Storage Bounds Green Privacy Policy
This Privacy Policy explains how Storage Bounds Green collects, uses, stores and protects personal data relating to our customers and prospective customers in our local service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Bounds Green customers and individuals who make enquiries, request quotes or use our services in the area we serve.
Who we are
Storage Bounds Green is a provider of storage and related services. In relation to the personal data described in this Privacy Policy, Storage Bounds Green acts as the data controller. This means we decide how and why your personal data is used, within the limits of applicable data protection law.
Personal data we collect
We only collect personal data that is relevant for providing and managing our storage services, communicating with you, meeting our legal obligations and improving our operations. The types of personal data we may collect include:
Identification details, such as full name, title and proof of identity details that you choose to provide when required for verification.
Contact details, such as postal address, billing address, area of residence, and other correspondence details that you provide when you contact us, request a quote or enter into a contract with us.
Account and contract information, such as unit numbers, contract start and end dates, services selected, payment history, and records of communications relating to your account.
Payment-related data, such as payment method details and transaction records. We do not store full payment card details when you pay through a secure payment processor; only confirmation of payment and limited information required for accounting and fraud prevention is retained.
Usage information, such as access logs to our facilities where applicable, records of your interactions with our staff, and information about your use of our services for customer service, security and operational purposes.
Communication records, such as emails, letters, and internal notes about your enquiries, bookings or complaints so that we can manage our relationship with you effectively and keep accurate records.
How we collect personal data
We typically collect personal data directly from you when you make an enquiry, request a quote, sign a contract, make a payment or otherwise communicate with us. We may also receive personal data from third parties where it is lawful to do so, for example when payments are processed through a payment service provider that confirms your payment details and status to us. We may generate data about you internally, such as account numbers, access logs and service usage details, as part of operating our services.
Purposes and lawful basis for processing
We process personal data only when we have a lawful basis under data protection law. The main purposes and lawful bases for our processing are:
To provide storage and related services. We use your identification, contact and account data to set up and manage your contract, allocate units, arrange access and provide customer support. The lawful basis is performance of a contract, or taking steps at your request before entering into a contract.
To manage billing and payments. We use your payment-related data, transaction information and contact details to issue invoices, process payments, handle refunds and maintain financial records. The lawful basis is performance of a contract and compliance with legal obligations relating to tax and accounting.
To maintain security and prevent fraud. We may use access logs, identification details and account information to secure our premises, prevent unauthorised access and detect or investigate suspected fraud or misuse. The lawful basis is our legitimate interests in securing our facilities and protecting our business and customers, and where applicable compliance with legal obligations.
To communicate with you. We use your contact details to respond to enquiries, send service updates, provide important information about your account, and manage operational notices. The lawful basis is performance of a contract or our legitimate interests in keeping you informed about services you have requested.
To comply with legal and regulatory requirements. We may process and retain certain data to comply with laws relating to taxation, accounting, consumer protection, security, and other regulations. The lawful basis is compliance with legal obligations.
To improve our services. We may use aggregated or limited personal data to review service performance, train staff and improve our processes. The lawful basis is our legitimate interests in operating and developing our business, ensuring any impact on your privacy is minimised.
Data retention periods
We keep personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy and to comply with legal, accounting or reporting requirements. Retention periods will vary depending on the type of data and the purpose of processing.
Generally, we keep contract and billing records for a number of years after your contract ends, in line with statutory limitation periods and tax law requirements. Security and access records may be retained for a shorter period, unless there is a specific reason to keep them longer, for example following an incident or legal claim. Communication records are retained for as long as necessary to answer your queries, resolve issues and demonstrate how we handled your requests.
When personal data is no longer required, we will securely delete it, anonymise it, or in some cases archive it with restricted access where required by law.
Data sharing and processors
We may share personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to use your personal data in accordance with our instructions, for the specific services they provide to us, and must implement appropriate security measures.
Examples of such processors may include payment processing services that handle card or bank transactions, providers of accounting software, secure document storage services, and certain information technology providers who support our systems and communications. We ensure that appropriate contractual safeguards are in place with all processors.
We may also share personal data with other third parties where we act as joint controllers or independent controllers, but only when this is lawful and necessary. This may include professional advisers such as accountants or legal advisers, law enforcement or regulatory authorities where required, and other parties in connection with a business reorganisation, provided that data protection requirements are met.
We do not sell your personal data. We do not routinely transfer your personal data outside the United Kingdom or European Economic Area. If such a transfer is necessary, we will ensure that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your data.
Security of your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These measures include access controls, staff training, secure handling of payment data, and regular review of our procedures. While no system can be completely secure, we aim to ensure that the level of protection we apply is appropriate to the nature and sensitivity of the data we hold.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
The right of access. You have the right to request a copy of the personal data we hold about you, together with information about how we use it.
The right to rectification. You can ask us to correct or complete any personal data that is inaccurate or incomplete.
The right to erasure. In certain circumstances, you may ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we do not need to retain it for legal or legitimate business reasons.
The right to restrict processing. You can request that we restrict our use of your personal data in certain situations, for example while we are considering a request to rectify or erase your data.
The right to data portability. Where our processing is based on your consent or a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used format and to request that we transfer it to another organisation where technically feasible.
The right to object. You have the right to object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
The right to withdraw consent. Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before you withdraw consent.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact methods made available through our usual customer communication channels. We may need to verify your identity before responding to your request to protect your privacy.
If you are not satisfied with our response, you also have the right to lodge a complaint with the relevant data protection supervisory authority in the country where you live or work, or where you believe a breach of data protection law has occurred.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. The most current version will apply to all Storage Bounds Green customers and individuals in our service area. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
