Privacy Policy - Westealing Storage

Effective date: This Privacy Policy applies to all Westealing Storage customers in area. It explains how we collect, use, store, share, and protect personal data in connection with our storage services.

1. Scope of this Privacy Policy

This Privacy Policy applies to all individuals who use, inquire about, or otherwise interact with Westealing Storage services in area. It covers personal data processed when you create an account, reserve a unit, make payments, access facilities, communicate with us, or otherwise use our services.

We are committed to handling personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws. We aim to collect only the information needed to deliver secure, reliable storage services and manage our business responsibly.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, date of birth, and identification details where needed for verification.
Contact data: address, email address, telephone number, and billing details.
Account data: customer reference numbers, login details, service preferences, and communication history.
Transaction data: payment records, invoices, rental history, and service charges.
Access and security data: gate access logs, CCTV footage, incident reports, and device or entry records.
Correspondence data: emails, messages, and notes from phone calls or service requests.
Technical data: IP address, browser type, device information, and usage data if you interact with our digital systems.

We do not intentionally collect more personal data than is necessary. Where possible, we limit collection to what is relevant and proportionate to the service provided.

3. How We Collect Personal Data

We collect data directly from you when you:

submit an inquiry or complete a storage agreement;
provide identity or payment information;
communicate with us by phone, email, or in writing;
use our facilities, access control systems, or customer services;
participate in security or incident investigations.

We may also receive personal data from third parties such as payment service providers, identity verification providers, insurers, debt recovery providers, or authorities where legally required.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR. Depending on the purpose, we rely on one or more of the following:

4.1 Contract

We process personal data where it is necessary to enter into or perform a storage agreement with you. This includes setting up your account, managing access, issuing invoices, and providing support.

4.2 Legal Obligation

We process data where required to comply with legal obligations, including tax, accounting, anti-fraud, safety, and lawful requests from public authorities.

4.3 Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided that these interests are not overridden by your rights and freedoms. This may include protecting property, preventing fraud, improving services, managing risk, maintaining security, and defending legal claims.

4.4 Consent

In limited cases, we may rely on your consent, for example for optional communications or specific marketing activities. Where consent is used, you may withdraw it at any time without affecting the lawfulness of prior processing.

5. Why We Use Personal Data

We use personal data for the following purposes:

to provide and administer storage services;
to verify identity and protect against unauthorized use;
to process payments and manage billing;
to communicate with you about your account or service issues;
to monitor and maintain site safety and security;
to investigate incidents, disputes, or suspicious activity;
to comply with legal and regulatory obligations;
to improve operations, processes, and customer experience.

We will not use your data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods depend on the type of data, the service provided, legal requirements, and the need to establish, exercise, or defend legal claims.

Contract and account data: kept for the duration of the customer relationship and for a reasonable period afterward.
Payment and accounting records: retained for the period required by tax and financial laws.
Security records and access logs: retained for a limited period unless needed longer for investigations or legal reasons.
Correspondence and support records: kept as long as necessary to resolve issues and maintain accurate records.

When data is no longer needed, it will be securely deleted, anonymized, or archived in accordance with applicable law. We review retention practices regularly to ensure data is not kept longer than necessary.

7. Sharing and Processors

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors may only process personal data according to our instructions and must implement appropriate technical and organizational safeguards.

Examples of processors or service providers may include:

payment processing providers;
accounting and bookkeeping services;
IT hosting, maintenance, and cloud service providers;
security and surveillance support providers;
identity verification or fraud prevention providers;
professional advisors such as auditors or legal advisers, where necessary.

We may also disclose data to law enforcement, regulators, courts, or other official bodies where required by law or where disclosure is necessary to protect our rights, customers, staff, or property.

We do not sell your personal data. Any sharing is limited, purpose-bound, and based on appropriate safeguards.

8. International Transfers

If personal data is transferred outside the European Economic Area, we will ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms. These safeguards are intended to keep your personal data protected to a standard consistent with GDPR.

9. Data Security

We use reasonable and appropriate measures to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, encryption where appropriate, staff training, and monitored security systems.

No system is completely secure, but we regularly review our practices and work to reduce risk. If a personal data breach occurs and is likely to result in a high risk to your rights and freedoms, we will take the steps required by law.

10. Your Rights Under GDPR

Subject to applicable law, you have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of data in certain circumstances.
Right to restriction: to request limited processing in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format and, where feasible, to have it transferred elsewhere.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing relies on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed. We encourage you to raise concerns directly so that we can address them promptly and fairly.

11. Children's Data

Our storage services are not directed to children, and we do not knowingly collect personal data from minors except where necessary and lawful in relation to account administration or legal obligations. If we become aware that we have collected data unlawfully, we will take steps to delete or correct it as appropriate.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service arrangements. When we make material changes, we will take reasonable steps to notify affected customers. The updated version will apply from the effective date stated at the top of the policy.

13. Summary of Our Commitments

Westealing Storage is committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it for clearly defined purposes, retain it for limited periods, and share it only with trusted processors or where required by law. We respect your rights under GDPR and aim to protect your information through appropriate safeguards and responsible data handling practices.

In short: your personal data is handled with care, used for legitimate storage-related purposes, and protected in line with applicable privacy law.