Privacy Policy - Lamorbey Storage

This Privacy Policy explains how Lamorbey Storage collects, uses, stores, shares, and protects personal data. It applies to all Lamorbey Storage customers in area, including anyone who enquires about, books, uses, or accesses our storage services. We are committed to handling personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to current and prospective customers, account holders, authorised users, business clients, visitors to our premises, and individuals who communicate with us in relation to storage services. It also applies to personal data received from third parties where that data is necessary to provide services, manage accounts, or comply with legal obligations.

2. Personal data we collect

We collect only the information that is necessary for legitimate business purposes. Depending on how you use our services, this may include:

Identity details such as your name, date of birth, and identification information.
Contact details such as address, email address, and telephone number.
Account and contract details including booking records, storage unit references, payment status, and service preferences.
Payment information such as billing records and transaction confirmations. We do not store full card details where a payment processor handles the transaction.
Security and access information such as entry logs, CCTV records, key or access credentials, and visit timestamps.
Communications such as emails, messages, complaints, enquiries, and customer service notes.
Technical data if you interact with digital systems we use, such as device information, IP addresses, and browser data.

In some cases, we may also process limited sensitive information if required for legal or security reasons, for example where identity checks reveal information needed to prevent fraud or comply with law. We do not seek to collect special category data unless it is necessary and lawful to do so.

3. How we use personal data

We use personal data for the following purposes:

to set up and manage customer accounts;
to provide storage services and maintain access to storage units;
to process payments, invoices, and refunds;
to verify identity and carry out anti-fraud checks;
to maintain security, prevent unauthorised access, and protect property;
to communicate with customers about bookings, service changes, and account matters;
to deal with complaints, disputes, and claims;
to comply with tax, accounting, insurance, and other legal requirements;
to monitor the performance and safety of our services;
to defend legal rights or respond to lawful requests from authorities.

We only use your data for purposes that are compatible with the reason it was originally collected. Where we need to use personal data for a new purpose, we will ensure there is a lawful basis for doing so.

4. Lawful basis for processing

We process personal data only where one or more lawful bases under UK GDPR apply. These include:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes setting up storage agreements, managing access to a unit, and processing payments.

Legal obligation

We may process data where required to meet legal and regulatory obligations, including tax, accounting, fraud prevention, and responses to lawful authorities.

Legitimate interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include protecting premises, preventing misuse, improving services, managing customer records, and enforcing agreements.

Consent

Where we rely on consent, we will make that clear at the point of collection. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

Vital interests

In exceptional circumstances, we may process personal data where necessary to protect someone’s life or physical safety.

5. Sharing personal data and processors

We do not sell personal data. We may share data only when necessary and appropriate for the purposes described in this policy. This may include trusted processors and service providers that act on our instructions and are bound by data processing agreements.

Processors may include:

payment service providers;
IT hosting and cloud storage providers;
customer management and communication systems;
security and CCTV service providers;
accounting, audit, and professional advisers;
maintenance and facility support contractors;
identity verification and fraud-prevention providers.

We may also disclose personal data where required by law, court order, insurance requirements, or to establish, exercise, or defend legal claims. Any third party receiving data must keep it secure and use it only for the agreed purpose.

6. International transfers

If any processor stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law.

7. Retention of personal data

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, insurance, or reporting requirements. Retention periods depend on the type of data and the reason for processing. As a general approach:

customer account and contract data is retained for the duration of the relationship and for a reasonable period afterwards;
payment and accounting records are retained in line with statutory requirements;
security logs and access records are kept only as long as needed for safety, operational review, or incident investigation;
complaints and correspondence are retained for the time needed to handle the issue and protect our legal position;
unused enquiry records may be deleted after a shorter period where no service is taken up.

When data is no longer needed, we securely delete, anonymise, or destroy it. We do not keep personal data indefinitely.

8. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These may include access controls, secure storage, encryption where suitable, staff training, and monitoring of systems and premises. While no system is completely secure, we take reasonable steps to reduce risk and respond quickly to any suspected data incident.

9. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or limitations depending on the circumstances.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - in some cases, you can ask us to delete your data.
Right to restriction - you can ask us to limit how we use your data in certain situations.
Right to data portability - where applicable, you can ask for your data in a structured, commonly used format.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where we rely on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law. We may need to confirm your identity before acting on a request. In some cases, we may retain certain information where required or permitted by law.

10. Children’s data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is necessary in connection with a lawful service arrangement or legal obligation. Where this occurs, we process the data with appropriate care and only to the extent necessary.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Complaints and concerns

If you have concerns about how your personal data is handled, you may raise the issue with us so that it can be reviewed. You also have the right to make a complaint to the relevant data protection authority if you believe your rights have been infringed. We would always prefer to address concerns directly and promptly.

Summary commitment: Lamorbey Storage is committed to lawful, fair, and transparent processing of personal data, with clear limits on collection, secure sharing with processors, defined retention periods, and respect for customer rights. This policy applies to all Lamorbey Storage customers in area and is designed to protect privacy while supporting reliable storage services.