What Data We Hold

For an enquiry or for a quote that you do not accept, we will process your name and contact information. If you proceed to rent storage spacefrom us, we will process your name, address, contact details, identificationand payment information.We also generate log files from various servers. This will include an IP address assigned to you or to your internet service provider.

How We Use Your Personal Data

References to the legal basis for processing of your personal data (e.g. "(Basis: Art. 6(f).)") are a reference to the article of the General Data Protection Regulation. Each piece of personal data that we process must have a legal basis.

To Deal With Enquriries or For A Quote That You Do Not Accept

If you call us, email us or engage us on our ‘Live Chat’ facility we will follow up on your enquiry and see if there is a way in which we can help you. We keep a record of enquiries received, to help us plan our business strategy and check that we are offering what potential clients want. If you provide us with information for a quote and then do not accept the quotation, we will keep a record of your enquiry. We keep a record of enquiries receivedfor 2 years, to help us plan our business strategy and check that we are offering you what you need. (Basis: Art. 6(b): we need to use your details to follow up with you and this processing is necessary in order to take steps at your request prior to entering into a contract. Art. 6(f): business planning is a legitimateactivity for a business.)

If You Rent Storage With Us

In order to progress your order, we will need to process your data so that we can provide you with the service that you require. We need to process payment details in order to fulfil the contract. We will retain your personal data for five years after you vacate the premises. (Basis: Art. 6(b): processing is necessary for the performance of a contract)We collect either your driving licence or take a copy of your passport for identification purposes (Basis:Art. 6(b): processing is necessary for the performance of a contract. If we take a copy of your passport, we will ask for your explicit consent Art 9 (2)(a))We’ll send you occasional updates from our email service keeping you up to date with-M Store news. You can opt out of these at any time.(Basis: Because you have a contract with us, we’d like to keep in touch with you. Art. 6(f): this is legitimate activity for a business.)

Personal Data on CCTV

We use CCTV 24 hours a day to monitor the M-Store premises for security reasons. As your image is your personal data, we are committed to your rights under Data Protection legislation.(Basis: Art. 6(f): we have a legitimate interest to protect the premises, our business and the stored items of our clients)

Technical Data

We use the logs from our servers to help with our company's security as well as to look at visitor behaviour (e.g. which website pages get the most traffic or are the most popular).(Basis: Art. 6(c): we have a legal obligation to protect the data of our clients and our staff. Art. 6(f): strategy planning is a legitimate activity for a business.)

Your Data and Transfers Outside of the EEA

We use Microsoft Office 365 which is based in the USA. Howeveradequate safeguards are in place as Microsoft are certified to the EU-US Privacy Shield Framework. More details can be found here https://www.microsoft.com/en-us/trustcenter/privacy/where-your-data-is-located We also use Mailchimp as an email provider. Mailchimp is based in the USA butis certified to the EU-US Privacy Shield Framework.

Your Rights

You have rights in respect of our processing of your personal data which are:

To access to your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we will need to remove information about other people).To rectify incorrect personal data that we are processing.

• To request that we erase your personal data if:
• we no longer need it;
• if we are processing your personal data by consent and you withdraw that consent;
• if we no longer have a legitimate ground to process your personal data; or we are processing your personal data unlawfully
• To object to our processing if it is by legitimateinterest.
• To restrict our processing if it was by legitimate interest.
• To request that your personal data be transferred from another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.

If you want to exercise any of these rights, please contact us using the details at the end of this notice.

You also have the right to lodge a complaint about our processing the UK's Information Commissioner's Office.

Third Parties

As a prospective customer,we not transfer your personal data to third parties at this stage except the following:

• Companies that provide services to us. Our telephone service providers will get to see your phone number if we call you and our broadband supplier which could see your email address (but not the content of what you send us, if you encrypt it).
• In response to a court order. It is possible, though unlikely, that we might be forced to disclose your information in responseto a court order

As a customer, we transfer your data to the following third parties:

• Cloud service & IT providers. We use a number of cloud service & IT providers, such as our accountancy software, email providers, Microsoft Office 365. We also IT professionals who not only ensure that our systems run smoothly, but are also committed to the highest standards of data protection compliance.
• Payment providers. We use Worldpay to process your payments
• If you do not pay your bills, we may choose to engage a third party to recover any money you owe us
• In response to a court order. It is possible, though unlikely, that we might be forced to disclose your information in responseto a court order

Technical Security

Our system and its’ security is Monitored and maintained by CST LTD

Technical Security

This is the length of time that we will continue to process or store your personal data.

Data about enquiries: duration of enquiry, then two years in case you come back

Data about clients -The length of the client’s contract with us plus a further 5 years.

CCTV images are stored for 90 days and then deleted.

Server Logs: One Year

Contact Us

M-Store,Victoria Business Park

Roche, Cornwall

Pl26 8LQ

01726 890880, enquiries@m-store.biz