Privacy Policy - Becontreeheath Storage

This Privacy Policy explains how Becontreeheath Storage collects, uses, stores, shares, and protects personal data. It applies to all Becontreeheath Storage customers in area, including current, former, and prospective customers, and to anyone who uses our storage services, makes an enquiry, or interacts with us in connection with those services. We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Becontreeheath Storage provides storage services to individuals and businesses in the area. In this policy, references to we, us, and our mean Becontreeheath Storage as the data controller for the personal data collected and processed in connection with our services.

2. Personal Data We Collect

We collect and process only the personal data that is necessary for running our services, managing accounts, meeting legal obligations, and improving our operations. Depending on how you use our services, we may collect the following categories of information:

Identity data such as name, date of birth, and identification details where needed for verification.
Contact data such as address, email address, and telephone number.
Account and service data such as customer reference numbers, storage unit details, booking information, move-in and move-out dates, and service preferences.
Payment data such as billing details, transaction records, and limited payment information used to process charges.
Security data such as CCTV recordings, access logs, alarm records, and incident reports where applicable.
Communication data such as correspondence, complaints, enquiries, and service-related notes.
Technical data such as IP address, device information, browser type, and basic usage information if you interact with digital systems connected to our services.

We do not intentionally collect special category data unless it is provided to us by you or required in exceptional circumstances. If such data is received, we will treat it with heightened care and process it only where lawful to do so.

3. How We Use Personal Data

We use personal data for the following purposes:

to create and administer customer accounts;
to provide storage services and manage unit allocation;
to process payments and handle invoicing;
to verify identity and prevent fraud;
to maintain site safety, security, and operational integrity;
to communicate about bookings, updates, and service issues;
to respond to enquiries, complaints, and requests;
to comply with legal, tax, accounting, and regulatory obligations;
to enforce our terms and protect our rights, property, customers, and staff;
to improve our services, systems, and customer experience.

We only process data where we have a valid reason to do so, and we take steps to ensure that our use is proportionate and limited to what is necessary.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each processing activity. We rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up your account, managing your storage unit, taking payments, and providing customer support related to the service.

Legal Obligation

We process data where required to comply with legal obligations, including tax law, accounting rules, anti-fraud requirements, safety obligations, and lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms. Examples include preventing fraud, improving security, maintaining records, managing disputes, and protecting our business and customers. Where we rely on legitimate interests, we assess the impact on your privacy and apply safeguards.

Consent

In limited situations, we may rely on your consent, for example where you have explicitly agreed to receive certain optional communications or where it is required for specific processing activities. When consent is used, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Vital Interests and Public Task

These bases are unlikely to apply in normal storage operations, but we may rely on them in rare cases where necessary to protect someone’s vital interests or where we are required to support a public task under law.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers depending on the service provided. We only share what is necessary and require appropriate contractual safeguards.

Examples of processors and recipients may include:

IT and hosting providers that support our systems, databases, and secure data storage.
Payment service providers that handle transaction processing and payment security.
Accounting and bookkeeping providers that assist with financial records and tax compliance.
Security providers that support CCTV, alarm monitoring, and site protection.
Maintenance and facilities providers that assist with building operations and safety-related services.
Professional advisers such as lawyers, auditors, and insurers where necessary for legal, financial, or risk management purposes.
Public authorities where disclosure is required by law or is necessary to protect rights, safety, or legal claims.

Where processors handle personal data on our behalf, they are only allowed to act on our instructions and must implement appropriate security measures. We do not sell personal data.

6. International Transfers

Some of our service providers may process data outside the United Kingdom. If this happens, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent protective measures, to keep your personal data secure and protected to the standard required by law.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, contractual, and operational requirements. Retention periods vary depending on the type of data and the reason for processing.

Customer and contract records are generally retained for the duration of the service relationship and for a reasonable period afterward to handle queries, disputes, and legal claims.
Financial records are kept in accordance with legal and accounting requirements.
Security records such as CCTV footage and access logs are retained only for as long as needed for safety, investigation, and incident management.
Correspondence and complaint records are retained as necessary to resolve issues and maintain business records.

When personal data is no longer required, we will delete it, anonymise it, or securely destroy it.

8. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and monitoring procedures. While no system is completely secure, we work continuously to reduce risks and protect customer information.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the legal basis for processing and the circumstances of the request.

Right of access — you can ask for a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your personal data in certain circumstances.
Right to restriction — you can ask us to limit how we use your data in certain situations.
Right to object — you can object to processing based on legitimate interests, and to direct marketing where applicable.
Right to data portability — you can ask for certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent — where we rely on consent, you may withdraw it at any time.

We will respond to rights requests within the time limits required by law and may need to verify your identity before acting on your request. Some rights may not apply in every case, particularly where we must retain information for legal or contractual reasons.

10. Cookies and Similar Technologies

If we use digital systems or online tools connected to our services, we may use cookies or similar technologies for security, functionality, and basic analytics. Where required, we will provide appropriate information and obtain consent for non-essential cookies. You can manage cookie preferences through your browser settings or any cookie controls we provide.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service arrangements. Any updated version will apply from the date of publication unless stated otherwise. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Additional Information

If you provide personal data about another person, you should ensure that you have the authority to do so and that they understand how their data may be used. Please only provide information that is relevant and necessary for the service. We expect all customers to avoid including unnecessary sensitive information in communications unless it is needed for a clear purpose.

This policy applies to all Becontreeheath Storage customers in area. By using our services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy and applicable data protection laws.

Last updated: This policy should be reviewed and refreshed as needed to remain compliant and accurate.