Privacy Policy - Rainham Storage

Rainham Storage is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and safeguard personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Rainham Storage customers in area, including prospective customers, current customers, former customers, and individuals who interact with us in relation to storage services, account management, billing, and support.

1. Who We Are

For the purposes of data protection law, Rainham Storage is the data controller of the personal information processed in connection with our storage services. This means we determine the purposes and means of processing personal data. We take our obligations seriously and ensure that personal information is used only where there is a lawful basis to do so, and only for legitimate, specified purposes.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data such as name, title, and date of birth where needed for verification.
Contact data such as address, email address, and telephone number.
Account and transaction data including customer references, invoices, payment records, and service history.
Contractual data such as rental agreements, storage unit details, access terms, and related correspondence.
Payment data such as bank account details or card-related information, where necessary for billing and refunds.
Security and access data including entry logs, access timestamps, CCTV images, alarm records, and related security monitoring information.
Communication data including messages, complaints, queries, and records of customer support interactions.
Technical data such as device, browser, and usage information if you interact with digital systems we use for administration or security.

We generally do not seek to collect special category data unless there is a clear and lawful reason to do so, and only where necessary. We ask that you do not provide such information unless specifically requested.

3. How We Collect Personal Data

We may collect personal data directly from you when you complete forms, enter into a storage agreement, make payments, contact us, or use our services. We may also collect data automatically through security systems, access control systems, and other operational tools used to protect our premises and manage customer accounts. In some cases, we may receive information from third parties, such as payment processors, identity verification providers, insurers, legal advisers, or public authorities where permitted by law.

4. Why We Use Personal Data

We process personal data for the following purposes:

To register customers and manage storage agreements.
To verify identity and prevent fraud.
To process payments, issue invoices, and handle refunds.
To provide access to storage facilities and maintain security.
To communicate about account matters, service updates, and administrative notices.
To respond to enquiries, complaints, and customer support requests.
To maintain records, comply with legal obligations, and enforce contractual rights.
To protect our property, customers, staff, and visitors through lawful security measures.
To improve the efficiency and reliability of our services.

5. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Rainham Storage relies on the following lawful bases:

Performance of a Contract

We process personal data where it is necessary to enter into or perform a storage contract, manage your account, provide access to your storage unit, process payment, and carry out related administrative tasks.

Legal Obligation

We may process personal data where required to comply with legal or regulatory obligations, such as accounting, taxation, fraud prevention, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This includes security monitoring, CCTV use, customer account management, service improvement, business record-keeping, and protecting our premises and customers from unlawful activity. Where we rely on legitimate interests, we carefully balance our needs against your privacy rights.

Consent

In limited situations, we may rely on your consent, for example where it is appropriate for optional marketing communications or specific processing activities. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this policy. These parties may act as processors or, in some cases, as independent controllers. Processors are only permitted to process data on our instructions and must take appropriate security measures.

Examples of processors and other recipients include:

IT and cloud service providers who support our systems, storage, and communications.
Payment processing providers who handle billing and financial transactions.
Security service providers who assist with alarms, access control, or CCTV-related services.
Accountancy and audit providers who assist with financial administration and compliance.
Legal and professional advisers where advice or representation is needed.
Insurance providers when claims or risk management matters arise.
Public authorities where disclosure is required by law or necessary to protect rights, safety, or legal interests.

Where personal data is shared with processors, we require appropriate contractual safeguards to ensure compliance with data protection law. We do not sell personal data.

7. International Transfers

If any processor or service provider processes personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to maintain a level of data protection consistent with UK requirements.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing. In general:

Customer account and contract records are retained for the duration of the relationship and for a period afterwards where needed for legal claims or compliance.
Financial and tax records are typically retained for the period required by law.
Security logs and CCTV footage are retained for a limited period unless required for an investigation, incident response, or legal matter.
Customer communications may be retained for as long as necessary to manage the enquiry or resolve disputes.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access restrictions, secure storage, staff training, monitoring systems, and contractual protections with service providers. While no system can be guaranteed completely secure, we work to ensure that any risk to your data is minimised.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in certain situations.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to object to processing based on legitimate interests or direct marketing.
The right to withdraw consent where processing is based on consent.
The right to lodge a complaint with the Information Commissioner’s Office if you believe your rights have been infringed.

Some rights are subject to legal conditions and exemptions. For example, we may need to retain certain information to comply with legal obligations or to establish, exercise, or defend legal claims.

11. Automated Decision-Making

We do not generally use automated decision-making that produces legal or similarly significant effects concerning customers. If this position changes, we will update this policy and provide the information required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process personal data. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically so they remain informed about how their information is used.

13. Summary of Our Commitment

Rainham Storage will only process personal data where it is lawful, fair, and necessary. We collect only the information needed to provide secure and reliable storage services, we keep it only for as long as required, and we share it only with trusted processors or other recipients where there is a valid reason. We respect your privacy rights and aim to handle all personal data with care, transparency, and accountability.

This policy applies to all Rainham Storage customers in area.