Storage Osidge Privacy Policy
This Privacy Policy explains how Storage Osidge collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Storage Osidge customers within our service area, as well as individuals who contact us with enquiries, visit our premises, or use our services in any way.
We are committed to processing personal data fairly, lawfully and transparently, in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Personal Data We Collect
We collect and process personal data that is necessary for the provision and management of our storage services and the operation of our business. The types of information we may collect include:
Identification details, such as full name and title.
Contact details, such as postal address and correspondence address.
Account information, such as customer reference numbers, contract details, payment history and service usage.
Financial information, such as limited billing information required to process payments, for example partial card details held by our payment processor and records of transactions.
Communication records, such as emails, letters, forms and notes of telephone conversations relating to enquiries, bookings, payments or complaints.
Security and access information, such as records of visits to our site, entry log data and, where used, CCTV footage for the security of our premises.
Technical information, such as basic device and usage data where you access our online content or digital tools, to enable the site to function and to maintain security.
We only collect the personal data that we reasonably need for the purposes described in this Privacy Policy.
How We Collect Personal Data
We may collect personal data directly from you when you contact us to request information or a quote, enter into a storage agreement or other contract with us, make a payment, visit our premises, or communicate with us by any channel.
We may also receive personal data indirectly from third party service providers that support our business operations, such as payment processors or booking platforms, where this is necessary to complete a service you have requested.
Lawful Basis for Processing
Storage Osidge relies on the following lawful bases for processing personal data under GDPR:
Contract. We process personal data where this is necessary to enter into or perform a contract with you, for example to set up and administer your storage agreement, manage payments, provide customer support, and communicate with you about your account.
Legal obligation. We process personal data where necessary to comply with our legal and regulatory obligations, for example in relation to tax, accounting, record keeping, insurance, security, and health and safety requirements.
Legitimate interests. We process personal data where this is necessary for our legitimate business interests, and where your interests and fundamental rights do not override those interests. This includes activities such as ensuring site and asset security, preventing fraud, managing business operations, improving our services, and responding to enquiries and complaints.
Consent. In limited circumstances we may rely on your consent, for example where we send certain types of optional marketing communications. Where processing is based on consent, you have the right to withdraw that consent at any time.
Purposes of Processing
We use personal data for the following purposes:
To provide storage and related services, including setting up and managing your account, reserving units, controlling access, and handling enquiries.
To process payments, issue invoices, and maintain accurate financial records.
To manage our relationship with you, including handling queries, feedback, complaints and disputes.
To protect our premises, staff, customers and property, including by operating access controls and, where in place, CCTV monitoring in and around our facilities.
To comply with legal, regulatory and insurance obligations, including the prevention and detection of crime or fraud.
To manage and improve our business operations, services and customer experience.
To send you important service communications, such as changes to terms, notices about your unit or account, and safety information.
Data Retention
We keep personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our legal, accounting or reporting obligations.
In general, we retain customer account and contract information for a period after the end of the customer relationship, to respond to any queries or disputes and to meet statutory retention requirements. Financial records and invoices are typically retained for the period required by tax and company law.
CCTV footage, where used, is retained for a limited period necessary for security and incident investigation purposes, unless it is required to be kept longer in connection with a specific investigation or legal claim.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be linked to an identifiable individual.
Data Sharing and Processors
We do not sell your personal data. We may share personal data with third parties where this is necessary for the purposes set out in this Privacy Policy, or where we are required to do so by law.
We may share personal data with the following categories of recipients:
Service providers acting as data processors, who provide services such as payment processing, secure data hosting, document storage, IT support, accounting support or customer communication tools. These providers only process personal data on our instructions and are bound by contractual obligations to protect it.
Professional advisers, such as legal advisers, accountants, or insurers, where necessary in the course of the services they provide to us.
Law enforcement bodies, regulators, courts or other authorities, where we are legally required to share information or where it is necessary to protect our rights, property or the safety of our customers or staff.
In the event of a business reorganisation or transfer of operations that affects Storage Osidge, we may need to transfer relevant customer data to a new operator, subject to appropriate safeguards and only where permitted by law.
Where we use data processors, we take steps to ensure that they provide appropriate technical and organisational measures to protect personal data and process it only in accordance with GDPR and our written instructions.
International Transfers
Where we need to transfer personal data outside the United Kingdom or the European Economic Area, we will do so in accordance with applicable data protection laws. This may involve using standard contractual clauses or other appropriate safeguards to ensure that your data receives an adequate level of protection.
Security of Your Personal Data
We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction.
Measures may include access controls, secure storage, encryption where appropriate, staff training and policies on data handling. While we take reasonable steps to protect personal data, no system can be completely secure, and we cannot guarantee absolute security of information transmitted to or from us.
Your Data Protection Rights
Under GDPR and applicable data protection laws, you have a number of rights in relation to the personal data that we hold about you. These rights may be subject to certain conditions and legal exemptions.
Right of access. You have the right to request confirmation of whether we process your personal data and to request a copy of that data, together with certain information about how we use it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure. You have the right to request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing.
Right to restriction of processing. You have the right to request that we restrict our processing of your personal data in certain situations, for example while we assess a request for rectification or objection.
Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as the lawful basis, and you consider that your rights override our interests. You also have an absolute right to object to direct marketing.
Right to data portability. In certain cases, you have the right to receive the personal data you have provided to us in a structured, commonly used, machine readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent for processing, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing before consent was withdrawn.
If you wish to exercise any of these rights, please contact us using the usual communication channels you use as a Storage Osidge customer. We may need to verify your identity before responding to your request.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can seek to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any changes will take effect when the updated version is made available. We recommend that you review this Privacy Policy periodically so you remain informed about how we process personal data.
This Privacy Policy applies to all Storage Osidge customers and users of our services within our area and is intended to provide clear information about our approach to data protection and privacy.
