Storage South Wimbledon Customer Privacy Policy
This Privacy Policy explains how Storage South Wimbledon collects, uses, stores and protects personal data relating to all customers and prospective customers in the Storage South Wimbledon service area. It is designed to meet the requirements of the UK General Data Protection Regulation and related data protection laws. By using our storage services or contacting us in relation to those services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage South Wimbledon customers, former customers and prospective customers in the Storage South Wimbledon area, as well as individuals who communicate with us on their behalf such as authorised users and account contacts. Storage South Wimbledon is the data controller responsible for determining how and why your personal data is processed in connection with our storage services.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and how you use our services. This may include identification and contact details such as name, postal address, billing address, and communication preferences. We also process account and contract details including storage unit number, service history, contract dates, payment status and related correspondence.
For the purposes of managing payments and preventing fraud, we may process limited payment and financial information such as transaction records, billing references and method of payment. When you contact us, we may keep records of communications including enquiries, complaints and feedback so that we can respond and maintain an accurate history of our interactions with you.
Where we operate on-site security and safety measures at storage locations, we may collect security and access information such as vehicle registration details, access logs and video images from closed circuit television systems in and around our premises. These measures are in place to protect our customers, staff, property and facilities.
How We Collect Your Data
Most of the personal data we process is provided directly by you when you request a quote, make a booking, sign a contract, pay for services, visit our facility or contact us by telephone, post or electronic means. We may also receive personal data about you from third parties where this is necessary for our services, such as payment service providers and professional advisers acting on your behalf.
In some cases, we generate data about you as part of providing our services, for example access records or administrative notes relating to your account. Where required by law, we will inform you when we obtain data about you from other sources and explain the purposes for which we intend to use it.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are the performance of a contract, legal obligations, legitimate interests and consent. We process personal data when it is necessary to take steps at your request before entering into a contract, to provide and administer your storage services, to manage your account and to handle any queries or issues that arise.
We also process personal data where we are required to comply with legal obligations, for example in relation to tax, accounting, reporting and responding to valid requests from public authorities. In addition, we may process personal data based on our legitimate interests in managing and developing our business, maintaining the security of our sites and systems, preventing fraud and protecting our legal rights. Where we rely on legitimate interests, we balance those interests against your rights and freedoms and only proceed where those interests are not overridden.
If we wish to use your personal data for certain types of optional communications or activities that are not covered by the lawful bases above, we will ask for your consent. When processing is based on consent, you may withdraw your consent at any time, and we will then stop that processing unless another lawful basis applies.
Purposes of Processing
We use your personal data for a range of purposes necessary to operate our storage business. These purposes include providing storage services and customer support, setting up and managing customer accounts, administering contracts, processing payments, monitoring access to the facility and managing reservations and renewals. We also use personal data to communicate with you about your account, service changes, operational notices and important safety or security information.
We may process personal data to maintain and improve our services, including conducting internal analysis, managing incidents, and training staff. Where permitted, we might also contact you about similar services or offers that may be relevant to you. You can object to direct marketing at any time.
Data Processors and Third Parties
We may share personal data with carefully selected third party service providers who act as data processors on our behalf. These processors may provide services such as payment processing, secure data storage, accounting support, customer relationship management systems, information technology support, security and maintenance of our facilities.
When we use processors, we require them to handle personal data only in accordance with our documented instructions, to keep it secure and confidential and to comply with applicable data protection laws. We do not permit our processors to use your personal data for their own independent purposes.
In certain circumstances we may also share personal data with other third parties where we act as an independent controller. This may include professional advisers, insurers, auditors, law enforcement agencies, regulatory authorities or courts, but only where this is necessary for the purposes described in this Privacy Policy or required by law.
International Transfers
Where possible, we aim to keep your personal data in the United Kingdom or within locations that provide an equivalent level of data protection. If we transfer personal data to countries outside the United Kingdom that do not provide the same level of protection, we will implement appropriate safeguards, such as approved standard contractual clauses or other recognised mechanisms, to ensure that your rights are protected.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. The specific retention period will depend on the type of data and our legal and operational needs.
In general, we retain core customer account and contract information for a period after your relationship with us ends in order to deal with any queries, disputes or claims. Financial and transactional records may be retained for longer periods as required by tax and company laws. Security records such as access logs and closed circuit television images are usually kept for shorter periods unless they are needed in connection with an investigation or legal claim.
When personal data is no longer required for the purposes for which it was collected and there is no legal obligation to retain it, we will securely delete, anonymise or otherwise dispose of it.
Security of Your Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, staff training, physical security at our facilities and procedures for handling potential data breaches. While we take reasonable steps to secure your data, no system can be completely secure, and you should also take care to protect your own information, for example by keeping access codes and account details confidential.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. You have the right to request access to the personal data we hold about you and to receive information about how we process it. You can ask us to correct personal data that is inaccurate or incomplete and, in certain circumstances, you may request that we erase your personal data.
You have the right in some cases to restrict how we use your personal data, for example while we verify its accuracy or assess an objection you have raised. You may also have the right to object to certain types of processing, including processing based on our legitimate interests and, at any time, to object to the use of your personal data for direct marketing.
Where our processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transfer it to another controller where this is technically feasible.
If you wish to exercise any of your rights, we may ask you to provide information to help us confirm your identity and ensure your rights are respected. We will respond to your request in accordance with applicable legal time limits.
Complaints and Contact
If you have concerns about how we handle your personal data, you can contact us using your usual Storage South Wimbledon contact channels, such as in writing or in person at our facility. We will take your concerns seriously and work with you to resolve them. You also have the right to lodge a complaint with the relevant supervisory authority for data protection if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data processing practices. When we make significant changes, we will take reasonable steps to inform you, for example by displaying a notice at our facility or updating the information available through our usual communication channels. The most recent version of this Privacy Policy will always apply to the processing of your personal data.
