Storage Wandsworth Privacy Policy
This Privacy Policy explains how Storage Wandsworth collects, uses, stores and protects personal data for all customers and prospective customers using our storage services in the Wandsworth area. We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws.
Scope of this Privacy Policy
This Privacy Policy applies to all individuals who enquire about, use, or have used Storage Wandsworth services, including self-storage units, related services and online or telephone enquiries within the Wandsworth area.
Data Controller
Storage Wandsworth is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in compliance with applicable data protection law.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identification and contact details, such as your full name, postal address, billing address, contact preferences and, where provided, business name and position.
Account and contract information, such as customer account numbers, storage unit details, contract dates, rental periods, payment amounts, invoices, and records of your communications with us.
Payment and transaction data, including payment method details, payment history, and associated billing information. Card or bank details are handled in line with industry standards and, where applicable, by authorised payment processors.
Usage and communication data, including records of your enquiries, complaints, feedback, and any correspondence by phone, in writing or online.
Security and access data, such as unit access logs, CCTV recordings on our premises where installed, and any incident reports relevant to security or safety.
Technical and website data, which may include IP addresses, device identifiers, and basic analytics information generated when you visit our website, to help us understand usage patterns and improve our services.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, access our premises, or communicate with us in any way.
We may also obtain personal data from third parties, such as payment service providers, credit reference agencies where relevant to assessing risk, and service partners who support us in providing storage and related services.
Lawful Bases for Processing
We only process your personal data when we have a lawful basis to do so under data protection law. Depending on the context, we may rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, for example to manage your storage agreement, provide access to your unit and handle invoices and payments.
Legal obligation: We process certain data to comply with legal and regulatory obligations, such as accounting, tax, anti-fraud and health and safety requirements.
Legitimate interests: We process data where it is necessary for our legitimate business interests, and where those interests are not overridden by your rights and freedoms. This includes managing and improving our services, ensuring site security, preventing fraud, protecting our property, and responding to customer queries.
Consent: In limited cases, we may rely on your consent, for example for certain optional marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide and administer storage services, including setting up your account, issuing and managing access permissions, and handling day-to-day customer service.
To manage payments, including processing payments, issuing invoices, and handling payment queries or disputes.
To respond to your enquiries, requests for quotes, feedback or complaints, and to keep records of our communications.
To manage our premises, including the use of access systems and CCTV where installed, in order to safeguard customers, staff and property.
To meet legal and regulatory requirements, including record-keeping, tax, security and safety obligations.
To protect our rights, for example in connection with debt collection, fraud prevention, or legal claims.
To carry out internal reporting, service analysis and planning, to improve our services and the customer experience.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so.
These third parties may act as data processors on our behalf. Typical categories of processors include:
Payment service providers who process card or online payments for your storage fees.
IT and cloud service providers who host our systems, files, and communications tools.
Security and facility management service providers who assist with CCTV, alarm systems or access control where relevant.
Professional advisers such as accountants, auditors or legal advisers, to the extent necessary for them to provide their services.
Debt collection agencies and credit reference agencies, where necessary for the recovery of unpaid fees or assessment of risk.
We require all processors to implement appropriate technical and organisational measures to protect your personal data and to process it only on our documented instructions.
International Transfers
If any of our service providers are located outside the United Kingdom or the European Economic Area, we will take steps to ensure that your data receives an adequate level of protection. This may include using standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
Customer account and contract information is generally retained for the duration of your agreement and for a period afterwards to deal with any queries, disputes, legal claims, or regulatory requirements. This period will typically be up to six years after the end of your contract, in line with limitation periods and accounting rules.
Payment records and invoices are retained in accordance with applicable tax and financial regulations.
CCTV recordings, where used, are retained for a limited period, usually only long enough to investigate incidents and maintain site security, unless a longer retention period is required for legal or investigative reasons.
When personal data is no longer needed, we will securely delete or anonymise it.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, disclosure or destruction. Measures may include access controls, encryption, secure storage, staff training and regular review of our security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Wandsworth customers in the Wandsworth area, subject to certain legal conditions and exemptions.
Right of access: You have the right to request confirmation of whether we hold personal data about you, and to request a copy of that data, along with information about how we process it.
Right to rectification: You have the right to ask us to correct inaccurate personal data about you and to complete any incomplete data.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction of processing: You can ask us to restrict the processing of your data in specific situations, such as while we are verifying the accuracy of data or assessing an objection.
Right to data portability: In some cases, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to object: You can object to processing that is based on our legitimate interests, including any direct marketing activities. We will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims.
Rights in relation to automated decision-making: Storage Wandsworth does not routinely use automated decision-making that produces legal or similarly significant effects on you. If this changes, we will inform you and explain your related rights.
Exercising Your Rights
You may exercise your data protection rights at any time by contacting us using the usual communication channels you use to interact with Storage Wandsworth. To help us deal with your request, we may need to verify your identity. We aim to respond to all valid requests within one month, or within any extended period permitted by law where requests are complex or numerous.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data has not been handled in accordance with data protection law. However, we encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data processing practices, or legal requirements. Any updates will be made available through our usual customer communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
