Privacy Policy - Osidge Storage

This Privacy Policy explains how Osidge Storage collects, uses, stores, shares, and protects personal data. It applies to all Osidge Storage customers in the area, including individuals, households, and business customers who use our storage services, related facilities, or associated administrative services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, Osidge Storage acts as the data controller for the personal data described in this policy. This means we determine the purposes and means of processing personal data relating to our customers, prospective customers, suppliers, and website or service users.

2. Information we collect

We collect only the data that is necessary for providing storage services, managing our business, meeting legal obligations, and protecting our legitimate interests. The personal data we may collect includes:

Identity data such as your name, title, and date of birth where needed for verification.
Contact data such as postal address, email address, and telephone number.
Account and contract data such as booking details, unit allocation, payment status, and service preferences.
Financial data such as billing information and transaction records.
Identification and verification data where required for fraud prevention, security, or compliance checks.
Access and security data such as entry logs, CCTV footage, alarm records, and site access history.
Correspondence data including communications you send to us by email, phone, or in writing.
Technical data if you use our digital services, including IP address, device information, and usage logs.

We do not intentionally collect special category personal data unless you choose to provide it or it is required by law. If such data is received, we will apply additional safeguards and only process it where permitted under data protection law.

3. How we use your data

We use personal data to operate our storage services and to manage our relationship with customers. This may include:

creating and administering customer accounts;
processing bookings, payments, and renewals;
verifying identity and preventing fraud;
maintaining site safety and security;
responding to enquiries and resolving disputes;
meeting legal, regulatory, accounting, and tax obligations;
improving the quality and efficiency of our services;
protecting our rights, staff, customers, and property.

We only use data for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose.

4. Lawful basis for processing

We will only process personal data where we have a valid lawful basis under UK GDPR. Depending on the context, our lawful bases may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing storage space, managing bookings, issuing invoices, and administering customer accounts.

Legal obligation

We may process data to comply with legal duties, including tax, accounting, safety, record-keeping, anti-fraud, and regulatory obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include securing our premises, maintaining CCTV, preventing crime, managing service quality, and defending legal claims.

Consent

In limited cases, we may rely on your consent, for example where the law requires consent for certain communications or optional services. You may withdraw consent at any time, where applicable.

5. Sharing your data and processors

We may share personal data with trusted third parties who help us deliver and manage our services. These third parties act as processors or, in some cases, independent controllers. We require processors to handle data securely, only on our instructions, and in compliance with applicable law.

Examples of processors may include:

IT and cloud service providers who host our systems, data storage, and operational software;
payment service providers who process card or electronic payments;
security providers who support monitoring, alarm systems, or CCTV infrastructure;
accounting and invoicing providers who assist with financial administration;
professional advisers such as legal, tax, audit, or insurance advisers;
delivery or logistics providers where needed to support service operations;
public authorities where disclosure is required by law or necessary to protect rights and safety.

We do not sell your personal data. Where data is shared with a processor, we implement appropriate contractual and technical safeguards. If data must be transferred outside the UK, we will ensure appropriate transfer protections are in place.

6. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of data and our legal obligations. In general:

customer account and contract records are retained for the duration of the service relationship and for a reasonable period afterwards;
financial and tax records are retained for the period required by law;
security records, including CCTV and access logs, are retained only for as long as necessary for safety, security, and incident management;
correspondence and complaint records are retained for the time needed to resolve issues and defend or establish legal claims.

When personal data is no longer required, it will be securely deleted, anonymised, or archived in line with our retention procedures.

7. Security of personal data

We take the protection of personal data seriously and use appropriate technical and organisational measures to safeguard information against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff confidentiality obligations, system monitoring, and periodic security reviews. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

8. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal conditions or exemptions. They include:

Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete data.
Right to erasure — you may request deletion of your data in certain circumstances.
Right to restriction — you may ask us to limit how we use your data in certain situations.
Right to data portability — you may request transfer of data you provided to us in a structured, commonly used format, where applicable.
Right to object — you may object to processing based on legitimate interests, and in some cases to direct marketing.
Right to withdraw consent — where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data has been handled unlawfully or unfairly.

9. Children’s data

Our services are intended for adults and business users. We do not knowingly collect personal data from children except where necessary and lawful in the context of a customer relationship. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, service arrangements, or operational practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we process personal data.

11. Summary of our approach

Osidge Storage is committed to processing personal data responsibly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, retain it for limited periods, and share it only with trusted processors or where required by law. We also respect your rights and aim to make it easy for customers to understand how their information is handled. This policy applies to all Osidge Storage customers in the area and supports our commitment to privacy, security, and compliance.