Storage Burroughs Privacy Policy
This Privacy Policy explains how Storage Burroughs collects, uses, discloses, and retains personal data of its customers and prospective customers. It applies to all Storage Burroughs customers in our service area, including individuals and businesses that use or inquire about our storage services, whether in person, by phone, or online.
Storage Burroughs acts as a data controller when it determines the purposes and means of processing your personal data. This Privacy Policy is designed to comply with the General Data Protection Regulation and other applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with Storage Burroughs. The main categories of data we collect are:
Identification and contact details, such as your full name, postal address, billing address, and similar identifying information necessary to set up and manage your account.
Account and contract details, such as customer reference numbers, contract start and end dates, unit numbers, access permissions, and service preferences.
Payment and billing information, such as payment method details, billing history, invoices, and records of transactions. We do not store full card details when payments are processed by third-party payment providers, but we may retain partial identifiers and transaction references.
Communication records, such as enquiries, complaints, and feedback that you provide to us, together with our responses and any notes relating to customer service interactions.
Access and security data, such as logs of entry to and exit from our facilities where access control systems are in place, CCTV recordings at our premises, and data related to incident reports or security investigations.
Online usage information when you visit our website, such as technical information about your device, approximate location, pages visited, and usage patterns collected through standard logging technologies. We only collect online data to the extent necessary to operate and secure our online services or where you have provided consent, where applicable.
Purposes and Lawful Bases for Processing
Storage Burroughs processes your personal data only where we have a lawful basis under the GDPR. The principal purposes and their corresponding lawful bases are:
To provide storage services and manage our relationship with you, including setting up your account, processing payments, managing bookings and contracts, and communicating with you about your unit and services. The lawful basis is the performance of a contract and taking steps at your request prior to entering into a contract.
To comply with legal and regulatory obligations, including tax and accounting requirements, responding to lawful requests from public authorities, and maintaining records necessary to demonstrate compliance. The lawful basis is compliance with a legal obligation.
To maintain the security and safety of our facilities, customers, staff, and property, including the use of access control systems, CCTV, and incident reporting. The lawful basis is our legitimate interests in preventing crime, protecting our assets, and ensuring a safe environment, balanced against your rights and freedoms.
To manage and improve our business operations, including customer service, quality assurance, staff training, and service development. The lawful basis is our legitimate interests in operating and developing an efficient and high-quality storage business.
To send information about similar services that you have already purchased or enquired about. We rely on our legitimate interests for such communication, and you can object at any time. Where required by law, we will obtain your consent before sending marketing communications.
To handle enquiries and potential disputes, including verifying identity, managing complaints, enforcing contractual terms, and defending legal claims. The lawful basis may be performance of a contract, compliance with legal obligations, or our legitimate interests in establishing or defending legal claims.
Data Retention
Storage Burroughs keeps personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal and regulatory requirements.
Account and contract data are generally retained for the duration of your contract and for a period thereafter, typically aligned with statutory limitation periods, to address any queries, disputes, or legal claims.
Financial and billing records are retained for the period required by tax, accounting, and financial regulations.
CCTV recordings and access control logs are retained for a limited period defined in our internal policies, usually only as long as necessary to investigate security incidents or respond to law enforcement requests, unless a longer retention is required for a specific investigation or legal proceeding.
Communication records and customer service correspondence are kept for a reasonable period to address ongoing matters and to improve our services, after which they are securely deleted or anonymised.
When personal data is no longer required for the purposes for which it was collected, and there is no legal obligation or overriding legitimate interest to retain it, we will securely delete or anonymise it.
Use of Data Processors and Third Parties
Storage Burroughs may engage third-party service providers to process personal data on our behalf. These data processors act only on our documented instructions and are contractually required to implement appropriate technical and organisational measures to protect your data.
We may use processors for activities such as payment processing, customer relationship management systems, secure data hosting and storage, access control and security systems, professional advisers, and IT support and maintenance.
In some circumstances, we may share personal data with third parties acting as independent controllers, for example with insurers, legal advisers, auditors, or public authorities where we are legally obliged to do so or where it is necessary to establish, exercise, or defend legal claims.
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, in accordance with data protection law.
Your Data Protection Rights
Under the GDPR and applicable data protection laws, you have a number of rights in connection with your personal data processed by Storage Burroughs. These rights may be subject to certain conditions and legal exemptions.
Right of access. You have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data along with information about how it is processed.
Right to rectification. You have the right to request that inaccurate or incomplete personal data about you be corrected or completed.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other legal basis applies.
Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, for example while we verify the accuracy of the data or assess an objection you have raised.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
Right to object. You have the right to object at any time to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to object to direct marketing. You have an absolute right to object to the processing of your personal data for direct marketing purposes. If you exercise this right, we will stop processing your data for such purposes.
Right not to be subject to automated decision-making. Storage Burroughs does not carry out decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has been processed in a way that does not comply with data protection law. You may contact the supervisory authority in your country of residence, place of work, or place of the alleged infringement.
Updates to This Privacy Policy
Storage Burroughs may update this Privacy Policy from time to time to reflect changes in our processing activities, legal obligations, or best practices. When we make significant changes, we will take reasonable steps to inform you, which may include notices at our facilities or on our website.
Your continued use of our services following any update to this Privacy Policy will signify that you have read and understood the revised terms. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process and protect your personal data.
