Storage Belvedere Privacy Policy
This Privacy Policy explains how Storage Belvedere collects, uses, stores, and protects personal data of customers and prospective customers. It applies to all Storage Belvedere customers and users of our services in our operating area, whether you contact us online, by post, or in person at our facilities.
Who We Are And Scope Of This Policy
Storage Belvedere is the data controller for the personal data described in this Privacy Policy. As the data controller, we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with applicable data protection laws, including the General Data Protection Regulation, commonly referred to as the GDPR, and relevant local data protection legislation.
This Privacy Policy covers personal data relating to individuals who rent storage units, make enquiries about our services, visit our facilities, or otherwise interact with Storage Belvedere in our operating area. By using our services or providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We only collect personal data that is necessary for the purposes described in this Privacy Policy. The types of information we may collect include:
Identification and contact details, such as full name, residential address, correspondence address, date of birth where required for verification, and contact information such as your preferred contact method.
Contract and account information, such as details of your storage unit rental, unit number, contract start and end dates, payment status, billing history, security deposit information, and communications relating to your account.
Payment information, such as payment method details and transaction information processed via secure payment processors. We do not store full payment card details, but we may retain limited information necessary for verification, refunds, and accounting.
Access and security information, such as number plate information where automatic recognition systems are in use, entry and exit logs, and records from access control systems used to safeguard our facilities.
Video surveillance images, as our facilities may be monitored by closed-circuit television systems for security and safety purposes. CCTV is in operation in designated areas and signage explains where recording takes place.
Communication and enquiry information, such as details you provide when you contact us for quotations, support, or complaints, including the content and date of your communications and any follow-up correspondence.
Lawful Bases For Processing Personal Data
We will only process your personal data when we have a valid lawful basis under the GDPR. Depending on the specific processing activity, we rely on the following lawful bases:
Performance of a contract: We process your personal data to take steps at your request before entering into a storage agreement and to perform our contract with you, including managing bookings, providing access to your storage unit, handling payments, and administering your account.
Compliance with legal obligations: We process certain data to comply with laws and regulations, such as accounting, tax, and record-keeping requirements, and to respond to lawful requests from authorities.
Legitimate interests: We may process your personal data where this is necessary for our legitimate business interests and where your rights and freedoms are not overridden. This includes securing our facilities, preventing and investigating fraud or misuse, managing and improving our services, and maintaining accurate records.
Consent: In limited cases, we may rely on your consent, for example for certain forms of marketing communications where required by law. When processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide and manage storage services, including setting up and maintaining your account, administering your contract, enabling facility access, and managing renewals or changes to your contract.
To communicate with you about your storage arrangements, such as sending information about payments due, contract renewals, access changes, or service updates essential to your use of the facility.
To ensure safety and security at our facilities, including the operation of CCTV and access systems, monitoring for unauthorised access, and investigating incidents or complaints.
To handle enquiries, feedback, and complaints, ensuring that we can respond to your questions and maintain records of communications for quality and training purposes.
To comply with legal and regulatory requirements, including maintaining accounting records, cooperating with lawful requests from authorities, and defending our legal rights where necessary.
To carry out internal management, planning, and reporting, such as business analytics and service improvement, provided such processing does not unduly impact your privacy.
Data Processors And Sharing Of Personal Data
We do not sell your personal data. We may share personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged under written contracts requiring them to process your data only in accordance with our instructions, to implement appropriate technical and organisational measures to protect your data, and to assist us in meeting our GDPR obligations.
Categories of data processors may include secure payment service providers, information technology and cloud service providers, customer relationship management system providers, and physical security and CCTV system providers. These processors help us manage bookings, process payments, operate access systems, maintain IT infrastructure, and provide customer service tools.
We may also share personal data where required by law, for example with law enforcement authorities, regulatory bodies, or courts when we are under a legal obligation to disclose information or when necessary to establish, exercise, or defend legal claims.
If there is a corporate restructuring, transfer, or merger involving our business, personal data may be disclosed to third parties involved in that transaction, subject to appropriate confidentiality protections and in accordance with applicable data protection laws.
International Data Transfers
Where our data processors or service providers are located outside the European Economic Area or process data in other countries, we ensure that appropriate safeguards are in place to protect your personal data in line with GDPR requirements. These safeguards may include the use of standard contractual clauses approved by the European Commission or other legally recognised transfer mechanisms designed to ensure an adequate level of protection.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period depends on the type of data and the context in which it is processed.
Generally, we retain customer contract and billing records for a period required by tax and accounting laws after the end of your contract. CCTV recordings and access logs are retained for shorter periods, typically only as long as necessary to investigate incidents, ensure security, or comply with legal obligations. Enquiries and correspondence may be stored for a limited period to allow us to respond and to manage our relationship with you.
Once the relevant retention period ends, we securely delete or anonymise your personal data so that it can no longer be associated with you.
How We Protect Your Personal Data
We implement technical and organisational measures designed to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include controlled access to systems, encryption in transit where appropriate, secure storage practices, and regular review of security arrangements. Access to personal data is limited to personnel and processors who need such access for legitimate business purposes and who are bound by confidentiality obligations.
Your Rights Under The GDPR
As an individual whose personal data we process, you have certain rights under the GDPR, subject to applicable legal conditions and exemptions.
Right of access: You have the right to obtain confirmation of whether we process your personal data and to receive a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification: You have the right to request that we correct inaccurate personal data and complete incomplete data where necessary for the purposes of processing.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our processing and we are considering your request.
Right to data portability: When processing is based on consent or on a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format, and that we transmit it to another controller where technically feasible.
Right to object: You may object at any time to processing carried out on the basis of our legitimate interests, including certain types of direct marketing. We will stop processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
Rights related to consent: Where we rely on your consent for processing, you may withdraw that consent at any time. Withdrawal does not affect processing that has already taken place prior to withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed. You are encouraged to contact us first so that we can seek to resolve any concerns directly.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our processing activities, or our services. When we make material changes, we will take appropriate steps to inform you, consistent with the significance of the changes. The most current version of this Privacy Policy will always apply to the processing of your personal data by Storage Belvedere.
