Privacy Policy

Last updated: 18 August 2026

Storage Panda Ltd (“Storage Panda”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, request a quotation, reserve or rent a storage unit, visit one of our storage sites or otherwise deal with us.

This notice is provided in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

  1. Who we are

Storage Panda Ltd is the data controller responsible for your personal information.

Company name: Storage Panda Ltd Company number: [INSERT COMPANY NUMBER] Registered address: [INSERT REGISTERED OFFICE ADDRESS] Email: [INSERT PRIVACY OR GENERAL EMAIL ADDRESS]

  1. Personal information we collect

Depending on how you interact with us, we may collect:

  • Your name, address, email address and telephone number.
  • Your date of birth, where required to verify your identity.
  • Identification documents and proof of address, where reasonably required.
  • Your business name and business contact details.
  • Details about your storage requirements.
  • Booking, storage-unit and contractual information.
  • Payment and billing information.
  • Records of payments, deposits, invoices and refunds.
  • Correspondence between you and Storage Panda, including emails, telephone calls and messages.
  • Details of authorised persons who may access your storage unit.
  • Vehicle registration details.
  • Gate access records, including registered telephone numbers, dates and times of entry.
  • CCTV images recorded at our storage sites.
  • Information concerning complaints, incidents, insurance claims, suspected breaches of contract or unlawful activity.
  • Website information, including your IP address, device, browser and how you use our website.
  • Your marketing and communication preferences.

Payment card details may be processed directly by our payment provider. Storage Panda does not normally receive or retain your complete card details.

We do not intentionally collect special-category personal information, such as information about your health, ethnicity, religion, political opinions or biometric identity.

Please do not store prohibited or unlawful goods or provide us with special-category information unless it is genuinely necessary.

  1. How we obtain your information

We may obtain your personal information:

  • Directly from you when you contact us, request a quotation, make a booking or enter into a storage agreement.
  • When you use our website or online booking system.
  • When you make a payment.
  • When you enter or visit one of our storage sites.
  • From an individual or business booking storage on your behalf.
  • From publicly available sources, credit-reference agencies, identity-verification providers or fraud-prevention services, where appropriate.
  • From insurers, professional advisers, law-enforcement bodies or other organisations dealing with an incident or claim.
  1. How and why we use your information

We may process your personal information for the following purposes.

Enquiries and quotations

We use your contact details and information about your storage requirements to answer enquiries, provide quotations and take steps towards entering into a storage agreement.

Our lawful basis is that processing is necessary to take steps at your request before entering into a contract.

Managing your storage agreement

We use your information to:

  • Set up and administer your account.
  • Allocate and manage your storage unit.
  • Collect rent, deposits and other charges.
  • Contact you about your booking or account.
  • Provide site and gate access.
  • Manage renewals, changes, cancellations and the end of your agreement.
  • Respond to service enquiries, complaints and disputes.
  • Our lawful basis is that processing is necessary to perform our contract with you.
  • Legal and regulatory obligations
  • We may use and retain information for accounting, taxation, fraud prevention, record-keeping, insurance and other legal or regulatory requirements.
  • Our lawful basis is compliance with a legal obligation.
  • Site safety and security

We use CCTV, vehicle information and gate-access records to:

  • Protect customers, visitors, staff and property.
  • Secure our storage sites and storage units.
  • Control and review access.
  • Prevent and investigate theft, damage, trespass, fraud and other unlawful activity.
  • Investigate accidents, security incidents and breaches of storage agreements.
  • Establish, exercise or defend legal claims.

Our lawful basis is our legitimate interest in operating safe and secure storage facilities, protecting property and preventing or investigating crime.

Our CCTV does not use facial recognition or automated biometric identification.

Improving our services

We may use customer feedback, enquiry information and service records to improve our website, storage facilities, customer service and business operations.

Our lawful basis is our legitimate interest in understanding and improving our services.

Marketing

Where permitted by law, we may send information about Storage Panda’s services, offers and available storage units by email, text message or telephone.

We will rely on your consent where consent is required. In limited circumstances, we may contact existing customers about similar services under the “soft opt-in” rules.

You can withdraw your consent or opt out of marketing at any time by:

  • Using the unsubscribe option in the message.
  • Replying “STOP” where that option is provided.
  • Contacting us using the details in this policy.
  • Opting out of marketing will not stop essential communications about your enquiry, booking, payments, access or storage agreement.
  1. When providing information is necessary

You are not generally required to provide personal information to us. However, certain information is necessary for us to:

  • Provide an accurate quotation.
  • Verify your identity.
  • Enter into and perform a storage agreement.
  • Take payment.
  • Provide secure access.
  • Meet our legal and insurance obligations.

If you do not provide the information we reasonably require, we may be unable to provide storage services or continue your storage agreement.

Please notify us if your personal information changes so that our records remain accurate.

  1. Who we share information with

Where reasonably necessary, we may share personal information with:

  • Our storage-management and online-booking system providers.
  • Payment processors, banks and financial-service providers.
  • Website hosting, cloud storage, IT and communications providers.
  • CCTV, alarm, gate-access and site-security providers.
  • Insurers, insurance brokers and claims handlers.
  • Accountants, solicitors, debt-recovery agents and other professional advisers.
  • Contractors and service providers working on our behalf.
  • Regulators, courts, law-enforcement bodies and public authorities where disclosure is required or permitted by law.
  • A buyer, investor or professional adviser if we sell, transfer or reorganise all or part of our business.

These recipients may only use personal information for the relevant purpose and must protect it appropriately.

We do not sell your personal information.

  1. International transfers

Some of our technology, cloud, payment or service providers may process personal information outside the United Kingdom.

Where information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

  • A UK adequacy regulation.
  • The UK International Data Transfer Agreement.
  • The UK Addendum to the European Commission’s standard contractual clauses.
  • Another safeguard permitted under UK data-protection law.

You may contact us for further information about the safeguards applying to your personal information.

  1. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and dispute-related requirements.

Our usual retention periods are:

  • Unsuccessful enquiries and quotations: up to two years after the last contact.
  • Customer agreements and account records: normally six years after the storage agreement ends.
  • Invoices, payments and accounting records: normally six years after the end of the relevant financial period.
  • CCTV recordings: normally up to 30 days, unless footage is required for an incident, investigation, insurance claim or legal proceeding.
  • Gate-access and security records: for as long as reasonably required for access control, security and incident investigation.
  • Marketing records: until you unsubscribe, withdraw consent or we determine that the information is no longer accurate or useful.
  • Complaints, disputes and claims: for as long as reasonably required to resolve the matter and establish, exercise or defend legal rights.

Information may be retained for longer where required by law or where it relates to an ongoing complaint, investigation, debt, insurance claim or legal proceeding.

  1. Cookies and website information

Our website may use cookies and similar technologies to:

  • Make the website and booking system work.
  • Remember your preferences.
  • Maintain security.
  • Understand website usage and performance.
  • Measure advertising effectiveness, where you have consented.

Non-essential cookies will not be placed unless you provide any consent required by law. You can manage your choices using our cookie banner and your browser settings.

Further details should be provided in our Cookie Policy.

  1. Automated decision-making

Storage Panda does not currently use personal information to make decisions about customers based solely on automated processing where those decisions have legal or similarly significant effects.

  1. Protecting your information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information is restricted to people and service providers who reasonably need it for their work and who are subject to appropriate confidentiality and data-protection obligations.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

  1. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Access: obtain a copy of the personal information we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete information.
  • Erasure: ask us to delete your information where there is no lawful reason for retaining it.
  • Restriction: ask us to restrict how we process your information.
  • Objection: object to processing based on legitimate interests.
  • Data portability: receive certain information in a structured, commonly used and machine-readable format.
  • Withdraw consent: withdraw consent where we rely on consent.
  • Object to direct marketing: require us to stop using your information for direct marketing at any time.
  • Complain: make a complaint about our handling of your personal information.

These rights are not absolute and may be subject to legal exemptions.

We may need to verify your identity before dealing with a request. We will normally respond within one month.

To exercise your rights, contact us at:

Email: [INSERT PRIVACY OR GENERAL EMAIL ADDRESS] Address: [INSERT REGISTERED OFFICE ADDRESS]

You will not normally have to pay a fee. However, we may charge a reasonable fee or refuse a request where permitted by law—for example, if a request is manifestly unfounded or excessive.

  1. Complaints to the ICO

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office (“ICO”):

Website: www.ico.org.uk Telephone: 0303 123 1113 Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  1. Third-party websites

Our website may contain links to websites operated by third parties. We are not responsible for their privacy practices. You should review the relevant privacy notice before submitting personal information to another website.

  1. Changes to this policy

We may update this privacy policy to reflect changes to our services, suppliers or legal obligations.

The latest version will be published on our website with its effective date.