Storage West Brompton Privacy Policy
This Privacy Policy explains how Storage West Brompton collects, uses, stores, and protects the personal data of all customers and prospective customers in the West Brompton area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018, and how you can exercise those rights.
By using our storage services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Who This Policy Applies To
This Privacy Policy applies to all Storage West Brompton customers, former customers, potential customers, visitors to our storage facilities, and any individuals who contact us or whose data we process in connection with providing storage and related services in the West Brompton area.
What Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identity and contact details: name, title, postal address, billing address, contact address, and other contact details such as online identifiers used to communicate with us.
Contract and account information: storage unit number, rental dates, goods description where provided, payment history, account notes, correspondence, and any documents you provide for verification or contractual purposes.
Payment information: details required to take and record payments, such as partial card details or transaction references. Card payments may be processed directly by our payment processor, which may mean we do not see or store your full card details.
Security and access data: CCTV images and recordings from our premises, entry and exit logs for our site or individual units, and incident reports relating to safety or security.
Communication data: records of communications with us, including enquiries, complaints, feedback, or service requests made in person, by post, or online.
Technical and usage data: limited technical information about how you interact with our website or online booking systems, such as basic device and browser details, log information, and browsing activity related to our services where applicable.
How We Collect Your Personal Data
We collect personal data directly from you when you:
Enquire about, reserve, or rent a storage unit.
Visit our site and appear on CCTV or access control logs.
Communicate with us for support, feedback, or general enquiries.
Make payments or request invoices and receipts.
We may also obtain personal data from third parties, such as payment processors, identification verification providers, law enforcement or regulatory bodies where legally permitted, and individuals who have named you as an emergency or alternative contact.
Lawful Basis for Processing Your Data
We rely on different lawful bases under GDPR to process your personal data, depending on the purpose:
Contract: We process personal data when it is necessary to take steps at your request before entering into a contract with you or to perform a contract we have with you. This includes managing reservations, providing storage, handling payments, and administering your account.
Legal obligation: We process certain data to comply with legal and regulatory requirements, for example record-keeping obligations, financial reporting, and cooperating with lawful requests from public authorities.
Legitimate interests: We process personal data when it is necessary for our legitimate business interests, and where these are not overridden by your rights and freedoms. These interests include ensuring the security and safety of our premises, preventing and detecting crime or fraud, improving and managing our services, defending legal claims, and maintaining accurate business records.
Consent: In limited cases, we may rely on your consent, for example for certain optional communications or where we are required to do so under privacy laws. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We may use the personal data we collect for the following purposes:
To provide, manage, and administer storage services you have requested.
To verify your identity and eligibility to use our services.
To manage payments, invoices, debt collection, and refunds.
To maintain the safety and security of our premises, including via CCTV and access control systems.
To respond to your enquiries, requests, and complaints.
To manage our relationship with you, including sending important service information relating to your storage unit or our terms.
To comply with legal and regulatory obligations, including record-keeping, tax, and accounting requirements.
To protect our rights, property, and interests, and to defend or bring legal claims.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and the reason for processing.
In general:
Customer account and contract records are kept for a period after your contract ends, to address queries, handle disputes, and comply with legal obligations.
Financial and transaction data is retained for the period required by tax and accounting laws.
CCTV recordings and access logs are typically kept for a limited period necessary for security, safety, and incident investigation, unless a longer retention period is required due to a specific incident or legal requirement.
When personal data is no longer required, we will securely delete or anonymise it.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to use your data in accordance with our instructions and for specified purposes, and they are required to protect your data with appropriate security measures.
Such processors may include:
Payment processing and billing service providers.
IT and cloud service providers that host our systems or store data.
CCTV and access control system providers and maintenance contractors.
Professional advisers such as accountants, auditors, or legal representatives acting under confidentiality obligations.
We may also share your personal data where necessary with:
Law enforcement, regulatory authorities, or public bodies when required by law or to protect our legal rights.
Debt collection agencies or courts for the recovery of unpaid amounts or the enforcement of our contractual rights.
We do not sell your personal data.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. These safeguards may include using approved standard contractual clauses or only transferring data to countries which have been recognised as providing an adequate level of data protection.
How We Protect Your Data
We implement technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage systems, staff training on data protection, and regular review of security procedures.
While we take reasonable steps to protect your personal data, no system can be completely secure. You are also responsible for keeping any credentials or account information secure and for notifying us of any suspected unauthorised use of your account.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exceptions. They include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data.
Right to restriction: You can ask us to restrict how we use your personal data in specific situations.
Right to data portability: Where applicable, you can request that we provide your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller where technically feasible.
Right to object: You can object to processing based on our legitimate interests or to any direct marketing.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your rights have been infringed.
Children
Our services are intended for adults. We do not knowingly collect personal data from children. If you believe we have collected personal data about a child, please contact us so that we can delete it as appropriate.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will update the date of the revised policy and, where appropriate, let you know about significant changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data at Storage West Brompton.
