Storage Aperfield Privacy Policy
This Privacy Policy explains how Storage Aperfield collects, uses, stores and protects personal data belonging to its customers and prospective customers in the local area. It also describes the legal bases relied upon under the UK General Data Protection Regulation and applicable data protection legislation, how long data is kept, with whom it is shared, and the rights that individuals have in relation to their personal information.
This Privacy Policy applies to all Storage Aperfield customers and anyone who makes enquiries about our storage services in our operating area, whether contact is made in person, by post, by online form or by any other means.
Data Controller
For the purposes of data protection law, Storage Aperfield is the data controller of the personal information described in this Privacy Policy. This means that Storage Aperfield decides how and why personal data is processed and is responsible for ensuring that such processing complies with applicable data protection legislation.
Personal Data We Collect
Storage Aperfield collects and processes different types of personal data depending on how you interact with us and the services that you use. The categories of data we may collect include the following.
Identification and contact details, such as full name, residential address, postal address, date of birth, and contact preferences.
Communication details, such as email address and any information you provide when you contact us with enquiries, feedback or complaints, or when you request a quotation for storage services.
Contract and account information, such as details of your storage unit, contract start and end dates, pricing and payment terms, access permissions, and records of communications in relation to your contract.
Payment and billing information, such as billing address, payment method details, transaction history and information necessary to process payments or issue refunds. Storage Aperfield may use third party payment processors who handle certain payment data on our behalf.
Security and access information, such as vehicle registration numbers used to enter the premises, access log data related to your storage unit, and closed circuit television images recorded on or near our facilities for security and safety purposes.
Technical and usage information, such as information about how you use our website or online services, including the pages you visit and the device and browser you use, collected via standard logging technologies and similar tools where used.
Purposes and Lawful Bases for Processing
Storage Aperfield processes personal data only when there is a lawful basis to do so. The main purposes for which we process your data and the corresponding lawful bases are set out below.
To respond to enquiries and provide quotations. We use your identification and contact details to respond when you request information about our services or ask for a quotation. The lawful basis for this processing is our legitimate interests in promoting and developing our business and, where appropriate, taking steps at your request prior to entering into a contract.
To enter into and perform storage contracts. We process your identification, contact, contract and payment information to set up your account, provide storage services, manage access, issue invoices and administer your contract. The lawful basis is the performance of a contract with you and taking steps at your request prior to entering into such a contract.
To manage payments and prevent fraud. We process relevant payment and account information to collect fees, manage arrears, handle refunds and reduce the risk of fraud. The lawful basis is our legitimate interests in operating a secure and reliable business and, where applicable, compliance with legal obligations relating to financial records.
To maintain safety and security. We use access logs, vehicle registration details and CCTV recordings to ensure the security of our premises, customers and staff, to investigate incidents and to prevent or detect crime. The lawful basis is our legitimate interests in maintaining a safe environment and, where necessary, the prevention and detection of unlawful acts.
To communicate important service information. We use your contact details to send essential information relating to your contract, such as changes to terms, payment reminders or information about access and safety. The lawful basis is performance of a contract and our legitimate interests in effective service administration.
To comply with legal and regulatory requirements. We may process any of the categories of data mentioned above where necessary to comply with laws and regulations, respond to lawful requests from authorities, or maintain appropriate business and financial records. The lawful basis is compliance with a legal obligation.
To improve our services and handle feedback. We may use communication records and service usage information to analyse performance, improve our facilities and respond to comments or complaints. The lawful basis is our legitimate interests in developing and enhancing our services and maintaining customer satisfaction.
Data Retention
Storage Aperfield keeps personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements.
Enquiry and quotation information is usually retained for a limited period after our last contact with you in order to follow up on your enquiry and to understand demand for our services.
Contract and account records, including billing and payment information, are generally retained for a number of years after your contract ends, to address any queries or disputes and to comply with legal obligations relating to tax and financial records.
CCTV images and access logs are kept for a shorter period, only for as long as required for security, investigation of incidents or compliance with legal requests, after which they are securely deleted or anonymised.
When personal data is no longer needed, it is deleted or anonymised in a secure manner.
Data Processors and Sharing of Personal Data
Storage Aperfield may share personal data with carefully selected third parties who act as data processors on our behalf. These processors only process personal data in accordance with our instructions and for specified purposes, and we ensure appropriate contractual and security measures are in place.
Categories of processors and recipients may include payment processing providers, accounting and invoicing service providers, information technology and system support providers, security and CCTV system providers, and professional advisers such as legal or accounting professionals where necessary for the operation of our business.
Personal data may also be shared with public authorities, law enforcement agencies or regulators where required by law or necessary to protect the rights, property or safety of Storage Aperfield, our customers, staff or the public.
Storage Aperfield does not sell personal data to third parties.
International Transfers
Where any third party processors or service providers are located outside the United Kingdom or the European Economic Area, or may store data in such locations, Storage Aperfield will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection laws. This may include the use of standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Data Security
Storage Aperfield takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, physical security at our premises, secure storage of records and appropriate procedures for handling and managing data. While no system can be completely secure, we regularly review our security arrangements to reduce the risk of unauthorised or unlawful processing.
Your Data Protection Rights
Under data protection law, individuals whose personal data we hold have a number of rights. These rights apply in certain circumstances and may be subject to limitations or conditions set out in the legislation.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the data we hold about you, together with certain information about how it is used.
Right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data that we hold about you.
Right to erasure. You may request that we delete your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may ask us to restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to transmit it to another controller.
Right to object. You have the right to object to processing that is based on our legitimate interests, including profiling based on those interests. We will stop the processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is necessary for legal claims.
Right to withdraw consent. Where we rely on consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact Storage Aperfield first so that we can attempt to resolve your concerns.
Changes to This Privacy Policy
Storage Aperfield may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any updated version will apply from the date on which it is issued. Customers and users of our services are encouraged to review this Privacy Policy periodically to remain informed about how we handle personal data.
