Storage Loxford Privacy Policy
This Privacy Policy explains how Storage Loxford collects, uses, stores and protects personal data for all Storage Loxford customers in our service area. It also explains the rights you have under the UK General Data Protection Regulation and related data protection laws.
Storage Loxford is the controller of your personal data. This means we decide how and why your data is processed when you use our storage facilities, services, or interact with us in person, by post or online.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Loxford customers in the area covered by our storage services, including prospective customers making enquiries, current customers with active agreements, and former customers whose data we retain for legitimate purposes described in this Policy. It also applies to individuals acting on behalf of a business or organisation that is a customer of Storage Loxford.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, date of birth, photographic identification details and signatures.
Contact data such as home or business address, billing address, and details needed for communication.
Account and contract data such as storage unit number, contract start and end dates, services selected, pricing, payment status and account correspondence.
Payment and billing data such as payment method details, billing history and invoices. We do not store full card details where this is handled by a secure payment processor.
Security and access data such as vehicle registration numbers for site access, access control records, site visit logs and recorded incidents.
CCTV images and recordings captured on and around Storage Loxford premises for security and safety purposes.
Communication data such as enquiries, complaints, feedback, and any correspondence you send to us or that we send to you in relation to your storage agreement.
Technical data related to your interactions with our online services where applicable, such as IP address and basic usage information, collected to maintain and improve our services and for security and fraud prevention.
How We Collect Your Data
We collect personal data from you directly when you sign a storage agreement, request a quote, contact us to make an enquiry, visit our premises, or communicate with us by post or other channels.
We may also obtain some data indirectly from third parties where this is necessary to verify your identity, to comply with legal obligations, or to carry out credit or fraud prevention checks where permitted by law.
Lawful Basis for Processing
Storage Loxford processes your personal data only when there is a lawful basis under the UK General Data Protection Regulation. Depending on the purpose, we rely on one or more of the following legal bases:
Contract. We process data that is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, handling payments and communicating with you about your agreement.
Legal obligation. We process data when we are required to do so by law, for example to comply with tax rules, accounting requirements, crime prevention, or requests from competent authorities when they are lawfully entitled to receive such data.
Legitimate interests. We process data where it is necessary for our legitimate business interests or those of a third party, and where these interests are not overridden by your rights and freedoms. This includes managing and improving our services, ensuring site security, monitoring access to our premises, preventing fraud, pursuing and defending legal claims, and maintaining records.
Consent. In limited situations, we may rely on your consent, for example for certain types of optional communications. Where we rely on consent, you can withdraw it at any time, and we will explain how to do so at the point we ask for your consent.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, administer and manage your storage agreement, including unit allocation, customer support and account management.
To process payments, issue invoices, handle billing queries and manage debt recovery where necessary.
To maintain the safety and security of our premises, staff, customers and stored property, including the operation of CCTV systems, access control and incident logging.
To respond to your enquiries, complaints and feedback, and to keep records of our communications with you.
To meet our legal and regulatory obligations, such as tax and accounting requirements and law enforcement requests where legally required.
To maintain business records, perform internal reporting, auditing and quality control, and to improve our services and customer experience.
To establish, exercise or defend legal claims, including the recovery of unpaid charges and the management of disputes.
Data Sharing and Processors
We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy and where there is a lawful basis for doing so. When third parties process data on our behalf, they act as data processors and must only process your personal data in accordance with our instructions and applicable data protection laws.
Categories of recipients may include:
Payment service providers that securely process transactions and manage card or direct debit payments on our behalf.
IT and system support providers that host, maintain or support our business systems, storage management tools and security systems.
Professional advisers such as legal advisers and accountants where this is necessary for advice, dispute handling or auditing.
Debt recovery agencies and tracing agents for the purpose of pursuing unpaid charges, where lawful.
Security and maintenance contractors who need limited access to data for the safe and efficient operation of our premises and systems.
Public authorities, law enforcement bodies or courts, but only where we are legally required or permitted to do so, or where it is necessary to protect our rights, customers or property.
We do not sell your personal data.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection law, such as using standard contractual clauses or equivalent protective measures, and we will only do so where it is lawful and necessary for the services we provide.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements.
Typically, we retain data relating to your storage agreement and account for a period after your contract ends, to manage any queries, disputes or legal claims and to comply with our legal obligations. CCTV recordings are usually kept for a shorter period, unless required for the investigation of an incident, in which case they may be retained for longer as evidence.
When personal data is no longer needed, we will delete it or anonymise it so it can no longer be linked to you.
Your Data Protection Rights
Under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data. These rights are not absolute and may be subject to legal limitations, but you can usually:
Request access to your personal data and obtain a copy of the information we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data in certain circumstances, for example where it is no longer needed for the original purpose.
Object to the processing of your personal data where we rely on legitimate interests and you believe your interests override ours.
Request restriction of processing in certain situations, for example while we verify the accuracy of data or address an objection.
Request the transfer of your personal data to you or to another organisation in a structured, commonly used and machine readable format where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where we rely on your consent as the lawful basis for processing. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a data protection supervisory authority if you are unhappy with how we handle your personal data. We encourage you to contact us first so that we can try to resolve any concerns.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and procedures for handling data security incidents.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. Any updates will apply from the date they are published. We recommend that you review this Policy periodically to stay informed about how we protect your personal data.
