Privacy Policy - Yeading Storage

This Privacy Policy explains how Yeading Storage collects, uses, stores, shares, and protects personal data in connection with the services it provides. It applies to all Yeading Storage customers in area, including prospective customers, current customers, business account holders, and individuals who communicate with us in relation to storage services, billing, access, or account support. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, requesting a quote, entering into a storage agreement, visiting our premises, or otherwise interacting with Yeading Storage, you acknowledge that your personal data may be processed as described in this policy.

1. Information We Collect

We collect only the information necessary to provide our services, maintain security, comply with legal obligations, and manage our business. The personal data we may collect includes:

Identity information such as your name, date of birth, and signature.
Contact information such as your postal address, email address, and telephone number.
Account and contract information including storage unit details, agreement records, payment status, move-in and move-out dates, and correspondence related to your account.
Verification information such as copies or references of identification documents where required for identity checks, fraud prevention, or regulatory compliance.
Payment information such as bank details, payment method data, invoicing records, and transaction history, processed securely through appropriate payment systems.
Security information including CCTV images, access logs, entry records, and incident reports collected for site safety, asset protection, and crime prevention.
Communications including emails, telephone notes, written messages, complaints, feedback, and any other contact with us.

We may also collect limited technical data when you interact with our digital systems, such as IP address, device information, browser type, and usage information. This data is used to maintain security, improve systems, and prevent misuse.

2. How We Use Your Data

Yeading Storage uses personal data for the following purposes:

To provide and administer storage services.
To create and manage customer accounts and agreements.
To verify identity and assess eligibility where necessary.
To process payments, issue invoices, and manage arrears.
To communicate about your booking, contract, access, or service updates.
To maintain site safety and protect customers, staff, property, and the wider public.
To prevent fraud, theft, misuse, and unauthorised access.
To comply with legal, tax, accounting, and regulatory obligations.
To respond to complaints, requests, claims, or disputes.
To improve our services, systems, and operational efficiency.

We do not use your personal data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so and you have been informed where required.

3. Lawful Basis for Processing

Under data protection law, Yeading Storage must have a lawful basis for each processing activity. Depending on the context, we rely on one or more of the following legal bases:

Performance of a contract

We process personal data when it is necessary to enter into, manage, or perform our storage agreement with you. This includes setting up your account, managing access, taking payments, and delivering the services you request.

Legal obligation

We process certain information to comply with legal requirements, including tax rules, accounting duties, business record keeping, fraud prevention, and responses to lawful requests from public authorities.

Legitimate interests

We may process data where it is necessary for our legitimate interests or those of a third party, provided your rights and interests do not override those interests. Examples include site security, CCTV monitoring, business administration, service improvement, debt recovery, and protecting against fraud or misuse. When relying on legitimate interests, we consider the nature of the data, the impact on individuals, and appropriate safeguards.

Consent

In limited circumstances, we may rely on your consent, for example where this is required for specific optional communications or non-essential processing. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Vital interests and public interest

These grounds are unlikely to apply in most storage situations, but may be used where necessary to protect someone’s life or in relation to a task carried out in the public interest or under official authority.

4. Data Sharing and Processors

Yeading Storage may share personal data with trusted third parties where necessary to operate our business and provide services. We use carefully selected processors who act only on our instructions and are contractually required to protect your data. These may include:

Payment processors for taking and reconciling payments securely.
IT and cloud service providers for hosting systems, data storage, email services, and back-up solutions.
Security providers for CCTV, alarm systems, access control, and site protection.
Professional advisers such as accountants, auditors, insurers, or legal advisers where necessary.
Debt recovery or collection services where accounts become overdue and lawful action is required.
Maintenance and support providers who help us keep premises, systems, and equipment operational.

We may also disclose information to law enforcement bodies, regulators, courts, or other public authorities where required by law or where disclosure is reasonably necessary to protect our rights, property, customers, or staff.

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as an adequacy decision or approved contractual protections.

5. Retention of Personal Data

Yeading Storage keeps personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the purpose of processing.

Customer and contract records are typically retained for the duration of the relationship and for a period afterwards to deal with claims, disputes, and record-keeping obligations.
Financial and tax records are retained for the period required by law.
Security records such as CCTV and access logs are retained for a limited period unless needed longer for incident investigation or legal proceedings.
Correspondence and complaint records may be retained to evidence decisions, support service improvement, and manage disputes.

When data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices.

6. Security of Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures may include restricted access controls, secure storage, encryption, staff confidentiality obligations, monitoring, and physical security arrangements. While no system is completely risk-free, we continually review our security practices to reduce risk and respond promptly to incidents.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about how your data is handled. If you believe your data protection rights have been infringed, you may lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.

8. Children’s Data

Yeading Storage services are generally intended for adults and business users. We do not knowingly collect personal data from children except where it is incidental to a lawful transaction or where required by law. If we become aware that we have collected such data without a proper basis, we will take reasonable steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. The most current version will apply to your use of Yeading Storage services. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

Summary: Yeading Storage explains what data it collects, why it processes it, who may process it, how long it is kept, and the rights customers in area have under GDPR.