01 Who we are
storage.ae is a serviced self-storage company operating in Dubai and the UAE. This privacy policy covers all services we offer — including our website, mobile app, web dashboard, and the pickup, storage, and delivery operations we perform on your behalf.
The data controller is storage.ae Self Storage LLC, registered in Dubai under UAE licence 586077, with its principal place of business at Al Quoz Industrial 3, Dubai, UAE. You can reach our Data Protection Officer at info@800storage.com.
02 Data we collect
The Company respects the privacy of its clients and is committed to protecting personal data in accordance with applicable laws of the United Arab Emirates.
We may collect and process personal information including, but not limited to:
- Full name and contact details (phone number, email address).
- Emirates or billing address.
- Payment-related information (processed via secure third-party providers)
- Inventory details and service history
- Communications made via the Application, email, WhatsApp, or SMS
Personal data is collected and used for the following purposes:
- Providing and managing storage services.
- Processing payments and invoices.
- Scheduling and executing pickups, deliveries, and service requests.
- Responding to customer inquiries and support requests.
- Improving service quality and operational efficiency.
- Complying with legal and regulatory obligations.
We may share personal data with trusted third-party service providers, including payment processors, IT service providers, and subcontractors, strictly for the purpose of delivering our services.
The Company implements reasonable technical and organizational measures to safeguard personal data against unauthorized access, loss, misuse, or alteration.
By using our services or the Application, the Renter acknowledges and agrees to the collection and processing of personal data as described in this Privacy Policy.
For privacy-related inquiries, clients may contact the Company through official communication channels.
03 How we use your data
We use your data only for specific, legitimate purposes, primarily to operate the service you’ve signed up for:
- Operate our services — scheduling pickups, processing items, fulfilling deliveries, maintaining your inventory catalog
- Verify your identity and comply with UAE identity and KYC requirements for regulated storage
- Process payments, issue UAE VAT-compliant invoices, and manage billing disputes
- Send transactional notifications — pickup confirmations, delivery updates, account alerts, security notices
- Provide customer support and respond to your requests
- Improve our services through aggregated analytics and product research
- Detect and prevent fraud, unauthorized access, and abuse of our platform
- Comply with legal obligations, court orders, or lawful requests from UAE authorities
Marketing
We only send marketing communications if you’ve opted in. You can unsubscribe at any time from any marketing email, or by disabling marketing notifications in your account settings. Transactional messages (pickup confirmations, billing) are not marketing and will continue as part of the service.
04 Legal basis for processing
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, we rely on the following legal bases to process your data:
| Contract performance | most processing is necessary to deliver the storage services you’ve signed up for |
| Legal obligation | identity verification, tax invoicing, records retention, and regulatory reporting |
| Legitimate interests | service improvement, security monitoring, and fraud prevention, balanced against your rights |
| Consent | for marketing communications and optional features like location-based pickup suggestions |
06 Data retention
We keep your data only as long as we need it. Different data types have different retention periods:
| Account data | kept for the duration of your active account, plus 12 months after closure |
| Financial records & VAT invoices | 5 years, as required by UAE tax law |
| Operational logs and pickup photos | 24 months, to support claims and audits |
| CCTV footage at facilities | 30–90 days, then overwritten |
| Marketing preferences | until you unsubscribe or close your account |
| Support conversations | 24 months, for training and quality |
After these periods, data is either securely deleted or anonymised so it can no longer identify you.
07 How we protect your data
We take data security seriously. Our safeguards include:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Role-based access controls — staff only see the data they need to do their job
- Two-factor authentication required for all staff accounts
- Regular penetration testing by independent security firms
- Segregated UAE-based data centres with 24/7 monitoring
- Documented incident response plan with a 72-hour breach notification commitment
If a breach happens
In the unlikely event of a data breach that affects you, we will notify you and the UAE Data Office within 72 hours of discovery, explain what happened, what data was involved, and what you should do to protect yourself.
08 Your rights
You have full rights over your personal data. Most rights can be exercised directly from your account dashboard; for anything else, contact info@800storage.com and we will respond within 30 days.
10 Children’s privacy
Our services are not directed at children under 18, and we do not knowingly collect personal data from anyone under that age. If you believe a minor has provided data to us, contact info@800storage.com and we will promptly delete it.
11 International data transfers
Your personal data is primarily stored and processed on servers located in the UAE. Where we use service providers outside the UAE (for example, for email delivery or error logging), we ensure they offer an adequate level of data protection through standard contractual clauses or equivalent safeguards recognised under UAE data protection law.
12 Changes to this policy
We may update this privacy policy from time to time. The current version and effective date are always shown at the top of this page. For material changes, we will give you at least 30 days’ notice by email or in-app notification. Non-material changes (typos, clarifications) take effect immediately and are logged in our version history.
Questions or requests?
Our Data Protection Officer responds to privacy requests within 30 days, most within 48 hours. For urgent concerns, reach us directly on WhatsApp.