Storage Gallows Corner Privacy Policy
This Privacy Policy explains how Storage Gallows Corner collects, uses, stores and protects personal data for all customers and prospective customers in our service area. We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This policy applies whenever you interact with us, including when you enquire about storage, sign a storage agreement, visit our site, or use any of our services.
Who This Policy Applies To
This Privacy Policy applies to all Storage Gallows Corner customers, former customers, prospective customers and authorised users of our units within our operating area. It also applies, where relevant, to visitors to our premises and individuals who communicate with us on behalf of a business customer.
Personal Data We Collect
We only collect personal data that is relevant for providing and managing our storage services, maintaining site security and meeting our legal obligations. The types of personal data we may collect include:
Identity and contact details, such as your name, postal address, billing address, and any other contact details you provide to us. Account and contract information, such as unit numbers, contract start and end dates, records of communications with you and your storage usage details. Payment and billing information, such as payment method details, payment history, invoicing and account status. Security and access information, such as CCTV footage recorded on our premises, vehicle registration numbers you provide for access, access control logs and incident reports. Communication data, such as enquiries, feedback, complaints, and any correspondence with us by post or through other communication channels you choose to use. Business customer information, if you contact us on behalf of a company or organisation, such as your role, company name and business contact information.
How We Collect Your Data
We collect personal data in a number of ways, including:
When you contact us to request a quote, make an enquiry or ask for information about our services. When you enter into a storage agreement or other contract with us. When you make payments or update your account details. When you visit our premises, including through CCTV systems and access control systems. When you communicate with us, for example to update your details, make a complaint or provide feedback. From third parties where necessary and lawful, such as identity verification services, payment service providers or law enforcement and regulatory authorities.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, this may be:
Contract, where processing is necessary to enter into or perform a storage agreement or other contract with you, including administering your account, taking payment, providing access to your unit and handling your requests. Legal obligation, where we must process data to comply with legal requirements, such as record keeping, accounting rules, tax obligations, health and safety or cooperating with law enforcement or regulatory authorities. Legitimate interests, where processing is necessary for our legitimate business interests and those interests are not overridden by your data protection rights. This may include ensuring site security and safety, preventing and detecting fraud or criminal activity, managing our relationship with you, improving our services and defending legal claims. Consent, where you have clearly agreed to specific processing, such as receiving certain forms of direct marketing communications. You can withdraw your consent at any time, which will not affect processing already carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including setting up and managing your account, administering contracts, processing payments, providing access to units, communicating with you about your booking and responding to your enquiries. To maintain safety and security at our premises, including monitoring CCTV, managing access control systems, recording incidents and supporting the prevention and detection of crime. To manage our business operations, including auditing, accounting, financial reporting, monitoring performance, planning and improving our services. To meet our legal and regulatory obligations, such as keeping appropriate business records, responding to lawful requests from public authorities and complying with relevant legislation. For customer service and communication, including handling feedback and complaints and sending information related to your contract or our services. For direct marketing, where permitted by law and, where required, with your consent. You can object to or opt out of direct marketing at any time.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected and to meet legal, regulatory, tax, accounting or reporting requirements.
In general, this means we will retain your customer account and contract records for a period after your contract ends, to handle any queries, disputes, chargebacks or legal claims and to comply with statutory retention periods. CCTV footage and access control records are retained for a shorter period, unless required longer due to an incident, investigation or legal claim. When personal data is no longer required, we will securely delete, anonymise or destroy it in line with our data retention procedures.
Data Sharing and Processors
We do not sell your personal data. We may share your data with trusted third parties where necessary and lawful, including:
Service providers acting as data processors, who provide services such as payment processing, accounting support, secure data storage, information technology, security systems and CCTV maintenance. Professional advisers, such as legal, accounting or insurance professionals, where necessary to obtain advice or manage legal claims. Law enforcement, regulatory bodies and public authorities, where required by law or where we reasonably believe it is necessary to protect our rights, property, safety or the safety of others. Business partners or purchasers, in the context of a potential or actual business sale, merger or restructuring, in which case appropriate safeguards will be in place.
Where third parties act as our data processors, they are only permitted to process your personal data on our instructions, must keep it secure and are bound by confidentiality and data protection obligations.
International Transfers
Where we or our service providers transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or other mechanisms recognised under data protection law. Further details of these safeguards can be provided on request.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These are subject to certain conditions and exemptions. Your rights may include:
The right of access, to obtain confirmation as to whether we process your personal data and to receive a copy of that data. The right to rectification, to have inaccurate or incomplete personal data corrected. The right to erasure, sometimes known as the right to be forgotten, to request the deletion of your personal data in certain circumstances. The right to restriction of processing, to request that we limit the way we use your data in certain situations. The right to data portability, to receive your personal data in a structured, commonly used and machine readable format and to request that we transfer it to another controller, where technically feasible and where the lawful basis is consent or contract. The right to object, to object to processing based on legitimate interests or for direct marketing purposes. The right not to be subject to a decision based solely on automated processing, including profiling, where it has legal or similarly significant effects, unless certain conditions apply.
You can exercise your rights by contacting us and providing enough information to identify yourself and your relationship with us. We may ask you for additional information to verify your identity and will respond within the time limits set by law.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage. These measures include access controls, physical security at our premises, staff training, data minimisation and regular review of our security arrangements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services or our data processing practices. Any changes will be made available under the latest version of this policy, and the updated policy will apply from the date it is published.
