Privacy & Cookies Policy

1. Who we are

This policy explains how Edinburgh Self Storage Limited (“ESSL”, “we”, “us”) collects and uses personal information. We trade as Edinburgh Self Storage from two sites: Jenners Depository, 140 Balgreen Road, Edinburgh EH12 5XQ, and Bonnington, 12 Bonnington Road Lane, Edinburgh EH6 5BJ. This policy applies to our customers, tenants, enquirers, website visitors and anyone who visits our sites.

We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner’s Office (ICO) under registration number ICO:00014741992.

Contact us about your data

• Post: Edinburgh Self Storage, 140 Balgreen Road, Edinburgh EH12 5XQ
• Email: info@edinburghstorage.co.uk
• Phone: 0131 337 7277 (Jenners Depository)

Edinburgh Self Storage Limited is registered in Scotland, company number SC288778. Our registered office is c/o Farries, Kirk & McVean, Dumfries Enterprise Park, Heathhall, Dumfries DG1 3SJ. We are not required to appoint a Data Protection Officer, but our managing director is responsible for data protection.

2. What we collect and why

We collect personal data that you give us, data generated when you use our sites and website, and occasionally data from third parties such as credit reference agencies. The table shows each purpose and the lawful basis we rely on under UK GDPR.

Purpose	Data we use	Lawful basis
Answering enquiries and quotes (web form, phone, email)	Name, contact details, what you need	Legitimate interests; steps before a contract
Setting up and running a storage agreement or lease	Name, address, contact details, proof of identity and address, alternative contact, what you store (in general terms), payment details	Contract; legal obligation (identity checks)
Taking payment and managing arrears	Payment and billing records, account history	Contract; legitimate interests (recovering debts)
Exercising our lien and selling goods for unpaid charges	Account history, notices sent	Contract; legitimate interests
Insurance of stored goods (StoreProtect or your own cover)	Name, value of cover, claims information	Contract
Site security and crime prevention	CCTV images, access code or fob use, vehicle registrations	Legitimate interests (keeping people and property safe)
Accessibility support	Information you choose to give us about an access need, so that we can allocate a suitable unit or provide help	Legal obligation (Equality Act 2010); your explicit consent for any health information
Marketing: offers and news by email	Name, email address	Consent (existing customers: legitimate interests, with opt-out)
Website analytics and advertising	IP address, device and browser information, pages visited, referral source	Consent (non-essential cookies)
Reviews	Name, email, details of your agreement shared with our review provider so it can invite you to leave a review	Legitimate interests
Legal, tax and accounting records; responding to police or regulators	Contract and payment records	Legal obligation

You don’t have to give us your personal data, but we can’t provide storage or a lease without the information listed for that purpose.

3. CCTV, site access and cookies

CCTV. We operate CCTV at both sites, including car parks, loading bays, entrances, corridors and storage areas. Signs are displayed where cameras operate. We use footage to protect people, property and stored goods, and to investigate incidents. We may share it with the police, insurers or our legal advisers. [Confirm whether any cameras record audio, or read vehicle number plates.]

Access control. Our [access control system] records when your code or fob is used to enter a site or your unit. We use this for security and to resolve disputes about access.

Cookies. Our website uses cookies, which are small files stored on your device.

• Essential cookies make the site work and are set without consent.
• Analytics cookies (Google Analytics, managed through Google Tag Manager) tell us how visitors use the site.
• Advertising cookies (Google Ads remarketing, YouTube) let us show you our adverts on other websites after you have visited ours.
• Reviews widget (Feefo) may set cookies to display customer reviews on our pages.

We only set analytics and advertising cookies if you agree through our cookie banner. You can change your choice at any time through [the cookie settings link] or your browser settings. You can also manage Google advertising through Google Ad Settings (adssettings.google.com).

4. Who we share your data with

We do not sell your personal data. We share it only where needed, with:

• Service providers acting for us: our storage management software provider, Space Manager, payment processor, IT and email providers, and website host and developer.
• Insurers: StoreProtect or other insurers, for cover and claims
• Review provider: Feefo & Google, to invite you to review our service
• Google: for website analytics and advertising, where you have consented
• Professional advisers: accountants, solicitors and if required debt recovery agents
• Police, courts, HMRC and regulators: where the law requires it, or to prevent or detect crime

Service providers may only use your data on our instructions and must keep it secure.

International transfers. Some providers, such as Google, may process data outside the UK. Where they do, we rely on UK adequacy regulations or the ICO’s International Data Transfer Agreement or Addendum to protect it.

5. How long we keep your data

We keep personal data only as long as we need it, then delete or anonymise it.

Data	How long
Storage agreements, leases, identity checks and payment records	6 years after the agreement ends (tax, accounting and legal claims)
Enquiries and quotes that don’t lead to an agreement	36 months
CCTV footage	30 days, unless kept longer to investigate an incident or claim
Access control logs	30 days, unless kept longer to investigate an incident or claim
Information about an access need	For as long as your agreement lasts, then deleted
Marketing list	Until you unsubscribe; then a suppression record so that we don’t contact you again
Website analytics data	12 months

6. Security

We use appropriate technical and organisational measures to protect your data. These include access-controlled systems, staff confidentiality and secure payment processing. We do not keep full card numbers on our systems. No transmission over the internet is completely secure, so we cannot guarantee the security of data you send to us online.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted, where we have no lawful reason to keep it
• restrict or object to how we use your data, including for direct marketing at any time
• receive your data in a portable format, where this applies
• withdraw consent at any time, where we rely on consent

To use any of these rights, contact us using the details in section 1. We will respond within one month. We don’t charge a fee in most cases.

8. Complaints

If you are unhappy with how we have handled your data, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Other websites and changes to this policy

Our website links to other sites, such as Feefo. We are not responsible for their privacy practices.

We may update this policy from time to time. The latest version will always be on our website.

Last updated: October 2026