Storage Freezywater Privacy Policy
This Privacy Policy explains how Storage Freezywater collects, uses, stores and protects personal data. It applies to all Storage Freezywater customers and prospective customers in our service area, as well as visitors to our premises and users of our services. We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws.
Who We Are And Scope Of This Policy
Storage Freezywater is a storage service provider offering self-storage and related services. For the purposes of data protection law, Storage Freezywater is the data controller for the personal data described in this Privacy Policy. This Privacy Policy applies to all interactions you have with us, including making enquiries, entering into storage agreements, visiting our facilities, or using any related services we provide in our operating area.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. The types of data we may collect include:
Identification and contact details, such as your name, postal address, billing address, and other contact details you provide to us.
Account and contract information, such as customer account numbers, storage unit details, access codes, contract start and end dates, payment history, and correspondence relating to your storage agreement.
Payment and billing details, such as payment method information and transaction records. We do not store full card details when payment is processed via secure payment providers.
Usage and access data, such as access logs to our facilities, times and dates of entry, and information generated by security systems located on our premises.
Security and CCTV footage, where you enter areas covered by video surveillance in or around our facilities.
Communication data, such as enquiries, complaints, feedback, and any other communications you send to us or have with our team, whether in person or through other channels.
Technical data, where applicable, such as device identifiers, basic technical information, and log data generated when you interact with any online service we provide.
How And Why We Use Your Personal Data
We use your personal data only for specified, explicit and legitimate purposes and do not process it in a way that is incompatible with those purposes. Our main purposes for processing include:
To provide storage services, including setting up your customer account, preparing and managing your storage contract, allocating and managing storage units, and administering your use of our facilities.
To handle payments and billing, including taking payments, managing invoices, dealing with late or missed payments, and maintaining financial records for accounting and legal purposes.
To manage our relationship with you, including responding to enquiries, sending service notices or updates about your storage agreement, handling complaints, and providing customer support.
To ensure safety and security, including monitoring access to our facilities, operating CCTV and other security systems, preventing and investigating potential incidents, and protecting our customers, staff and property.
To meet legal and regulatory obligations, including record keeping, responding to lawful requests from authorities, preventing fraud or misuse, and complying with relevant laws and regulations.
To improve our services, including internal analysis to help us manage capacity, improve customer experience and develop our services, using aggregated or anonymised data where possible.
Lawful Bases For Processing
We rely on one or more of the following lawful bases to process your personal data:
Contract. Processing is necessary to enter into, or perform, our contract with you, for example to provide storage services, manage your account, and handle payments.
Legal obligation. Processing is necessary to meet our legal and regulatory obligations, such as keeping certain records, complying with tax requirements, and responding to lawful requests from public authorities.
Legitimate interests. We process certain data where it is necessary for our legitimate business interests or those of a third party, and where your rights and freedoms are not overridden. This includes using CCTV for security, managing access logs, improving our services, and protecting our property and systems.
Consent. In limited cases, we may rely on your consent, for example for certain optional communications or where consent is required by law. Where we rely on consent, you can withdraw it at any time.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods depend on the type of data and the context in which it was collected. In general:
Customer and contract records are kept for the duration of your agreement and for a reasonable period afterwards to handle queries, resolve disputes, maintain accurate records, and comply with legal obligations.
Payment and financial records are retained for periods required by tax and accounting laws.
Access logs and security data are retained for a period necessary for security monitoring, incident investigation, and the protection of our rights, after which they are securely deleted or anonymised.
CCTV footage is retained for a limited period, unless it is required for investigation of an incident, in which case it may be kept for as long as needed for that purpose.
When data is no longer required, we will securely delete or anonymise it, ensuring that it can no longer be linked back to you.
Data Processors And Sharing Of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may include:
IT and system providers that host or support our customer management, access control, or payment systems.
Payment service providers that process payments securely.
Security service providers involved in our security and CCTV operations and facility access systems.
Professional advisers such as accountants or legal advisers where necessary for our business operations or to protect our legal interests.
These processors are only permitted to process your personal data according to our instructions and for the purposes described in this Privacy Policy. They are required to implement appropriate technical and organisational measures to protect your data.
We may also share your data with authorities, regulators, or law enforcement agencies where we are required or permitted to do so by law, or where it is necessary to protect our rights, property, or the safety of our customers and staff.
We do not sell your personal data to third parties.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, in accordance with data protection laws. These safeguards may include using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection. Where this occurs, we will take steps to ensure that your rights continue to be protected.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. These include:
The right of access. You can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how it is processed.
The right to rectification. You can ask us to correct or complete inaccurate or incomplete personal data that we hold about you.
The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
The right to restriction. You can ask us to restrict the processing of your personal data in certain situations, for example while we verify the accuracy of data you believe to be incorrect.
The right to data portability. In some cases, you can request that we provide your personal data in a structured, commonly used and machine readable format, and that it be transmitted to another controller where technically feasible.
The right to object. You can object to processing based on our legitimate interests where you believe your fundamental rights and freedoms outweigh those interests. We will stop processing unless we have compelling legitimate grounds to continue or we need the data to establish, exercise or defend legal claims.
Where processing is based on consent, you also have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing before consent was withdrawn.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Measures may include access controls, physical security for our facilities, secure storage systems, staff training, and procedures for handling data incidents. While no system can be completely secure, we work to ensure that the safeguards we implement are appropriate to the risks.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. When we make changes, we will update the date of the latest version and make the updated policy available through our usual channels. We encourage you to review this Privacy Policy periodically so that you remain informed about how we process and protect your personal data.
