Storage Leaves Green Customer Privacy Policy
This Privacy Policy explains how Storage Leaves Green collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also explains the lawful bases on which we process personal data, how long we keep it, the role of our data processors, and the rights you have under data protection law, including the UK General Data Protection Regulation and related legislation.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Leaves Green customers and individuals who enquire about, use, or are otherwise connected with our storage services in the area in which we operate. By engaging with us, for example by making an enquiry, entering into a storage agreement, or accessing our site and facilities, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We collect and process different types of personal data depending on your relationship with us and how you interact with our services. This may include:
Identification and contact details such as your name, postal address, billing address, contact address, date of birth, and any identification documents you provide for verification and security purposes.
Contact and communication details such as your email address, any online account username, and records of communications with us, including enquiries, complaints, and feedback.
Contract and billing information such as details of the storage unit you rent, the duration of your contract, payment history, billing preferences, and information necessary for invoicing and account management.
Access and security information such as access codes, entry and exit times recorded by our access systems, CCTV images within and around our facilities where in use, and records of incidents or security reports.
Technical and usage data where applicable, such as information about how you use our website or online services, including device identifiers, approximate location, and log data collected via necessary cookies or similar technologies.
How We Collect Personal Data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, access our facilities, or communicate with us by any means. We may also receive personal data from third parties such as payment service providers, credit reference agencies where relevant, or other service providers engaged in relation to your contract with us.
Lawful Basis for Processing
We only process personal data where we have a lawful basis to do so. Depending on the context, we rely on one or more of the following bases:
Performance of a contract. We process personal data as necessary to enter into and perform our contract with you, including arranging your storage unit, managing your account, taking payment, providing access to our facility, and handling enquiries or service requests.
Compliance with a legal obligation. We process personal data where necessary to comply with our legal and regulatory obligations, such as tax and accounting requirements, financial reporting, prevention and detection of crime, and responding to lawful requests from authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests or those of a third party, and where these interests are not overridden by your rights and freedoms. This may include improving our services, ensuring the security and safety of our premises, preventing fraud, managing business operations, and maintaining appropriate records.
Consent. In limited circumstances, we may rely on your consent, for example for optional marketing communications by electronic means or for the use of certain non-essential cookies. Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
How We Use Personal Data
We use personal data for the following purposes:
To provide storage services, including setting up your account, managing reservations, issuing contracts, processing payments, arranging access, and providing customer support.
To maintain security and safety at our facilities, including verifying identity, controlling access, monitoring CCTV where in use, and investigating incidents, accidents, or suspected unlawful activity.
To manage our relationship with you, including communicating important information about your contract, changes to terms and conditions, payment reminders, and service updates.
To operate and improve our business, including internal administration, financial management, quality assurance, staff training, and service development.
To comply with legal and regulatory obligations, including record keeping, responding to legitimate requests from law enforcement or regulatory bodies, and exercising or defending legal claims.
To send you marketing communications about our services only where permitted by law and, where required, with your consent. You can opt out of marketing communications at any time.
Data Retention
We keep personal data only for as long as is reasonably necessary for the purposes for which it was collected, and to meet any legal, regulatory, accounting, or reporting requirements.
In general, we will retain customer account and contract data for a defined period after the end of your storage agreement to handle any queries, disputes, or legal claims. Financial and transaction records are typically retained for the period required by applicable tax and accounting laws. CCTV footage, access logs, and security records are retained for shorter periods, unless an incident or investigation requires longer retention.
When personal data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged under written contracts and are only permitted to process personal data following our instructions and for specified purposes. They must implement appropriate security measures and are not allowed to use the data for their own purposes.
Categories of processors may include providers of payment processing and merchant services, providers of IT and cloud hosting services, providers of access control and security systems, providers of customer management and communication tools, and professional advisers such as accountants or legal advisers working under a duty of confidentiality.
We may also share personal data with other third parties where required by law, in connection with legal proceedings, or when we believe disclosure is necessary to protect our rights, the safety of our customers, or the security of our facilities. If we are involved in a business sale or reorganisation, personal data may be transferred as part of that transaction subject to appropriate safeguards.
International Data Transfers
Where we transfer personal data outside the United Kingdom or the European Economic Area, we take steps to ensure that an adequate level of protection is in place. This may involve relying on an adequacy regulation, using standard contractual clauses approved by regulators, or applying other appropriate safeguards in accordance with data protection law.
Data Security
We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include secure access controls, encryption, regular system monitoring, staff training, and procedures for responding to suspected data breaches.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
The right of access. You can request confirmation of whether we process your personal data and obtain a copy of the data, along with information about how it is used.
The right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
The right to erasure. In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies.
The right to restriction of processing. You can ask us to restrict the processing of your personal data in certain situations, for example while we are considering a request to rectify or erase your data.
The right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine readable format or transfer it directly to another controller where feasible.
The right to object. You can object at any time to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds. You also have the right to object at any time to direct marketing.
The right to withdraw consent. Where we rely on consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your data protection rights have been infringed.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any changes will take effect when the updated policy is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how we process personal data.
