Data Protection & Your Rights
🇬🇧 UK GDPR Compliant: Your personal data is protected under UK Data Protection Act 2018
Your Data Protection Rights
Under UK GDPR, you have comprehensive rights regarding your personal data.Storage Facility is operated by Storage Facility Ltd. We are committed to helping you exercise these rights quickly and transparently.
📋 Right to Access
Request a copy of all personal data we hold about you, including how it's used and who it's shared with.
✏️ Right to Rectification
Correct any inaccurate or incomplete personal data we hold about you.
🗑️ Right to Erasure
Request deletion of your personal data when it's no longer needed or you withdraw consent.
📦 Right to Portability
Receive your personal data in a machine-readable format to transfer to another service.
⏸️ Right to Restriction
Limit how we process your data while disputes are resolved or verification takes place.
⛔ Right to Object
Object to processing based on legitimate interests, direct marketing, or research purposes.
How to Exercise Your Rights
📞 Contact Information:
📧 Email:
📞 Phone:
🕒 Hours: Monday-Friday 9:00 AM - 5:00 PM
📍 Address: Storage Facility
Torquay, Devon, United Kingdom
✉️ Subject: "Data Protection Request"
⏱️ Response Time: We will respond within 30 days of receipt (UK legal requirement)
📝 What to Include in Your Request:
- Your full name and email address used with our service
- Clear description of what you're requesting
- Proof of identity (to protect your data security)
- Any specific data or timeframes you're concerned about
🔍 Identity Verification:
To protect your privacy, we may need to verify your identity before processing your request:
- Copy of photo ID (driving licence, passport)
- Proof of address if requesting data about a specific location
- Access to the email account associated with your service
Data Processing Activities
| Purpose | Data Types | Legal Basis | Retention Period |
|---|---|---|---|
| Account Management | Name, Email, Phone | Contract Performance | While account is active |
| Microsoft OAuth | Basic Profile Info | Consent & Contract | Until access revoked |
| Payment Processing | Billing Information | Contract Performance | 7 years (tax law) |
| Marketing Communications | Email, Preferences | Explicit Consent | Until consent withdrawn |
| Website Analytics | Usage Data, IP Address | Consent | 26 months maximum |
| Security Monitoring | Access Logs, IP Address | Legitimate Interest | 12 months |
Third-Party Data Sharing
🔗 Microsoft Services
When you use Microsoft OAuth authentication, your data is processed by:
- Microsoft Corporation (privacy policy: privacy.microsoft.com)
- Data shared: Basic profile information only (name, email)
- Your control: Revoke access anytime via Microsoft account settings
📊 Analytics Partners
- Google Analytics: Website usage analytics (only with consent)
- Your control: Opt-out via cookie preferences or browser settings
💳 Payment Processors
- PCI DSS compliant payment processors for secure transactions
- We do not store full payment card details
Data Security Measures
🔒 Technical Safeguards
- SSL/TLS encryption for data transmission
- Encrypted data storage
- Regular security updates and patches
- Intrusion detection systems
👥 Organisational Measures
- Staff training on data protection
- Access controls and authentication
- Regular security assessments
- Incident response procedures
Data Breach Procedures
🚨 In the unlikely event of a data breach affecting your personal data:
- Immediate response: We will contain and assess the breach within 24 hours
- Authority notification: ICO will be notified within 72 hours if required
- Individual notification: You will be informed without undue delay if high risk
- Mitigation: We will take steps to minimise impact and prevent recurrence
- Support: Free support and guidance for affected individuals
Complaints & Supervisory Authority
📞 Direct Contact (Preferred)
We encourage you to contact us directly with any concerns:
- Email:
- Phone:
- Subject: "Data Protection Complaint"
🏛️ Information Commissioner's Office (ICO)
You have the right to lodge a complaint with the UK's supervisory authority:
- Website: ico.org.uk
- Phone: 0303 123 1113
- Online complaint form available
- Free service for individuals
Updates to Data Protection Practices
We regularly review our data protection practices to ensure compliance with UK law and best practices. Any significant changes will be communicated through:
- Updates to this page with clear change notifications
- Email notifications to account holders (for material changes)
- Prominent notices on our website
Last Modified: