Privacy Policy - Temple Storage

Temple Storage is committed to protecting the privacy and personal data of all customers in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our storage services, visit our premises, communicate with us, or otherwise interact with Temple Storage. This policy applies to all Temple Storage customers in area. It is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and to help you understand your rights and our responsibilities.

1. Who we are

For the purposes of data protection law, Temple Storage acts as the data controller for the personal data we collect and process in connection with our storage services. This means we determine the purposes and means of processing personal data. We take our responsibilities seriously and only process personal data where we have a lawful basis to do so.

2. Personal data we collect

We collect only the information that is necessary to provide our services, manage our business, and comply with legal obligations. The types of personal data we may collect include:

Identity information such as your name, title, and date of birth.
Contact information such as your postal address, email address, and telephone number.
Account and contract information such as your customer record, service selections, payment status, and booking details.
Payment information such as bank details, card information, or billing records, where relevant.
Access and security information such as keyholder details, entry records, CCTV images, vehicle registration numbers, and access logs.
Communications such as correspondence, enquiries, complaints, feedback, and service requests.
Technical information where you use digital systems linked to our services, such as IP address, device information, and usage logs.
Special category data is not normally collected by Temple Storage. If you voluntarily provide such information, we will handle it with additional care and only where permitted by law.

We generally collect data directly from you when you register for services, complete forms, make a booking, communicate with us, or use our premises. In limited cases, we may also receive information from third parties, such as payment providers, identity verification services, insurers, debt recovery providers, or law enforcement bodies where legally appropriate.

3. How we use your personal data

Temple Storage uses personal data for the following purposes:

to create and manage your customer account;
to provide storage services and administer your agreement;
to verify identity and prevent fraud;
to process payments and manage invoices, refunds, and arrears;
to maintain site security, including CCTV monitoring and access control;
to communicate with you about your account, service updates, or incidents;
to handle complaints, disputes, and claims;
to meet legal and regulatory obligations;
to defend or establish legal rights;
to improve our services, systems, and customer experience;
to maintain accurate records and business administration.

We only use your data in ways that are compatible with the purposes explained in this policy. We do not sell your personal data.

4. Lawful basis for processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the circumstances, Temple Storage may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes opening accounts, managing bookings, providing access to storage units, billing, and customer service.

Legal obligation

We may process personal data where we must comply with legal obligations, such as tax rules, accounting requirements, responding to lawful requests, or maintaining records required by law.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Our legitimate interests may include protecting our premises, preventing fraud, managing operations, improving services, and defending legal claims. We carry out balancing assessments where required to ensure that these interests are appropriate and proportionate.

Consent

In limited situations, we may rely on your consent, for example where it is required for optional communications or certain types of data use. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing personal data and processors

Temple Storage may share personal data with trusted third parties who help us operate our business. These third parties act as processors when they process data on our instructions, or as separate controllers where they decide their own purposes and means of processing.

Examples of processors and service providers may include:

payment processors and banking providers;
IT hosting, software, and data storage providers;
security and CCTV monitoring providers;
customer communication and email service providers;
accounting, auditing, and bookkeeping providers;
identity verification and fraud prevention services;
professional advisers, including lawyers and insurers;
debt recovery or collections providers, where necessary;
regulators, courts, and law enforcement agencies where required by law.

We require processors to protect personal data, process it only for permitted purposes, and implement suitable technical and organisational measures. Where data is shared with a third party acting as an independent controller, that party is responsible for its own privacy practices.

We may also disclose personal data where necessary to protect the rights, property, or safety of Temple Storage, our customers, staff, contractors, or others.

6. Data retention

Temple Storage keeps personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, insurance, and reporting requirements. Retention periods vary depending on the type of information and the purpose of processing.

In general:

customer account and contract records are retained for the duration of the relationship and for a reasonable period afterwards;
financial and tax records are kept for the periods required by law;
security and access records, including CCTV, are retained only for as long as needed for safety, incident review, or investigation purposes;
complaints, claims, and legal records are kept for as long as necessary to resolve the matter and meet limitation periods;
unused enquiry records may be deleted after a shorter period if no service is taken up.

When data is no longer required, we will securely delete, anonymise, or destroy it in accordance with our retention procedures. We review retention periods regularly to ensure they remain appropriate.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access, staff training, secure systems, encryption where appropriate, physical security controls, and regular review of safeguards. While we work hard to protect data, no system can be guaranteed to be completely secure, so we encourage customers to keep their own account information and access credentials confidential.

8. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exemptions, depending on the circumstances. Your rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint – to raise concerns with the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We will respond within the legal time limits and provide clear information about any action we take.

9. International transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law.

10. Children’s data

Temple Storage services are intended for adults and business customers. We do not knowingly collect personal data from children except where it is incidental and necessary in the context of a lawful customer relationship, such as emergency contact details provided by an adult customer. If we become aware that we have collected data unlawfully from a child, we will take steps to delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how Temple Storage uses personal data.

12. Summary of our approach

Temple Storage aims to process personal data fairly, lawfully, and transparently. We collect only what is necessary, use it for clearly defined purposes, retain it only as long as required, and share it only with trusted processors or other parties where lawful and appropriate. We respect your rights and work to keep your information secure and handled with care. By using Temple Storage services, you acknowledge that you have read and understood this Privacy Policy.