Storage Lee Privacy Policy Overview
This Privacy Policy explains how Storage Lee collects, uses, stores and shares personal data when you use our services. It applies to all Storage Lee customers and prospective customers in our service area, as well as visitors to our premises and individuals who contact us about our services. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation and any applicable local data protection laws.
Who This Policy Applies To
This Privacy Policy applies to all Storage Lee customers in our local service area, including individuals and businesses who rent or enquire about storage units, use our related services, or otherwise interact with us. It also applies to visitors to our premises, people who contact us by any communication method, and representatives of suppliers or business partners.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with Storage Lee. The categories of data we may collect include:
Identification data, such as your full name, title, date of birth and, where legally required or necessary for security, identification document details.
Contact data, such as your home or business address, billing address, and other contact information you choose to provide to us.
Account and service data, such as unit numbers, contract details, rental history, payment status, communication preferences, and details of services you have purchased or enquired about.
Financial and transaction data, such as partial payment card details processed via our payment provider, payment history, invoices, credits and refunds. We do not store full payment card numbers.
Technical and usage data, such as information about your interactions with our website, basic device data, access dates and times, and cookies or similar technologies where legally permitted and subject to your consent where required.
Security and access data, such as CCTV footage on our premises, access logs for entry systems, and records of incidents or accidents.
Communication data, such as enquiries, complaints, feedback, and any correspondence between you and Storage Lee.
How We Collect Your Data
We collect personal data from you directly when you contact us about our services, request a quote, enter into a contract, make a payment, or visit our premises. We may also collect data automatically when you use our website, for example through cookies or similar technologies, subject to legal requirements. In some cases, we may receive personal data about you from third parties such as payment service providers, credit reference agencies, or law enforcement authorities where this is lawful and necessary.
Lawful Basis for Processing
Storage Lee processes your personal data only where we have a valid lawful basis under data protection law. The main lawful bases we rely on are:
Performance of a contract. We process your personal data to take steps at your request before entering into a contract, to provide storage services, manage your account, handle payments and deliver customer support.
Compliance with a legal obligation. We may need to process your data to comply with legal and regulatory requirements, including tax, accounting, safety and security obligations, and responding to lawful requests from public authorities.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. This may include securing our premises, preventing fraud, managing our operations, improving our services, and maintaining accurate business records.
Consent. In limited cases, we may rely on your consent, for example for certain types of marketing or where cookies require consent. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage and related services, including setting up your account, managing your contract, and handling reservations, renewals and terminations.
To process payments, issue invoices, manage debt collection where necessary, and maintain accurate financial records.
To communicate with you regarding your account, service updates, operational notices, and responses to enquiries or complaints.
To maintain the security of our premises and property, including use of access control systems and CCTV where implemented and legally permitted.
To manage our relationship with you, including customer service, feedback collection and handling of disputes.
To comply with legal and regulatory requirements and cooperate with supervisory authorities or law enforcement where necessary.
To improve our services, internal processes and customer experience, including monitoring usage trends and service performance where this can be done in compliance with data protection laws.
Data Sharing and Processors
Storage Lee does not sell your personal data. We may share your data with third parties where necessary for the purposes described in this Privacy Policy and where permitted by law. These parties may include:
Payment service providers and banks, to process payments and manage refunds or chargebacks.
IT and cloud service providers, who host our systems, provide software tools, or support our technical infrastructure.
Professional advisers, such as accountants, auditors or legal advisers, where necessary for the provision of their services.
Security and maintenance providers, who help maintain and secure our premises and systems.
Debt collection agencies or tracing agents, where necessary to recover unpaid amounts in accordance with your contract and applicable law.
Public authorities, regulators, law enforcement or courts, where we are legally required or have a lawful basis to disclose your data.
When we use third parties to process personal data on our behalf, they act as processors and are required to follow our instructions, protect your data, and comply with data protection laws. We only engage processors who can provide sufficient guarantees regarding the implementation of appropriate technical and organisational measures.
Data Retention
Storage Lee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements. Retention periods may vary depending on the type of data and the context of processing.
Typically, we keep customer account and contract information for a defined number of years after the end of the contractual relationship, in line with limitation periods for legal claims and statutory retention obligations. Financial records are generally retained for the period required by tax and accounting laws. CCTV footage and access logs are retained for shorter periods unless a longer retention is required for the investigation of incidents or legal proceedings.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that an adequate level of protection is in place in accordance with data protection laws. This may involve using countries that have been recognised as providing an adequate level of protection, or implementing appropriate safeguards such as standard contractual clauses or equivalent mechanisms. Further details about any international transfers and the safeguards in place can be provided on request.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal limitations, but we will respect and facilitate them as required. Your rights include:
Right of access. You can request confirmation as to whether we process your personal data and obtain a copy of the data, together with related information.
Right to rectification. You can ask us to correct or complete inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can request the deletion of your personal data, for example where it is no longer needed for the original purpose or where you withdraw consent and there is no other legal basis for processing.
Right to restrict processing. You can request that we limit the processing of your personal data in specific situations, such as while we are assessing a correction request or an objection.
Right to data portability. In some cases, you can request that we provide you with personal data you have given us in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to object. You can object at any time to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your personal data has been processed in a way that does not comply with data protection law. We encourage you to contact us first so we can address your concerns.
Security of Your Personal Data
Storage Lee takes appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Measures may include access controls, staff training, secure configurations, encryption or pseudonymisation where appropriate, and regular review of our security practices. While we take reasonable steps to protect your data, no system can be completely secure and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. When we make significant changes, we will take reasonable steps to inform you, which may include updating the version on our website or notifying you through other appropriate channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
