Legal
Privacy, terms and disclaimer
How the CSTA uses your information, the terms of this website, and what the association does and does not guarantee.
Website terms of use
Welcome to the website of the Container Self-Storage & Traders Association (CSTA). By using it you agree to these terms, which together with the privacy notice below govern the association’s relationship with you in relation to this website. If you disagree with any part of them, please do not use the website.
‘The CSTA’, ‘the association’, ‘we’ and ‘us’ mean the Container Self-Storage & Traders Association, Suite 3, Charter House, 26 Claremont Road, Surbiton KT6 4QU, United Kingdom. The association is operated by Oakhill Media Ltd, registered in England and Wales, company number 04331700. ‘You’ means the person using the website.
- The content of this website is for general information and use only. It may change without notice.
- Neither we nor any third party warrant the accuracy, timeliness, completeness or suitability of the information and materials on this website for any particular purpose. Such information may contain inaccuracies or errors, and we exclude liability for them to the fullest extent permitted by law.
- Your use of any information or materials on this website is at your own risk. It is your responsibility to ensure that any products, services or information available through this website meet your requirements.
- This website contains material owned by or licensed to us, including its design, layout, look, appearance, graphics and text. It may not be reproduced without our written permission, other than for your own reference.
- Members’ names, logos and trademarks shown on this website belong to those members.
- Unauthorised use of this website may give rise to a claim for damages and may be a criminal offence.
- Links to other websites are provided for your convenience. They do not mean that we endorse those websites, and we are not responsible for their content.
- These terms are governed by the laws of England and Wales, and the English courts have non-exclusive jurisdiction over any dispute arising under them.
Privacy notice
This notice explains what personal information the CSTA collects through this website and its membership, why, who it is shared with, and your rights. It was last updated on 10 October 2026. The data controller is Oakhill Media Ltd, which operates the association. You can contact us at patrick@containa.org or by post at the address above.
What we collect and why
Membership. When a company applies to join we collect its name, what it does, a description and logo for its listing, website, town and country, trading address, telephone, and the name, job title and email address of the person applying, together with any accounts email, purchase order number and VAT number given for invoicing. We record the Code of Conduct declaration (who signed it, their job title, the date and the edition). We use this to assess the application, run the membership, publish the company’s listing in the member directory and on the member map, issue invoices and renewals, and send members the association’s notices. The legal basis is the membership contract and, for accounting records, our legal obligations.
What is published. A member’s listing shows the company name, description, logo, member types, website, town and country, and any sites the member chooses to add to the map. Private details, including the trading address, telephone, contact and invoice emails, VAT number and the names of staff, are never published. Members can change their listing in the members’ area at any time.
Payments. Card payments are taken on Stripe’s secure page. Card details never reach this website. Stripe keeps its own records of the payment and emails the invoice or receipt; we keep the amount, date, currency and invoice reference. Invoices and payments are also recorded in the association’s accounts, which we keep for six years as accounting law requires.
The members’ area. Members sign in with their email address and a password, which we store only as a secure hash. We record when an account signs in, and keep failed sign-in attempts with the network address they came from for an hour, so that accounts can be locked against repeated guessing. Members’ documents, certificates and logos are available only to signed-in members.
Enquiries. When you use the contact form, or the form on a member’s listing, we collect your name, company, email address, telephone number and message. A general enquiry goes to the secretariat; a member enquiry goes to that member, who will reply to you directly. We keep enquiries so that they can be followed up, and we count how many each member receives. Messages that look like spam are held for the secretariat to review rather than delivered.
News by email. If you ask for CSTA news, or tick the box when joining, your email address and name are added to the association’s mailing list, which is run for us by Mailchimp. Every email has an unsubscribe link, and you can also ask us to remove you. We do not add anyone to the list without their consent.
Invitations to join. From time to time we email companies in the container self-storage and container trading industries, using business contact details published in trade directories and on company websites, to tell them about the association and invite them to join. We do this in our legitimate interest as a trade association, send at most one reminder, and stop at once if you reply to say you would rather not hear from us. You can object at any time by replying to the email or writing to us.
Members near you. When you open the member directory, it starts with the members nearest the town your internet connection appears to come from. We look your IP address up in a copy of DB-IP’s location database kept on our own server, so it is not sent to anyone else; where no town is known, we use the country our hosting provider’s network passes on. We use the result only to put that page in order and do not store it. The town is often your internet provider’s rather than your own, so the page also offers your exact location: your browser asks you first (and remembers your answer), then sends your position to this website, rounded to about 100 metres, only to sort the list; it is not stored either. Members who are signed in start at their own listing. IP geolocation by DB-IP.
Anonymous website counts. We count public page views and completed postcode or location searches as daily totals, with broad source categories such as search engines or direct visits. These counters use no cookies and store no IP address, visitor identifier, account identity, search text, coordinates or full referring address. The secretariat sees aggregate reports; members see totals for their own listing and enquiries. Counts are approximate page views, not unique people.
Keeping the website working. Our hosting provider keeps standard server logs, including IP addresses, for security and to diagnose faults. Contact forms use an essential session cookie and short-lived signed form tokens to prevent duplicate and automated submissions; we keep hashed sender and browser counters for rate limiting, which expire within 24 hours.
Who we share information with
We use a small number of service providers to run the website and the association, and share with them only what each needs: Render (hosting, with the database in the European Union), Stripe (card payments and invoices), Mailchimp (the news mailing list), Resend (sending the website’s emails), Sage (the association’s accounts), Google Fonts (the typefaces on each page, which means your browser requests them from Google), and OpenStreetMap (street-map tiles, loaded only when you zoom in close on the member map or choose “Streets”). Some of these providers process data outside the United Kingdom under safeguards recognised by UK law. We do not sell or rent personal information, and we do not share it with anyone else unless the law requires it.
How long we keep it
We keep membership, payment and declaration records while the company is a member and for six years afterwards, as accounting rules require. Other records, such as enquiries and applications that do not lead to membership, are kept only as long as they are needed, and you can ask us to delete them.
Your rights
Under the UK General Data Protection Regulation and the Data Protection Act 2018 you can ask us for a copy of the personal information we hold about you, ask us to correct or delete it, ask us to restrict how we use it, object to our using it, and ask for it in a portable form. There is no fee, and we will reply within one month. Email patrick@containa.org or write to the Container Self-Storage & Traders Association, Suite 3, Charter House, 26 Claremont Road, Surbiton KT6 4QU, United Kingdom. If you are unhappy with how we handle your information you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
This website sets only the cookies it needs to work: a session cookie, which keeps you signed in to the members’ area for up to 14 days unless you sign out and also protects forms, and a security cookie that stops forms being submitted from other websites, which lasts up to a year. We do not use advertising cookies. We do not currently use Google Analytics or any other analytics service; if we switch one on in future, it will run only after you accept it in a banner on the site. The film on the home page is served from this website, not from a video service. Stripe’s payment page sets its own cookies, described in Stripe’s privacy policy.
Security
The website is served over HTTPS. Passwords are stored as hashes, access to members’ and applicants’ details is limited to the secretariat, and card details are handled only by Stripe.
Changes to this notice
We may update this notice from time to time and will show the date of the latest change at the top of it.
Disclaimer
The information on this website is for general information only. We try to keep it accurate and up to date, but we make no representations or warranties of any kind about the completeness, accuracy, reliability, suitability or availability of the website or the information, products, services or related graphics on it. Any reliance you place on such information is at your own risk.
In no event will we be liable for any loss or damage, including indirect or consequential loss or damage, or any loss of data or profits, arising out of or in connection with the use of this website.
The member directory. Members listed in the directory belong to the CSTA and have agreed to follow the CSTA Code of Conduct. The CSTA does not provide, supervise or guarantee its members’ services and is not a party to any contract between a member and its customers. Please agree terms with the company directly.
This website links to other websites that are not under our control. We have no control over their nature, content or availability, and a link does not imply a recommendation of the website or the views expressed on it. We take no responsibility for the website being temporarily unavailable for reasons beyond our control.