Storage Sipson Privacy Policy
This Privacy Policy explains how Storage Sipson collects, uses, stores, and protects personal data relating to its customers and prospective customers in our service area. It also explains your rights under the General Data Protection Regulation and related data protection laws.
By using Storage Sipson services, contacting us, or providing your personal information in any way, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Sipson customers and prospective customers in our service area, as well as individuals who contact us, visit our facilities, or otherwise interact with us in relation to storage services. It covers personal data processed by Storage Sipson as a controller, whether collected online, by telephone, in person, or through any other channel.
Types of Data We Collect
Storage Sipson may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification data: name, title, date of birth where required for verification, and identification documents where necessary for contractual or legal purposes.
Contact details: postal address, billing address, and general contact details necessary to manage your account and respond to enquiries.
Account and contract information: customer reference numbers, storage unit details, contract start and end dates, payment history, and correspondence relating to your account and service usage.
Payment and billing data: payment method details such as card type and partial card details, transaction records, and invoices. Full payment card data is processed securely by our payment service providers and is not retained by us beyond what is legally required.
Usage and communication data: records of communications with us, including emails, forms, and notes of telephone conversations, as well as preferences you share with us about how you would like to be contacted.
Security and access data: records of site entry and exit times where access control systems are used, and any incident logs relating to the safety and security of our premises.
Technical data: when you visit our website, we may collect information such as IP address, device type, browser type, and information about how you interact with our website. This is used for security, analytics, and service improvement.
Purposes and Lawful Bases for Processing
Storage Sipson processes personal data only where we have a lawful basis to do so. The main purposes and corresponding lawful bases are:
Provision of services and contract management: to set up your account, provide storage services, manage bookings, process payments, communicate about your contract, and handle customer service queries. The lawful basis is the performance of a contract or taking steps at your request prior to entering into a contract.
Legal and regulatory obligations: to comply with applicable laws, such as tax obligations, accounting requirements, fraud prevention measures, and obligations linked to crime prevention or law enforcement requests. The lawful basis is compliance with legal obligations.
Legitimate interests: to operate and improve our business, maintain the security of our premises, prevent misuse of services, manage disputes, and keep basic contact information for reasonable periods. The lawful basis is our legitimate interests, provided these are not overridden by your rights and freedoms.
Consent: in limited situations where required by law, such as sending certain types of marketing communications or using optional cookies or similar technologies. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
We do not use your personal data for automated decision making that produces legal or similarly significant effects without human involvement.
Data Retention
Storage Sipson retains personal data only for as long as necessary for the purposes for which it was collected, and to meet legal and regulatory requirements.
Customer account and contract data is typically retained for the duration of your relationship with us and for a period after your contract ends to address any queries, disputes, or legal claims. This period is determined by applicable limitation periods and regulatory requirements.
Financial and billing records are retained in line with tax and accounting laws, which may require storage for several years after the end of the financial year in which a transaction took place.
Communications and enquiry records are kept for a period that allows us to manage your requests and keep a clear record of our interactions, after which they are securely deleted or anonymised.
Data collected for marketing based on consent or legitimate interests is retained until you object, opt out, or your data is no longer needed for the relevant purpose, whichever occurs first, subject to minimal records being kept to respect your opt out preferences.
When data is no longer required, it will be securely deleted, anonymised, or archived in accordance with our data retention procedures.
Data Processors and Other Recipients
Storage Sipson may share personal data with trusted third parties who act as data processors on our behalf. These processors only process data under our instructions, are subject to confidentiality obligations, and are required to implement appropriate security measures.
Examples of processors and recipients include:
Payment service providers who process payments and manage recurring billing securely.
IT and cloud service providers who host our systems, provide software tools, data storage, backup, and support services essential to our operations.
Professional advisers such as accountants, auditors, or legal advisers where necessary to obtain professional or compliance support.
Security and maintenance contractors involved in maintaining the physical security and integrity of our premises and systems.
Where required by law or in connection with legal proceedings, we may disclose personal data to law enforcement agencies, regulators, courts, or other public authorities.
We do not sell your personal data to third parties.
International Data Transfers
Where personal data is processed or stored outside the United Kingdom or the European Economic Area, Storage Sipson ensures that appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other mechanisms recognised under data protection law to ensure your data remains protected to a standard essentially equivalent to that in your home jurisdiction.
Data Security
Storage Sipson takes the security of personal data seriously. We implement technical and organisational measures to protect data against unauthorised access, loss, alteration, or disclosure. These measures include controlled access to systems, staff training on data protection responsibilities, regular review of security procedures, and secure storage and disposal practices.
While we take reasonable steps to protect your data, no system can be completely secure. You are encouraged to take care when sharing personal information and to notify us promptly of any suspected compromise of your account or data.
Your Data Protection Rights
As an individual in our service area whose personal data is processed by Storage Sipson, you have a number of rights under data protection law, subject to certain conditions and exemptions.
Right of access: you have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy and certain information about how it is used.
Right to rectification: you have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to erasure: in certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis.
Right to restriction of processing: you may request that we restrict the processing of your personal data in specific situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: in some cases, you have the right to receive personal data you provided to us in a structured, commonly used, machine readable format and to transmit it to another controller.
Right to object: you have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to the processing of your data for direct marketing purposes.
Rights related to consent: where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
If you wish to exercise any of these rights, we may need to verify your identity before responding to your request, and we will respond within the time periods required by law.
Complaints and Contact
If you have concerns about how Storage Sipson handles your personal data, you are encouraged to contact us in the first instance so that we can address your concerns. You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence or where you believe an infringement has occurred.
Changes to this Privacy Policy
Storage Sipson may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updated version will be made available through our usual customer communication channels and will include the date on which it took effect. You are encouraged to review this Privacy Policy periodically to remain informed about how we handle your personal data.
