Self Storage Stockwell Privacy Policy
This Privacy Policy explains how Self Storage Stockwell collects, uses, stores, and protects personal data relating to current and prospective customers. It applies to all Self Storage Stockwell customers and individuals within the local area who use, or consider using, our storage services. We are committed to handling your personal data in accordance with the UK General Data Protection Regulation, the EU General Data Protection Regulation where applicable, and all relevant data protection legislation.
By using our services, visiting our premises, or interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Who We Are and Scope of This Policy
Self Storage Stockwell is a provider of storage units and related services to individuals and businesses in the Stockwell area. For the purposes of data protection law, Self Storage Stockwell is the data controller in respect of the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data.
This Privacy Policy applies to all customers, prospective customers, visitors to our premises, and individuals who contact us or otherwise interact with us in connection with our storage services within the Stockwell area.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identification and contact details such as your full name, postal address, billing address, contact address, and any other address you provide, as well as your date of birth where required to verify your identity.
Communication details such as the content of your enquiries, messages, and correspondence with us, including records of telephone conversations where lawfully recorded, and notes of any visits or interactions in person.
Account and contract information such as your customer account number, contract details, unit number, rental period, payment amount, payment history, and information relating to insurance or other add-on services you may choose.
Payment and transaction data such as payment method details, transaction amounts, payment dates, and billing history. We do not store full card details if processed via secure third-party payment processors; only necessary references, such as partial card information or transaction references, may be retained for verification and accounting purposes.
Security and access data such as CCTV footage at and around our premises, access logs, unit entry records where technology is used to control or monitor access, vehicle registration details where captured for security or parking control, and incident reports.
Technical and usage information such as information about how you interact with our website or digital platforms, including device identifiers, IP address, browser type, and pages visited, where collected through our systems in accordance with applicable law.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us by phone, in person, or through online forms, when you enter into a storage agreement, or when you visit our premises. We may also receive personal data about you from third parties such as payment providers, fraud prevention agencies, or business partners where this is necessary for our services or required by law.
Lawful Basis for Processing
We rely on the following lawful bases for processing your personal data:
Contractual necessity: We process your personal data in order to take steps at your request before entering into a contract and to perform our contract with you. This includes setting up and managing your storage agreement, administering payments, communicating with you about your contract, and providing related customer services.
Legal obligations: We process certain personal data to comply with our legal and regulatory obligations, such as tax and accounting rules, anti-money laundering and fraud prevention requirements, court orders, law enforcement requests, and health and safety obligations.
Legitimate interests: We process personal data where it is necessary for our legitimate interests or those of a third party, and where those interests are not overridden by your rights and freedoms. Our legitimate interests include securing our premises, preventing and detecting crime, managing our business operations, improving our services, and handling complaints or disputes.
Consent: In limited cases, we may rely on your consent, for example for certain marketing activities or optional communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To set up and manage your storage account and contract, including verifying your identity, administering your unit, and communicating with you regarding your agreement and any changes.
To process payments, manage invoicing, address billing queries, and maintain financial and transactional records for accounting, audit, and tax purposes.
To secure and monitor our premises, including through the use of CCTV and access control systems, to prevent and detect crime, and to protect the safety of customers, staff, and property.
To provide customer service, respond to your enquiries, handle complaints, and resolve disputes.
To manage our business operations, including service improvements, quality control, and internal reporting.
To send you information about our services that is relevant to your contract or that you have requested, and, where permitted by law and your preferences, to provide information about similar services that may interest you.
Retention of Personal Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements.
In practice, this means that core contract and billing records will usually be retained for a number of years after your contract ends, in line with applicable limitation periods for legal claims and statutory retention periods. CCTV footage and access logs will typically be retained for a shorter period unless a longer retention is required in connection with a specific investigation, incident, or legal obligation.
When personal data is no longer needed, we will either securely delete it, anonymise it, or, where that is not possible, securely store it and limit access until deletion is possible.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged under written contracts and are required to process your personal data only in accordance with our instructions and to implement appropriate technical and organisational measures to protect it.
Examples of such processors include payment processing providers, IT hosting and maintenance services, customer relationship management systems, security and CCTV maintenance providers, document storage and destruction companies, and professional advisers who support our business operations.
We may also share your personal data with third parties acting as independent controllers, such as law enforcement agencies, regulatory bodies, insurers, professional advisers, courts, and governmental authorities where required by law or where necessary to establish, exercise, or defend legal claims.
If we were to sell, transfer, or merge parts of our business or assets, your personal data may be disclosed to potential or actual purchasers or their advisers, subject to appropriate confidentiality obligations.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or where data is otherwise transferred internationally, we will ensure that an adequate level of protection is provided for your personal data in accordance with data protection law. This may involve the use of approved standard contractual clauses or reliance on an adequacy decision.
Security of Your Personal Data
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures may include access controls, encryption, regular security reviews, staff training, and incident response procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:
The right of access: You can request confirmation as to whether we process your personal data and obtain a copy of that data, together with certain information about how and why it is processed.
The right to rectification: You can request that we correct or complete personal data that is inaccurate or incomplete.
The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other lawful basis for processing.
The right to restriction of processing: You can ask us to restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing.
The right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and to request that we transmit it to another controller where technically feasible.
The right to object: You can object to our processing of your personal data when we are relying on legitimate interests as our lawful basis, including profiling based on those interests. You also have an absolute right to object to direct marketing at any time.
The right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the chance to address your concerns first, so we encourage you to contact us in the first instance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any significant changes will be communicated in an appropriate manner. The most current version of this Privacy Policy will always apply to the personal data we hold about you.
