Storage Streatham Privacy Policy
This Privacy Policy explains how Storage Streatham collects, uses, stores and protects personal data relating to our self-storage and related services. It applies to all Storage Streatham customers in our service area, as well as prospective customers, website visitors and any individuals who contact us in connection with our services. We are committed to processing personal data in a lawful, fair and transparent manner in accordance with the UK General Data Protection Regulation and the Data Protection Act.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Streatham customers located in our operating area, including individuals, sole traders and representatives of corporate customers. It also applies to individuals who make enquiries about our services, visit our facility, use our website or otherwise interact with us where we act as a controller of their personal data.
Types of personal data we collect
We collect and process different categories of personal data depending on your relationship with us and the services you use. This may include:
Identification and contact data such as name, postal address, billing address, contact address, date of birth, and identification documentation where required for security or legal purposes. Contact details including email address and correspondence address where provided by you, and records of correspondence with us. Contract and account information such as storage unit details, agreement start and end dates, payment status, service preferences, access permissions and related records. Payment and transaction information, including records of payments made, payment method type and invoicing information. We do not store full card numbers or security codes when payments are processed via secure payment providers. Security and access information such as CCTV footage captured at our premises, visit logs, access control logs, vehicle registration details where recorded for site security, and incident reports. Technical and usage data such as information about how you interact with our website, including pages visited, basic device information and log data generated by our systems. Marketing and communication preferences, including records of your consent where applicable, and information on whether you wish to receive marketing communications from us.
How we collect your data
We collect personal data in several ways, including:
Directly from you when you contact us, request a quote, sign a storage agreement, make a payment, complete forms, or communicate with us by phone, in person or in writing. Automatically when you access our premises, for example through CCTV and access control systems which capture relevant information for security and operational purposes. Automatically when you use our website or online tools, where basic technical and usage information is recorded by our systems. From third parties where permitted by law, for example from payment processors, fraud prevention agencies, or business partners who help us deliver our services.
Lawful basis for processing
We process personal data only where we have a lawful basis under data protection law. Depending on the specific processing activity, we may rely on the following lawful bases:
Contract: To take steps at your request before entering into a contract and to perform our contract with you, for example to set up and manage your storage agreement, process payments and provide customer service. Legal obligation: To comply with legal and regulatory obligations, for example accounting rules, tax requirements, prevention of fraud or crime, and health and safety obligations. Legitimate interests: To pursue our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes securing our premises, managing access to our facility, improving our services, handling queries, managing disputes and maintaining business records. Consent: In limited situations, where we rely on your consent, for example for certain types of direct marketing where consent is required. You may withdraw your consent at any time, and this will not affect the lawfulness of any processing carried out before consent was withdrawn.
Purposes for which we use personal data
We use personal data for the following main purposes:
To provide self-storage and related services to you, including managing bookings, access, support services and communications. To administer our relationship with you, including handling enquiries, managing your account, issuing invoices and collecting payments. To maintain the safety and security of our facility, customers, staff and property, including the use of CCTV and access control systems. To comply with our legal and regulatory obligations, for example retaining financial records and cooperating with law enforcement agencies where required. To manage and improve our business operations, including service monitoring, staff training, quality control and internal reporting. To send you information about our services, offers or updates where we are permitted to do so, and in line with your marketing preferences.
Data sharing and processors
We may share your personal data with carefully selected third parties where necessary for the purposes described above, and where they act as our processors or independent controllers in their own right. These may include:
Payment service providers who process card and other payments on our behalf. Information technology providers who supply and maintain our systems, storage software, email and communication tools, and data hosting services. Security and access control service providers supporting CCTV, access management and incident response. Professional advisers such as accountants, auditors, legal advisers and consultants, where they require access to relevant information in the course of providing advice or services. Law enforcement agencies, regulators and public authorities where disclosure is required by law or in connection with the prevention or detection of crime.
Where third parties act as our processors, they are only permitted to process personal data in accordance with our instructions and must implement appropriate security measures. We do not sell personal data to third parties.
International transfers
If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law. These safeguards may include the use of standard contractual clauses or other recognised transfer mechanisms.
Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. In general:
Customer and contract records are retained for a period after the end of the storage agreement to deal with queries, disputes or legal claims, and to comply with statutory retention periods. Financial and transaction records are retained in line with legal and tax requirements. CCTV footage and access logs are retained for a limited period necessary for security and incident investigation, unless required for a longer period in connection with a specific investigation or legal claim. Marketing and communication data is retained until you opt out or withdraw consent, subject to reasonable technical and operational limits.
When data is no longer required, we will securely delete or anonymise it.
Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, staff training, secure systems and procedures for handling data breaches. While no system can be fully secure, we work to ensure a level of security appropriate to the risks associated with the processing of personal data.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exceptions, you have the right to:
Access: Request confirmation as to whether we hold personal data about you and receive a copy of that data, along with certain information about how it is processed. Rectification: Request correction of inaccurate personal data and completion of incomplete data relating to you. Erasure: Request deletion of your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it. Restriction: Request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised. Objection: Object to processing based on our legitimate interests, including profiling, and object to direct marketing at any time. Portability: Request that certain personal data you provided to us is transferred to you or another controller in a commonly used, machine-readable format, where the processing is based on consent or contract and carried out by automated means. Withdraw consent: Where we rely on your consent for processing, you may withdraw that consent at any time.
We will respond to your requests in accordance with applicable legal time limits and may need to verify your identity before acting on a request.
Complaints and contact
If you are concerned about how we handle your personal data, you can raise your concerns with us using our usual contact channels. You also have the right to lodge a complaint with the relevant supervisory authority for data protection in your jurisdiction if you believe your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. Any changes will take effect when the updated version is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data for Storage Streatham customers in our area.
