Privacy Policy - Beckton Storage

This Privacy Policy explains how Beckton Storage collects, uses, stores, shares, and protects personal data in connection with our storage services. It applies to all Beckton Storage customers in the area, including prospective customers, current customers, former customers, and any individuals who interact with us in relation to our services. We are committed to handling personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

By using our services or communicating with us, you acknowledge that your personal data may be processed as described in this policy. We encourage you to read this Privacy Policy carefully so that you understand how your information is handled.

1. Data We Collect

We collect and process personal data only where necessary for the operation of our storage services, legal compliance, and legitimate business interests. The types of information we may collect include:

Identity information such as your name, date of birth, and proof of identity where needed.
Contact information such as address, email address, and phone number.
Account and contract information including booking details, tenancy records, payment status, and service preferences.
Payment information necessary to process transactions, invoices, refunds, and recurring charges.
Security and access information such as entry logs, key access records, and CCTV images where applicable.
Communication records including correspondence, complaints, queries, and service updates.
Technical information collected when you interact with digital systems, such as IP address, device type, and usage patterns.

We may also process limited sensitive or special category data if required by law or if you provide it voluntarily and we have a lawful basis to do so. Where this occurs, we apply additional safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

to set up and manage storage agreements;
to verify identity and prevent fraud;
to process payments and maintain accurate accounts;
to communicate service information, updates, and notices;
to maintain site security and protect property;
to meet legal, tax, accounting, and regulatory obligations;
to handle disputes, complaints, and customer support requests;
to improve our services, systems, and operational procedures;
to enforce our contractual rights and manage risk.

We process only the amount of data needed for these purposes and take steps to ensure it is relevant, accurate, and kept up to date where appropriate.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Beckton Storage relies on the following bases depending on the context:

Contract

We process your data where it is necessary to enter into or perform a contract with you. This includes setting up storage accounts, managing bookings, collecting payments, and providing access to your unit.

Legal Obligation

We may process data where required to comply with legal and regulatory obligations, including tax, accounting, fraud prevention, and responding to lawful requests from authorities.

Legitimate Interests

We may process data for our legitimate interests where those interests are not overridden by your rights and freedoms. Examples include site security, CCTV monitoring, customer service, internal administration, service improvement, and prevention of misuse or unlawful activity.

Consent

In limited situations, we may rely on your consent, for example where you choose to receive certain optional communications or where special category information is involved and consent is the appropriate lawful basis. You may withdraw consent at any time where processing is based on consent.

Vital Interests

In rare cases, we may process personal data to protect someone’s vital interests, such as in an emergency involving health or safety.

4. Sharing and Processors

We do not sell your personal data. However, we may share it with trusted third parties where necessary to operate our services and meet legal obligations. These third parties act as data processors or independent controllers depending on the service provided.

Processors may include:

payment service providers;
IT hosting, cloud storage, and software providers;
security monitoring and CCTV service providers;
accounting and bookkeeping providers;
customer communication and support systems;
maintenance, inspection, and facilities management contractors;
professional advisers such as auditors, insurers, and legal advisers.

Where a processor acts on our behalf, we require appropriate contractual safeguards, including confidentiality obligations, data security measures, and restrictions on using data for their own purposes. We only appoint processors that provide sufficient guarantees to meet GDPR standards.

We may also disclose personal data where necessary to law enforcement, regulators, courts, or other public authorities when required by law or when we reasonably believe disclosure is necessary to protect our rights, customers, staff, property, or the public.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reason it is held.

Contract and account records are generally retained for the duration of the customer relationship and for a reasonable period afterwards to manage disputes, claims, and recordkeeping obligations.
Payment and financial records are kept in line with tax and accounting rules.
Security records such as access logs or CCTV footage are retained for limited periods unless needed for an investigation, incident response, or legal claim.
Correspondence and complaints are retained for as long as necessary to resolve the matter and maintain business records.

When data is no longer required, we securely delete, anonymise, or archive it in accordance with our retention practices. We regularly review data to ensure it is not kept for longer than needed.

6. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where suitable, staff training, secure storage, and monitoring of systems and premises.

While no system can be guaranteed to be completely secure, we take data protection seriously and aim to reduce risk through regular review and improvement of our safeguards.

7. International Transfers

If any service provider processes data outside the UK, we ensure suitable transfer safeguards are in place in accordance with applicable data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protective measures.

8. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. These rights may be subject to legal restrictions or exceptions, but we will always respond appropriately and transparently.

Right of access - you can request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - in certain circumstances, you can request deletion of your data.
Right to restriction - you can ask us to limit processing in some situations.
Right to data portability - where applicable, you may request your data in a structured, commonly used format.
Right to object - you may object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.
Right not to be subject to automated decision-making - you have protections where decisions are made solely by automated means with legal or similarly significant effects.

To exercise your rights, you may need to provide sufficient information to help us verify your identity. We will respond within the time limits required by law.

9. Children’s Data

Our services are intended for adults and business or residential customers who can lawfully enter into storage arrangements. We do not knowingly collect personal data from children unless it is necessary for a legitimate operational or legal purpose, and only with appropriate safeguards.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any updated version will apply from the date it is made effective. We recommend reviewing this policy periodically to stay informed about how we handle personal data.

11. Summary of Our Commitment

Beckton Storage is committed to responsible, lawful, and transparent data handling. We collect only what we need, use it for clearly defined purposes, share it only where necessary, and keep it only for as long as required. We respect your rights and aim to maintain the trust of every customer in the area we serve. Protecting privacy is an important part of how we operate.