Storage Norbiton Privacy Policy
This Privacy Policy explains how Storage Norbiton collects, uses, stores, and protects personal data relating to our customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Norbiton customers in the area, as well as individuals who contact us about our services.
Who this Privacy Policy applies to
This Privacy Policy applies to individuals who use or enquire about Storage Norbiton services, including self-storage or related services. It covers customers, authorised users of storage units, guarantors, payers, and individuals who contact us by any method, including in person, by post, or through digital channels. By using our services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.
Personal data we collect
We collect and process different categories of personal data depending on your relationship with us and how you interact with Storage Norbiton. This may include:
Identification and contact data such as your full name, postal address, billing address, proof of identity information, and contact preferences. Account and contract information such as storage unit number, contract start and end dates, products and services ordered, and usage information. Payment and billing information such as payment method details and payment history. Security and access information such as vehicle registration numbers recorded when entering or leaving the site, access codes or key information, and records of access control logs. Communication information such as enquiries, complaints, feedback, and other correspondence with Storage Norbiton. Technical information, where relevant, such as information about how you access our digital content, including device type, and basic diagnostic data.
How we collect your data
We collect personal data directly from you when you contact us, request a quotation, sign a storage agreement, make a payment, or communicate with us in relation to our services. We may also collect personal data indirectly from third parties where permitted by law, for example from credit reference or identity verification services, or from other individuals you authorise to act on your behalf. In some circumstances, we may receive information from regulatory or law enforcement authorities where this is required or permitted.
Lawful basis for processing
Storage Norbiton will only process your personal data where we have a lawful basis to do so. Depending on the context, we rely on one or more of the following lawful bases:
Contract: We process personal data to enter into and perform a contract with you, for example to provide storage services, manage bookings, take payment, and administer your account. Legal obligation: We process personal data where we are required to comply with a legal obligation, such as tax, accounting, or regulatory requirements, or to respond to lawful requests from public authorities. Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where your rights and freedoms are not overridden. This includes managing and improving our services, ensuring the security of our premises, preventing fraud, handling queries and complaints, and maintaining business records. Consent: In limited situations, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you may withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage and related services, including account setup, bookings, contract administration, and customer service. To take and process payments, manage billing, and handle any disputes relating to charges. To verify your identity, prevent fraud, and protect the security of our facilities, systems, and staff. To communicate with you regarding your storage agreement, including notices, contract renewals, and important updates about our services. To respond to your enquiries, feedback, and complaints, and to maintain records of our communications. To comply with legal, regulatory, and law enforcement requirements, including the establishment or defence of legal claims. To conduct internal reporting, audit, and quality improvement activities.
Data sharing and processors
We may share your personal data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy and where there is a lawful basis. Categories of recipients may include:
Service providers and data processors who assist us with activities such as payment processing, secure data storage, accounting support, or maintenance of our systems and premises. Professional advisers, such as auditors or legal advisers, where necessary for the management of our business or the protection of our legal rights. Public and regulatory authorities, law enforcement bodies, or courts, where we are required or permitted by law to share information, or to protect our rights, property, or safety, or that of our customers or others.
When we use third party service providers as data processors, they are only allowed to process personal data on our instructions and in accordance with a written contract. They must implement appropriate technical and organisational measures to protect your data and may not use it for their own purposes.
International data transfers
Where it is necessary to transfer personal data to countries outside the United Kingdom or European Economic Area, Storage Norbiton will ensure that an adequate level of protection is in place. This may include using standard contractual clauses approved by relevant authorities, or transferring data to countries that have been formally recognised as providing an adequate level of data protection.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. In general, this means:
Customer account and contract data are retained for the duration of your agreement and for a reasonable period afterwards, to handle queries, disputes, and legal obligations. Payment and transaction records are retained for the period required by tax and financial regulations. Security and access information may be retained for a limited period to maintain the security of our premises and to assist with any investigations, and then securely deleted or anonymised.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Data security
Storage Norbiton takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include controlling access to your data, using secure systems, and training staff on data protection responsibilities. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access: You have the right to request confirmation of whether we hold personal data about you and to request a copy of that data. Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. Right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in certain situations. Right to data portability: You may have the right to receive personal data you have provided to us in a structured, commonly used format, and to request that we transmit it to another controller where technically feasible. Right to object: You have the right to object to processing based on our legitimate interests, including profiling, and to object to processing for direct marketing purposes.
To exercise any of these rights, please contact Storage Norbiton using the usual communication methods. We may need to verify your identity before responding to your request. We will handle all requests in accordance with applicable data protection laws.
Complaints and supervisory authority
If you have concerns about how Storage Norbiton handles your personal data, please contact us so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom or, where applicable, in your country of residence or place of work.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any updated version will apply to all Storage Norbiton customers in the area from the date it is published. You should review this Privacy Policy periodically to stay informed about how we process your personal data.
