Who We Are

Storagefull operates from Tunwell Lane Cottages, Sovereign Ct, Bradford BD2 2DB, United Kingdom. We specialise in IT infrastructure security for businesses across the UK, and we handle client data with the same care we apply to securing your networks.

Under UK data protection law, we're both a data controller and processor, depending on the service. That means we determine how certain data gets used, and we also handle data on behalf of our clients.

Information We Collect

Information You Give Us Directly

When you contact us for consultation, request services, or sign up for our learning programmes, we collect what you provide:

• Your name, job title, and company details
• Contact information including email address and phone number
• Technical details about your existing infrastructure when you request security assessments
• Payment and billing information for service agreements
• Any correspondence you send us through email or contact forms

Information We Collect Automatically

Our website gathers basic technical data when you visit. This includes your IP address, browser type, pages visited, and time spent on the site. We use this to improve our services and spot potential security issues.

If you're a client using our monitoring services, we collect system logs, network traffic patterns, and security event data as part of our service delivery. This is essential for identifying threats and maintaining your infrastructure security.

How We Use Your Information

We don't use your data for marketing purposes unless you've explicitly opted in. And even then, you can change your mind whenever you want.

Legal Basis for Processing

Under UK GDPR, we need a lawful reason to process your personal data. Here's what applies:

• Contract Performance: Most of our data processing happens because it's necessary to deliver the services you've contracted us for
• Legal Obligation: Some data processing is required by law, particularly around financial records and security incident reporting
• Legitimate Interest: We process certain data to improve our services and maintain website security, balanced against your privacy rights
• Consent: For optional activities like marketing communications, we ask for your explicit permission

Who We Share Data With

We're selective about data sharing. Your information stays with us unless there's a specific reason to involve others:

We might share data with professional advisers like solicitors or accountants when needed for business operations. And occasionally, we're legally required to share information with regulatory authorities or law enforcement.

What we don't do: sell your data to third parties, share it for marketing purposes without permission, or transfer it outside the UK without proper safeguards.

International Transfers

We primarily store and process data within the United Kingdom. If we need to transfer data internationally, such as using certain cloud services with global infrastructure, we ensure proper protections are in place.

This means using Standard Contractual Clauses approved by UK authorities, verifying that recipient countries have adequate data protection laws, or obtaining your explicit consent for the transfer.

How We Protect Your Data

Given our work in IT security, we practice what we preach. Our data protection measures include:

1. Encrypted data storage and transmission using industry-standard protocols
2. Access controls limiting who can view client information based on legitimate need
3. Regular security audits and vulnerability assessments of our own systems
4. Secure backup procedures with encrypted off-site storage
5. Staff training on data protection and information security
6. Incident response procedures for potential data breaches

No system is completely invulnerable, but we maintain robust defences and constantly update our security posture based on emerging threats.

How Long We Keep Data

We keep your information only as long as necessary for the purposes we collected it. Here's what that looks like in practice:

• Client service records are retained for seven years after contract termination to meet financial and legal requirements
• Security incident logs may be kept longer if they relate to ongoing investigations or legal matters
• Marketing contact information is deleted when you unsubscribe or after two years of inactivity
• Website analytics data is anonymised after 26 months
• General enquiry correspondence is typically deleted after three years unless it relates to active services

Some data might be kept in backup systems for a short period after deletion from active systems, but these backups are regularly cycled and ultimately removed.

Your Rights

UK data protection law gives you significant control over your personal information. Here's what you can do:

To exercise any of these rights, email us at contact@storagefull.net or write to our Bradford address. We'll need to verify your identity before processing requests, which might involve asking for additional information.

Cookies and Tracking

Our website uses minimal cookies to function properly. Essential cookies remember your preferences during a session and keep the site secure. We also use analytics cookies to understand how visitors use the site, but these don't identify you personally.

You can disable cookies through your browser settings, though this might affect how our website works. We don't use advertising cookies or share cookie data with third parties for marketing.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active clients by email and update the "Last Updated" date at the top.

Continued use of our services after policy updates means you accept the revised terms. If you disagree with changes, contact us to discuss your options.

Children's Privacy

Our services target business clients, and we don't knowingly collect information from individuals under 16. If you believe we've accidentally collected data from a child, please contact us immediately so we can delete it.