Privacy Policy - Raynerslane Storage

Raynerslane Storage is committed to protecting the privacy and personal data of all customers in area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Raynerslane Storage customers in area, including prospective customers, current customers, former customers, and anyone who interacts with us in connection with our storage services.

This policy is intended to provide clear and transparent information about our data practices. By using our services, you acknowledge that we may process personal data as described below. We only process personal data where we have a lawful basis to do so, and we seek to ensure that all processing is fair, secure, and limited to what is necessary.

1. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with Raynerslane Storage. The information we collect may include:

Identity information such as your name, date of birth, and proof of identity where required.
Contact details such as address, email address, telephone number, and billing address.
Account and service information such as storage unit details, booking records, access dates, payment status, and correspondence relating to your account.
Payment information such as bank or card details, transaction records, and invoices. We generally use third-party payment providers to process payments securely.
Security and access information such as CCTV images, access logs, key fob records, or gate entry records where applicable.
Communication data such as emails, written requests, complaint records, and customer service notes.

We may also collect information indirectly from third parties where necessary, such as identity verification providers, payment processors, insurers, debt recovery services, or legal and regulatory authorities.

2. How We Use Your Personal Data

We use personal data for legitimate business and legal purposes connected with the operation of our storage services. These purposes may include:

providing storage services and managing customer accounts;
verifying identity and preventing fraud;
processing bookings, payments, and refunds;
communicating with customers about their account or service;
maintaining security on our premises and protecting property;
responding to complaints, enquiries, and disputes;
meeting legal, tax, accounting, and regulatory obligations;
enforcing our contracts, terms, and site rules;
improving our services, systems, and customer experience;
protecting the rights, property, and safety of Raynerslane Storage, our customers, staff, and visitors.

We only use personal data for the purposes for which it was collected, unless we reasonably believe another compatible purpose applies or we are required by law to do otherwise. We do not sell your personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Depending on the circumstances, Raynerslane Storage may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up your account, managing your storage unit, taking payment, and providing support related to the storage agreement.

Legal Obligation

We may process personal data where necessary to comply with legal obligations, including tax, accounting, health and safety, anti-fraud, and regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms. Examples include safeguarding our premises, preventing misuse, handling disputes, improving our services, and maintaining business records.

Consent

In limited cases, we may rely on your consent, for example for certain optional communications or specific uses of data. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests

In rare circumstances, we may process personal data to protect someone’s vital interests, such as in an emergency where disclosure is necessary to protect life or serious safety interests.

4. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, reporting, or dispute-resolution requirements. Retention periods vary depending on the type of information and the reason for processing.

In general:

customer account and contract records are kept for the duration of the service relationship and for a reasonable period afterwards;
payment and invoicing records are retained for the period required by law and standard accounting practice;
security records such as access logs or CCTV are kept only as long as necessary for safety, security, or incident investigation;
complaints and correspondence are retained for as long as needed to manage the issue and maintain records of resolution;
where data is no longer required, it is securely deleted, anonymised, or destroyed.

Retention periods may be extended if necessary to establish, exercise, or defend legal claims, or if a longer period is required by law. We apply retention controls to ensure that personal data is not kept longer than necessary.

5. Processors and Third Parties

We may share personal data with trusted processors and other third parties who help us operate our business. These parties act on our instructions or otherwise process data for their own independent legal responsibilities. We require appropriate data protection safeguards and, where needed, contractual protections to ensure your data remains secure.

Examples of processors and recipients may include:

payment service providers who handle card or bank transactions;
IT and cloud service providers that store or host data;
security providers supporting CCTV, alarms, or access systems;
accounting, auditing, and business administration providers;
professional advisers such as lawyers, insurers, and consultants;
debt recovery or credit reference agencies where lawful and necessary;
law enforcement, courts, regulators, and public authorities when required by law.

Where personal data is transferred to third parties, we limit the information shared to what is necessary for the relevant purpose. We also expect those parties to handle the data lawfully, securely, and only in accordance with applicable data protection rules.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, system monitoring, and restricted permissions. While no system can be guaranteed to be completely secure, we take reasonable steps to reduce risk and respond appropriately if a security incident occurs.

Access to personal data is limited to those employees, contractors, and service providers who need it for legitimate business purposes. We also expect all individuals handling personal data to comply with confidentiality and security requirements.

7. Your Rights

As a data subject under the UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to legal conditions or exemptions, but we will always consider your request carefully and respond within the required timeframe.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete information.
Right to erasure – in some circumstances, you may ask us to delete your personal data.
Right to restriction – you may ask us to limit how we process your data in certain cases.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you may receive your data in a structured, commonly used format.
Right to withdraw consent – if we rely on consent, you may withdraw it at any time.
Right to complain – you have the right to raise concerns with the relevant data protection supervisory authority.

To protect your privacy, we may need to verify your identity before responding to a request. We will not charge a fee unless a request is manifestly unfounded or excessive, in which case we may apply a reasonable charge or refuse to act where permitted by law.

8. Children’s Data

Our storage services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in a specific lawful context, such as emergency contact details or legal documentation. If we become aware that we have collected data from a child without an appropriate lawful basis, we will take steps to delete it where required.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

10. Summary of Our Commitment

Raynerslane Storage is dedicated to handling personal data responsibly, lawfully, and transparently. We collect only the data needed to provide and secure our services, use it for defined purposes, retain it only as long as necessary, and share it only with trusted processors or where required by law. We respect your rights and aim to ensure that all customers in area receive fair and compliant data protection treatment.

This Privacy Policy applies to all Raynerslane Storage customers in area.