Storage Canary Wharf Privacy Policy
This Privacy Policy explains how Storage Canary Wharf collects, uses, stores and protects personal data relating to customers and prospective customers within the Canary Wharf area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our storage services, making enquiries, entering into a contract with us or otherwise providing personal data, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Canary Wharf customers and prospective customers in the Canary Wharf area who use our storage facilities or related services, as well as individuals who contact us with enquiries. It covers personal data processed in connection with enquiries, reservations, contracts, on-site access, billing and account management.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your name, postal address, billing address, contact address, and any additional contact preferences you provide.
Account and contract information, such as storage unit number, contract start and end dates, services selected, payment status, and correspondence relating to your account.
Payment and transaction details, including payment method, amounts paid, payment dates and invoices. We do not store full payment card details; these are handled by our payment service providers.
Security and access information, such as access codes, key or fob identifiers, entry and exit logs, CCTV images within and around our storage premises, and records of any incidents on site.
Communication data, such as records of enquiries, complaints, requests, and any other communication you send to us or we send to you in relation to your use of our services.
Technical and usage data, where applicable, such as information about how you interact with our online platforms, including device information, pages visited and time spent on pages.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a contract, access our facilities, make a payment or communicate with us by any means.
We may also collect data automatically through security systems such as CCTV and access control systems deployed at our premises.
Where necessary, we may obtain limited personal data from third parties, such as payment processors, credit or identity verification services, and service partners involved in delivering our services.
Lawful Basis for Processing
We rely on one or more of the following lawful bases when processing your personal data:
Contract: We process personal data when it is necessary to enter into or perform a contract with you, including setting up your storage account, managing access to your unit, handling payments and providing customer support.
Legal obligation: We process personal data where required to comply with our legal and regulatory obligations, such as tax, accounting, health and safety, and to respond to requests from law enforcement or regulatory authorities where we are legally obliged to do so.
Legitimate interests: We process personal data when it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. This includes ensuring the security of our premises, preventing fraud, improving our services, and managing and protecting our business operations.
Consent: In limited circumstances, we may rely on your consent, for example, for certain types of marketing communications where required by law. Where processing is based on consent, you may withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage and related services, including setting up and administering your account, managing your contract, and facilitating access to our facilities.
To process payments, issue invoices, manage billing queries and maintain accurate financial records.
To maintain the security and safety of our premises, customers, staff and property, including through CCTV monitoring, access logs and security incident management.
To respond to your enquiries, handle complaints, and provide customer service and support.
To manage our relationship with you, including communicating about contract renewals, changes to our terms, and important service updates.
To comply with legal and regulatory requirements and to establish, exercise or defend legal claims.
To analyse and improve our services, operations and customer experience, and, where permitted, to send you information about products or services that may be relevant to you.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
Customer account and contract records are typically retained for a period after the end of your contract to address any queries, disputes or legal claims and to comply with statutory retention obligations.
CCTV footage and access logs are retained for a limited period that is appropriate to the security purposes for which they are collected, unless a longer retention period is required in connection with an investigation or legal claim.
When personal data is no longer required, we will delete it, anonymise it or securely destroy it in accordance with our data retention procedures.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf to support the delivery of our services. These may include:
Payment processing providers that handle card payments and other transactions.
IT and cloud service providers that host our systems, store data, and provide software or security services.
Professional advisers, such as accountants, auditors, insurers and legal advisers, who provide services to our business.
Security and maintenance contractors who support the operation and protection of our premises and systems.
Whenever we use data processors, we ensure they are subject to appropriate contractual and security obligations consistent with data protection laws. They are only permitted to process your personal data in accordance with our instructions and for specified purposes.
We may also share personal data where required by law, for example with law enforcement agencies, regulatory bodies or courts, or in connection with legal proceedings.
International Transfers
If any of our service providers transfer or access your personal data from outside the United Kingdom, we will take steps to ensure that appropriate safeguards are in place, such as using standard contractual clauses or other lawful transfer mechanisms, to protect your data to a standard equivalent to that in the United Kingdom.
How We Protect Your Data
We implement technical and organisational measures designed to protect your personal data from unauthorised access, accidental loss, misuse or disclosure. These measures include access controls, secure storage, encryption where appropriate, staff training on data protection responsibilities and regular review of our security arrangements.
Your Data Protection Rights
You have a number of rights in relation to your personal data, subject to certain conditions and exceptions under the law:
Right of access: You may request confirmation of whether we process your personal data and obtain a copy of your personal data, along with information about how we process it.
Right to rectification: You may request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You may request that we delete your personal data where there is no longer a lawful basis for us to retain or process it.
Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You may request that we provide your personal data in a structured, commonly used and machine readable format, and that we transfer it to another controller where technically feasible.
Right to object: You may object to our processing of your personal data based on legitimate interests, including profiling, and you have an absolute right to object to direct marketing.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or the way we process personal data. Any updates will take effect when the revised Privacy Policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
Contact and Further Information
If you have any questions about this Privacy Policy or how we process your personal data, or if you wish to exercise any of your data protection rights, you can contact Storage Canary Wharf using the usual contact methods associated with your account or our premises.
