Storage Edmonton Privacy Policy
This Privacy Policy explains how Storage Edmonton collects, uses, stores and protects personal data relating to customers and prospective customers in the Edmonton area. It also sets out the rights you have under data protection law, including the General Data Protection Regulation and applicable local legislation. By using our services, contacting us, or visiting our facilities, you acknowledge that you have read and understood this Privacy Policy.
Scope and Controller Responsibility
This Privacy Policy applies to all Storage Edmonton customers and prospective customers located in the Edmonton area, as well as visitors to our premises and individuals who communicate with us in connection with our services. Storage Edmonton is the controller of the personal data described in this Privacy Policy and is responsible for deciding how and why your personal data is processed.
Types of Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identification and contact details such as name, postal address, billing address, contact address, and any other address you provide to us, as well as your chosen contact preferences.
Account and contract information such as customer number, unit or storage space number, contract dates, contract type, services selected, payment terms, and communication history relating to your account.
Payment and billing information such as payment method details, partial payment card details where required for processing, payment confirmation data provided by banks or payment service providers, invoices, and records of payments made.
Communications data such as emails, letters, or other correspondence you send to us, and records of conversations or notes created when you contact us by other methods.
Facility and security data such as access logs, entry and exit times recorded by security systems, and, where in use at our premises, closed circuit television recordings capturing images of individuals in and around our facilities.
Technical and usage data where applicable, such as information generated when you access any online tools or digital services we provide, including IP address, device information, and general usage information, to the extent necessary for security, service provision and improvement.
Lawful Bases for Processing
Storage Edmonton processes personal data only when we have a lawful basis under data protection law. Depending on the circumstances, we rely on one or more of the following lawful bases:
Contract: We process your personal data when it is necessary to enter into a storage or related services contract with you, or to perform our obligations under such a contract, including managing your account, accepting payments, providing access to your storage unit, and communicating with you about your contract.
Legal obligation: We process your personal data when necessary to comply with legal and regulatory requirements, such as tax and accounting rules, obligations to law enforcement or regulatory authorities, and record keeping requirements.
Legitimate interests: We process your personal data when it is necessary for our legitimate business interests and these are not overridden by your rights and interests. These interests include maintaining the security and integrity of our facilities, improving our services, preventing and detecting fraud, managing and developing our business, and handling customer queries and complaints.
Consent: In limited cases, we may rely on your consent, for example where required by law for certain types of marketing communications. Where processing is based on consent, you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including creating and managing customer accounts, administering contracts, allocating storage units, facilitating access to our facilities, and organising any additional services you select.
To process payments and manage billing, including issuing invoices, processing payments through banks and payment service providers, dealing with unpaid bills or disputes, and maintaining financial records as required by law.
To communicate with you, including responding to enquiries, providing customer support, sending service-related notifications and updates about your contract, and contacting you about changes to this Privacy Policy or our terms.
To maintain safety and security at our facilities, including operating access control systems and, where in place, video surveillance systems, investigating incidents, enforcing our house rules, and protecting our property, customers and staff.
To manage our business operations, including internal reporting, quality control, audits, training, risk management, and the development and improvement of our services.
To comply with legal and regulatory requirements, including responding to lawful requests from public authorities, and exercising or defending legal claims.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, and to meet legal, accounting and reporting requirements.
In general, we retain customer account and contract information for the duration of your contract and for a period after the end of the contract, to deal with any queries, disputes, or legal claims and to comply with statutory retention periods. This period may vary depending on legal requirements in force.
Payment and billing information is kept for the period required by applicable tax and accounting laws, after which it is securely deleted or anonymised.
Facility and security data, including access logs and CCTV recordings where applicable, is retained for a limited period necessary to ensure security and to investigate incidents, unless a longer retention period is required in connection with a specific investigation or legal claim.
When personal data is no longer required for the purposes for which it was collected, and no longer needs to be retained to comply with legal obligations, we will securely delete, anonymise or irreversibly aggregate it.
Data Processors and Sharing of Personal Data
Storage Edmonton may share personal data with carefully selected third parties that act as processors on our behalf. These processors provide services necessary for our operations, such as information technology services, payment processing, customer relationship management systems, maintenance of security systems, document storage, and professional advisory services.
These third-party processors are only permitted to process personal data in accordance with our written instructions, for the purposes described in this Privacy Policy, and are required to implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
We may also share personal data with other third parties when required by law, regulation or legal process, or when necessary to protect our rights, property, safety, or the rights, property or safety of others. In the event of a business restructuring, transfer or acquisition, we may disclose relevant personal data to prospective or actual transferees as part of the process, subject to appropriate confidentiality safeguards.
We do not sell personal data to third parties.
International Data Transfers
Where we transfer personal data outside of the jurisdiction in which it was collected, we do so in compliance with applicable data protection laws. This may include the use of appropriate safeguards such as standard contractual clauses or equivalent measures to ensure that personal data remains adequately protected.
Your Data Protection Rights
Under data protection law, and subject to the conditions and exemptions set out in that law, you have the following rights in relation to your personal data:
Right of access: You have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that personal data along with information about our processing.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or completed.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain cases, such as when you contest the accuracy of the data or object to our processing and we are assessing your request.
Right to object: You have the right to object, on grounds relating to your particular situation, to our processing of your personal data where we rely on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for the establishment, exercise or defence of legal claims.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to transmit it to another controller, where technically feasible.
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you believe that we have infringed applicable data protection laws in our handling of your personal data.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, damage or disclosure. These measures include physical security at our facilities, access controls, information security policies, staff training, and regular review of our security procedures. While we take reasonable steps to protect your personal data, no system can be completely secure and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any changes will be made available through our usual customer communication channels or at our premises. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
