Storage Coney Hall Privacy Policy
This Privacy Policy explains how Storage Coney Hall collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all individuals who use, or express an interest in using, Storage Coney Hall services in our area.
We are committed to complying with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy is intended to give you clear information about our processing of your personal data and your associated rights.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Coney Hall customers, former customers and potential customers located in our operating area, as well as individuals who contact us with enquiries about our storage services. It also applies to individuals who act on behalf of business customers, such as directors, employees and authorised representatives.
Personal Data We Collect
We collect and process personal data that you provide directly to us, that is generated during the provision of our services, and that we obtain from certain third parties where lawful to do so. The types of personal data we may collect include:
Identification and contact data: name, postal address, billing address, contact address, date of birth, and identifiers such as customer reference numbers.
Communication data: information contained in emails, letters, forms, and any other communications you send to us, along with records of communications between you and Storage Coney Hall.
Contract and account data: information about services you have purchased or enquired about, storage unit numbers, contract dates, payment history, and account preferences.
Payment and billing data: payment method information and transaction records. We do not store full payment card details; where payment cards are used, these are processed via secure payment processors.
Security and access data: information relating to your access to our facilities, including access logs, entry and exit timestamps, and where used, vehicle registration details.
CCTV images: if you visit our storage facilities, your image may be captured on closed circuit television systems used for security and safety purposes.
Technical and usage data: information generated through your interaction with our website or online tools, such as IP address, device details and basic usage statistics, to the extent that such data is considered personal data under applicable law.
Purposes and Lawful Bases for Processing
We only process your personal data where we have a valid lawful basis under data protection law. Depending on the context, we may process your personal data for the following purposes and on the following lawful bases:
To provide storage services and manage your account: including setting up your account, administering your contract, collecting payments, managing access and providing customer support. Lawful basis: performance of a contract or taking steps at your request prior to entering into a contract.
To respond to enquiries and requests: handling questions, quotation requests, complaints and other communications. Lawful basis: performance of a contract or legitimate interests in operating and promoting our services.
To maintain security and safety: operating CCTV at our facilities, monitoring access, and investigating incidents or suspected unlawful activity. Lawful basis: legitimate interests in ensuring the security of our premises, customers and staff, and where relevant, compliance with legal obligations.
To manage billing, payments and accounting: processing payments, preventing fraud, handling arrears and maintaining financial records. Lawful basis: performance of a contract, legitimate interests in managing our business, and compliance with legal and regulatory obligations.
To send service-related communications: such as notices about changes to your contract, facility access, or our terms and conditions. Lawful basis: performance of a contract or legitimate interests in keeping you informed about matters relating to your service.
To send limited marketing communications: where permitted by law, we may contact you about similar services that may be of interest. Lawful basis: legitimate interests in promoting our services or consent where required. You can object to or withdraw from marketing at any time.
To comply with legal and regulatory requirements: including responding to lawful requests from public authorities, maintaining records, and complying with tax, accounting and health and safety obligations. Lawful basis: compliance with legal obligations.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary and lawful, including:
Service providers and data processors: third parties who provide services to us, such as payment processing, IT hosting, software support, document storage, security and CCTV maintenance, and professional advisers such as accountants and legal advisers. These parties act under our instructions and are bound by contractual obligations to protect your personal data.
Public authorities and regulators: where we are legally required to do so, or where the disclosure is necessary to protect our rights, your safety, or the safety of others.
Debt collection and enforcement partners: in the event of non-payment or serious breach of contract, we may share limited personal data with debt collection agencies, enforcement officers or similar partners, where lawful and proportionate.
In each case, we only share the personal data necessary for the relevant purpose and take reasonable steps to ensure that recipients protect your personal data in line with applicable law.
International Data Transfers
Where we use service providers or systems located outside the United Kingdom or the European Economic Area, personal data may be transferred internationally. In such cases, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other legally recognised mechanisms, to protect your personal data.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we apply the following retention principles:
Customer account and contract data: retained for the duration of your contract and for a period afterwards to deal with queries, resolve disputes and comply with legal obligations. This period is usually up to six years after the end of the contract, in line with limitation periods for legal claims and statutory record-keeping requirements.
CCTV footage: retained for a limited period, typically for a short number of weeks or months, unless a longer retention period is required for the investigation of an incident or to comply with a legal obligation.
Enquiry and correspondence records: retained for a period necessary to respond to your enquiry, manage our relationship with you and demonstrate our compliance, usually up to two years unless a longer period is appropriate.
Marketing preferences: retained until you opt out or we determine that the data is no longer needed for the purpose for which it was collected.
When personal data is no longer required, we will securely delete or anonymise it.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain limitations and conditions, and we may need to verify your identity before responding to a request. Your rights include:
Right of access: you can request confirmation that we process your personal data and obtain a copy of that personal data, together with certain supplementary information.
Right to rectification: you can request that we correct inaccurate personal data about you and complete incomplete information.
Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for the processing.
Right to restriction of processing: you can request that we restrict our processing of your personal data in certain situations, for example while we verify the accuracy of the data or respond to an objection.
Right to data portability: where our processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller where technically feasible.
Right to object: you can object at any time to processing of your personal data that is based on our legitimate interests, including profiling, and we will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. You can always object to direct marketing and we will comply with such requests.
Right to withdraw consent: where we rely on your consent as our lawful basis, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Security of Your Personal Data
We take reasonable technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular review of our security arrangements. However, no system can be completely secure, and you should take care to protect your own information, particularly when communicating with us electronically.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any updates will be made available to you, and where appropriate we will notify you of significant changes. The date of the most recent update will appear at the end of this Privacy Policy.
Contact and Complaints
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact Storage Coney Hall using the usual communication channels associated with your account or enquiry.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority and encourage you to contact us in the first instance.
Last updated: 28 April 2026
