Storage Barnes Cray Privacy Policy
This Privacy Policy explains how Storage Barnes Cray collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Barnes Cray service area. It also describes your rights under data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Barnes Cray customers, and to individuals who contact or interact with Storage Barnes Cray in connection with storage services, whether in person, by post, or through any other communication method.
Data Controller
Storage Barnes Cray is the data controller in respect of the personal data it collects and processes about you. As data controller, Storage Barnes Cray determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.
Personal Data We Collect
Storage Barnes Cray may collect and process the following categories of personal data about you:
Identification and contact details, such as your full name, postal address, billing address, and contact preferences.
Account and contract information, such as your customer account number, storage unit details, contract start and end dates, and payment status.
Financial and payment information, such as payment method details, billing history, and transaction records. Card or bank details are processed securely by our payment processors and are not retained by Storage Barnes Cray beyond what is necessary for legitimate accounting and fraud-prevention purposes.
Communication data, such as enquiries, complaints, feedback, and any correspondence you send to or receive from Storage Barnes Cray.
Security and access data, such as records of access to our premises, CCTV images where used for site security, and incident reports involving you or your storage unit.
Website and usage information, where relevant, such as basic technical and usage data collected when you visit or interact with online tools operated by or on behalf of Storage Barnes Cray, including anonymised statistics used to improve our services.
How We Collect Your Data
Storage Barnes Cray collects personal data directly from you when you:
Request a quote or information about our storage services.
Enter into a contract with us for storage or related services.
Make a payment or set up a payment arrangement.
Contact us by post, in person, or through other communication methods.
Visit our premises where security and access controls are in place.
In some cases, we may receive personal data about you from third parties, for example credit reference agencies, fraud-prevention agencies, or other service providers involved in the management of your account.
Lawful Basis for Processing
Storage Barnes Cray processes your personal data only where there is a lawful basis under applicable data protection law. These lawful bases include:
Contract: Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This includes administering your storage agreement, processing payments, and managing your account.
Legal obligation: Processing is necessary for compliance with legal obligations, such as tax and accounting requirements, record-keeping rules, and obligations to law enforcement or regulatory authorities.
Legitimate interests: Processing is necessary for our legitimate interests, provided these are not overridden by your rights and freedoms. Legitimate interests may include securing our premises, preventing and detecting fraud or theft, improving our services, handling customer enquiries, and maintaining accurate business records.
Consent: In limited circumstances, we may rely on your consent, for example where required for certain types of optional communication. Where processing is based on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
Storage Barnes Cray uses your personal data for the following purposes:
To provide storage services and manage your customer account.
To set up and administer your contract, including invoicing and payment processing.
To communicate with you regarding your storage unit, payments, access, changes to terms, or service updates.
To maintain the security of our premises, units, and property, including the use of access controls and, where operated, CCTV systems.
To respond to your enquiries, feedback, or complaints.
To meet legal, regulatory, and compliance requirements, including record-keeping and reporting obligations.
To protect the rights, property, or safety of Storage Barnes Cray, our customers, and other individuals, including the prevention and investigation of fraud or other unlawful activity.
Data Sharing and Processors
Storage Barnes Cray may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may include:
Payment processing providers who handle payments made by you for storage services.
IT service providers who supply, host, maintain, and support our business systems and data storage solutions.
Security service providers involved in access control, alarm systems, or CCTV systems where applicable.
Professional advisers such as accountants, auditors, or legal advisers where necessary for business operations or legal obligations.
Where third parties act as data processors, they are only permitted to process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy. Storage Barnes Cray requires all processors to implement appropriate technical and organisational security measures and to comply with applicable data protection law.
In limited circumstances, Storage Barnes Cray may also share personal data with other third parties acting as independent data controllers, for example law enforcement agencies, regulatory bodies, or insurers, where required by law or where necessary to establish, exercise, or defend legal claims.
International Transfers
Where Storage Barnes Cray or its processors transfer personal data outside the United Kingdom, Storage Barnes Cray will ensure that appropriate safeguards are in place to protect your data. Such safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms, together with additional safeguards where necessary.
Data Retention
Storage Barnes Cray keeps your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal, regulatory, and business requirements.
In general:
Customer account and contract data are kept for the duration of your contract and for a period afterwards to deal with queries, disputes, or legal requirements.
Financial and transaction records are retained for the periods required by tax and accounting laws.
Security and access data, including any CCTV footage where used, are retained for a limited period necessary for security, incident investigation, and legal purposes, after which they are securely deleted or anonymised.
When personal data is no longer required, Storage Barnes Cray will securely delete, anonymise, or otherwise dispose of it in a safe manner.
Data Security
Storage Barnes Cray takes the security of your personal data seriously. Appropriate technical and organisational measures are implemented to protect your data from unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, physical security arrangements, encryption or pseudonymisation where appropriate, and regular review of security procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data held by Storage Barnes Cray. These rights may be subject to certain conditions and legal exceptions, but generally include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected or updated.
Right to erasure: In some circumstances, you can request that your personal data be deleted, for example where it is no longer necessary for the purposes for which it was collected and there is no legal requirement to retain it.
Right to restriction of processing: You can request that we limit the way we use your data in certain situations, for example while we are considering a request you have made to rectify your data.
Right to data portability: In certain circumstances, you can request that we provide your personal data in a structured, commonly used, machine-readable format, and that it be transmitted to another controller where technically feasible.
Right to object: You can object to certain types of processing based on legitimate interests, on grounds relating to your particular situation. Storage Barnes Cray will stop processing unless there are compelling legitimate grounds to continue, or the processing is necessary for legal claims.
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of your rights, you can contact Storage Barnes Cray using the contact details provided in your contract or customer documentation.
Complaints and Contact
If you have concerns about how Storage Barnes Cray handles your personal data, you are encouraged to contact us in the first instance so that we can address your concerns. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.
Changes to This Privacy Policy
Storage Barnes Cray may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any updates will take effect when the revised Privacy Policy is made available. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
