Storage Chinatown Privacy Policy
This Privacy Policy explains how Storage Chinatown collects, uses, stores, and protects personal data of its customers and prospective customers. It applies to all Storage Chinatown customers in the area, as well as individuals who contact or interact with Storage Chinatown in relation to its services.
Storage Chinatown is committed to processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation. This Privacy Policy describes the categories of data processed, the lawful bases relied upon, retention periods, data processors engaged, and the rights available to individuals.
1. Data Controller
Storage Chinatown is the data controller for the personal data described in this Privacy Policy. As data controller, Storage Chinatown determines the purposes and means of processing personal data relating to its customers and other individuals who interact with the business.
2. Categories of Personal Data Collected
Storage Chinatown may collect and process the following categories of personal data, depending on the nature of your relationship with the business:
Identification and contact details: name, postal address, billing address, contact address, and other relevant contact details.
Account and contract details: customer account identifiers, contract numbers, storage unit numbers, details of services purchased, duration of storage, payment status, and related administrative information.
Payment and billing information: details necessary to process payments, such as partial card details, billing history, and records of payments and refunds. Full payment card data is not retained beyond what is necessary for payment processing in line with applicable regulations.
Communication data: records of correspondence and communications with Storage Chinatown, including queries, complaints, and feedback provided in person, by post, or through other communication channels.
Access and security data: records related to site access, storage unit access logs, security system logs, and where in use, closed-circuit television footage covering entrances, communal areas, and external perimeters of the facility.
Technical data: limited technical information generated when you interact with any online services used by Storage Chinatown, such as logs required for security, system performance, and fraud prevention.
3. Purposes and Lawful Bases for Processing
Storage Chinatown processes personal data only where there is a lawful basis under data protection law. The main purposes and lawful bases are as follows:
Contract performance: To take steps at your request before entering into a contract, and to perform the storage contract with you. This includes setting up and managing your account, providing storage services, processing payments, communicating about your contract, and handling your service-related requests. The lawful basis is the necessity of processing for the performance of a contract or to take steps prior to entering into a contract.
Legal obligations: To comply with legal and regulatory requirements, including tax and accounting rules, anti-money laundering and fraud prevention obligations, security and safety regulations, and requirements from law enforcement or regulatory authorities where applicable. The lawful basis is compliance with legal obligations.
Legitimate interests: To operate, protect, and improve Storage Chinatown’s business and services in a reasonable manner. This includes maintaining and enhancing building and system security, preventing and investigating fraud or misuse, managing business records, improving customer service, and pursuing or defending legal claims. When relying on legitimate interests, Storage Chinatown balances its interests against your rights and freedoms to ensure fair processing.
Consent: In limited circumstances, Storage Chinatown may rely on your consent, for example for certain forms of direct marketing or optional communications that go beyond what is necessary to manage your account. Where consent is used as a lawful basis, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
4. Data Retention
Storage Chinatown will retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.
Customer and contract records: core contract data and related records are generally kept for the duration of the contractual relationship and for a subsequent period necessary to comply with legal obligations and to resolve disputes or enforce agreements.
Billing and financial information: billing records and related financial data are retained for the period required by tax, accounting, and financial regulations.
Security and access data: access logs and security records, including CCTV footage where used, are stored for a limited period based on operational needs and legal requirements, unless a longer retention period is necessary in connection with an investigation, dispute, or legal claim.
Marketing and communication data: information used for direct marketing is retained for as long as you remain subscribed or until you object or withdraw consent, whichever is applicable under the lawful basis used.
When personal data is no longer required, Storage Chinatown will ensure it is securely deleted, anonymised, or otherwise rendered permanently unusable.
5. Data Sharing and Processors
Storage Chinatown may share personal data with carefully selected third parties where necessary and lawful. These third parties act either as data processors on behalf of Storage Chinatown, or as independent controllers where they determine their own purposes and means of processing.
Data processors: Storage Chinatown may engage service providers to assist with functions such as payment processing, secure data storage, customer administration systems, security and access control systems, and professional services. These processors act on documented instructions from Storage Chinatown and are bound by contractual obligations to protect personal data, maintain confidentiality, and implement appropriate technical and organisational security measures.
Independent recipients: Where required or permitted by law, Storage Chinatown may share personal data with public authorities, law enforcement, regulatory bodies, courts, insurance providers, and professional advisers. In such cases, the recipients act as independent data controllers and are responsible for their own compliance with data protection laws.
Storage Chinatown does not sell personal data to third parties. Any sharing of data is limited to what is necessary for the specified purposes explained in this Privacy Policy.
6. International Data Transfers
Where Storage Chinatown, or any of its processors, transfers personal data to countries outside the region where the data was collected, such transfers will only take place where appropriate safeguards are in place to protect the data. These safeguards may include the use of standard contractual clauses or other mechanisms recognised under applicable data protection laws.
7. Data Security
Storage Chinatown takes the security of personal data seriously and implements appropriate technical and organisational measures to protect data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include restricted access controls, physical security of premises, secure storage systems, and staff training on data protection obligations.
8. Your Data Protection Rights
Under data protection law, and subject to certain conditions and limitations, individuals have the following rights regarding their personal data processed by Storage Chinatown:
Right of access: You have the right to request confirmation as to whether Storage Chinatown processes your personal data and to receive a copy of that data, along with information about the processing.
Right to rectification: You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to erasure: In certain circumstances, you may request that Storage Chinatown delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You may request that the processing of your personal data be restricted in specific situations, such as while the accuracy of the data is being verified or where you have objected to processing and the balance of interests is being assessed.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that your personal data be provided in a structured, commonly used, and machine-readable format, and where technically feasible, transmitted to another controller.
Right to object: You have the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interests, including profiling. You also have the right to object at any time to processing for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your personal data has been processed in a way that does not comply with data protection law.
9. Updates to This Privacy Policy
Storage Chinatown may update this Privacy Policy from time to time to reflect changes in legal requirements, guidance, or the way personal data is processed. Any revised version will apply from the date it is made available. You are encouraged to review this Privacy Policy periodically to stay informed about how Storage Chinatown protects your personal data.
