Privacy Policy
HBC Storage is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data in compliance with GDPR and international privacy laws.
1. Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you:
- Register for our services or create an account
- Request information about our storage solutions
- Contact us through our website, email, or phone
- Subscribe to our newsletters or marketing communications
- Participate in surveys, events, or promotional activities
- Apply for employment opportunities
Types of Personal Data
Category | Data Types | Purpose |
---|---|---|
Contact Information | Name, email address, phone number, postal address | Communication, service delivery, account management |
Business Information | Company name, job title, industry, business requirements | Service customization, business relationship management |
Technical Information | IP address, browser type, device information, usage data | Website optimization, security, analytics |
Transaction Data | Service agreements, payment information, transaction history | Service provision, billing, compliance |
Automatically Collected Information
When you visit our website, we automatically collect certain information through cookies and similar technologies:
- Device and browser information
- IP address and location data
- Website usage patterns and preferences
- Referral sources and search terms
- Session duration and page interactions
2. How We Use Your Information
Primary Purposes
We use your personal information for the following purposes:
- Service Delivery: Providing storage solutions, managing your account, and fulfilling contractual obligations
- Communication: Responding to inquiries, providing customer support, and sending service-related notifications
- Business Operations: Processing transactions, managing relationships, and improving our services
- Compliance: Meeting legal and regulatory requirements, including safety and security standards
- Marketing: Sending relevant information about our services (with your consent)
- Analytics: Understanding usage patterns to improve our website and services
Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contractual Necessity: To perform our services and fulfill agreements
- Legitimate Interest: For business operations, security, and service improvement
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws and regulations
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
Service Providers
We may share information with trusted third-party service providers who assist us in:
- Website hosting and maintenance
- Payment processing and financial services
- Customer relationship management
- Marketing and communication services
- Analytics and performance monitoring
- Legal and professional services
Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes, court orders, or government requests
- Protect our rights, property, or safety
- Investigate potential violations of our terms of service
- Prevent fraud or other illegal activities
- Respond to emergency situations
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.
4. Data Security and Protection
We implement comprehensive security measures to protect your personal information:
Technical Safeguards
- Encryption: All data transmissions are encrypted using SSL/TLS protocols
- Access Controls: Strict authentication and authorization procedures
- Firewalls: Advanced network security and intrusion detection systems
- Regular Updates: Continuous security patches and system updates
- Monitoring: 24/7 security monitoring and incident response
Organizational Measures
- Employee training on data protection and privacy
- Confidentiality agreements with all staff and contractors
- Regular security audits and assessments
- Incident response and breach notification procedures
- Data minimization and retention policies
Security Certifications
Our security practices are certified under:
- ISO 27001:2022 - Information Security Management
- SOC 2 Type II - Security and Availability
- GDPR Compliance Framework
5. Your Rights and Choices
Under GDPR and other applicable privacy laws, you have the following rights regarding your personal information:
Data Subject Rights
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.
Marketing Communications
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in our emails
- Contacting us directly
- Updating your preferences in your account settings
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our cookie practices, please see our Cookie Policy.
Types of Cookies We Use
- Essential Cookies: Necessary for website functionality
- Performance Cookies: Help us understand how visitors use our site
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
7. International Data Transfers
As a global company, we may transfer your personal information to countries outside your jurisdiction. We ensure adequate protection through:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Certification schemes and codes of conduct
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
Retention Periods
- Customer Data: Duration of business relationship plus 7 years for legal compliance
- Marketing Data: Until consent is withdrawn or 3 years of inactivity
- Website Analytics: 26 months from collection
- Employment Data: 7 years after end of employment
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our website
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
11. About HBC Storage
HBC Storage is a leading global provider of bulk liquid storage solutions, operating from our headquarters in Birmingham, United Kingdom.
Company Information
Company Name: HBC Storage
CEO: Mrs. Danielle Kelly
Chairman: James Richardson
Headquarters: 1 Centenary Square, Birmingham, B1 1HQ, UK
UK Registration: 2166047018
VAT Number: BE0892758997
US Registration: 3471378
Banking Partner: HSBC UK Bank
Our Partners
We work with industry-leading partners to provide comprehensive storage solutions:
- Royal Vopak - Global tank storage leader
- Oiltanking GmbH - Independent tank storage provider
- HOYER GmbH - Logistics and tank container services
- VTTI - Independent storage terminal operator
Contact Information
- Phone: +44 7939 387228
- Email: storage@hbcstorage.com
- Privacy Email: privacy@hbcstorage.com
- Emergency Support: 24/7 availability
- Business Hours: Mon-Fri 8:00-17:00 GMT/BST
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
UK Headquarters
Address: 1 Centenary Square
Birmingham, B1 1HQ, United Kingdom
Phone: +44 7939 387228
Email: privacy@hbcstorage.com
General Email: storage@hbcstorage.com
Data Protection Officer
Name: Mrs. Danielle Kelly (CEO)
Email: dpo@hbcstorage.com
Privacy Email: privacy@hbcstorage.com
Response Time: Within 48 hours
Emergency: +44 7939 387228
Supervisory Authority
You have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).
Website: ico.org.uk