statutory limitation periods and applicable financial record keeping requirements.
CCTV footage and access logs are retained for a limited period necessary for security and incident investigation purposes, unless an incident requires footage or logs to be kept for longer in connection with ongoing proceedings.
Enquiry and correspondence data for prospective customers is retained for a reasonable period to respond to your requests and follow up on potential bookings, unless you ask us to delete it earlier, where legally permissible.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise rendered permanently unusable.
Data Processors and Sharing of Personal Data
Storage Belmont may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged under written contracts that require them to process personal data only in accordance with our instructions and to implement appropriate security measures.
We may use processors for functions such as payment processing, accounting and bookkeeping support, secure electronic storage of records, customer management tools, CCTV system maintenance, access control systems, and professional advisers such as auditors or legal representatives where they handle data on our behalf.
In addition, we may share personal data with third parties acting as independent data controllers where necessary, for example with law enforcement agencies, courts, regulators, or insurers, where this is required by law or needed to establish, exercise, or defend legal claims.
We do not sell personal data to third parties. If any transfer of personal data involves a country outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place in accordance with GDPR requirements.
Data Security
Storage Belmont takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Measures may include secure storage solutions, access controls, staff training, regular review of security practices, and limited access to personal data based on role and necessity. While no system can be guaranteed as completely secure, we regularly review our safeguards to reduce risks to personal data.
Your Data Protection Rights
Under GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions in the law:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification. You can ask us to correct or complete inaccurate or incomplete personal data we hold about you.
Right to erasure. In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction. You may request that we restrict the processing of your personal data in certain situations, for example while we verify accuracy or consider an objection.
Right to object. You can object to processing that is based on our legitimate interests, including certain forms of marketing, and we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is needed for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request a copy of your personal data in a commonly used, machine readable format, and ask us to transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent as the legal basis for processing, you can withdraw your consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact Storage Belmont first so that we can seek to resolve any concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. When we make material changes, we will take appropriate steps to inform you, which may include notices at our premises or updates provided with your service documentation.
The date of the latest revision will be indicated in the most recent version of this Privacy Policy. We encourage you to review this Policy periodically to stay informed about how Storage Belmont protects your personal data.
