Self Storage Wandsworth Privacy Policy
This Privacy Policy explains how Self Storage Wandsworth collects, uses, stores, and protects personal data relating to customers and prospective customers in the Wandsworth area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Self Storage Wandsworth customers, including individuals and business clients using or enquiring about our storage services in the Wandsworth area.
Who we are and scope of this policy
Self Storage Wandsworth is a storage services provider operating in the Wandsworth area. In this Privacy Policy, references to we, us or our refer to Self Storage Wandsworth as the data controller responsible for deciding how and why your personal data is used. This policy applies to all personal data we process about our customers, prospective customers, guarantors, authorised users of units, and visitors to our premises, whether collected online, by telephone, in writing, or in person at our facilities.
Types of personal data we collect
We may collect and process the following categories of personal data about you:
Identification and contact data, such as your name, postal address, billing address, date of birth, and other information needed to verify your identity. Contact details, such as email address and preferred communication details. Contract and account data, such as storage unit number, contract start and end dates, payment history, communication records, and details of services you have requested. Payment and billing data, such as payment method, transaction details, and billing information. We do not store full card details; these are processed by our payment service providers. Security and access data, such as CCTV footage in and around our premises, access control records, visit logs, vehicle registration numbers where relevant, and records of incidents or complaints. Technical and usage data, such as information about how you use our website or online services, including log data, device information, and service usage statistics. Marketing and communication preferences, such as your preferences about receiving updates, offers, and service messages from us.
How we collect your personal data
We collect personal data in several ways, including when you contact us to request a quote or information about our services, when you visit our premises to enquire, sign a contract, or access your storage unit, when you enter into a storage agreement with us and throughout the duration of your contract, when you communicate with us by phone, email, post, or through online forms, when you make payments to us or request a refund, when you provide feedback, make a complaint, or participate in surveys, and through CCTV systems and access control systems at our facilities for safety and security purposes.
Lawful basis for processing your data
We process your personal data only when we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract: We process your data when it is necessary to enter into, perform, or manage our contract with you. This includes processing for reservations, bookings, payments, customer service, and administration of your storage unit. Legal obligation: We may process personal data where we are required to do so by law, for example for tax, accounting, fraud prevention, security and safety, and to respond to legitimate requests from law enforcement or regulatory authorities. Legitimate interests: We may process data where it is necessary for our legitimate business interests and where your rights and freedoms are not overridden. This includes maintaining the security of our premises, managing and improving our services, handling queries and complaints, and preventing misuse of our facilities. Consent: In some cases, we will ask for your consent to process certain data, for example for specific marketing communications not covered by our legitimate interests. Where processing is based on consent, you can withdraw your consent at any time.
How we use your personal data
We use your personal data to provide and manage storage services, including setting up your account, administering your contract, processing payments, and managing access to your storage unit. We use it to respond to enquiries, provide customer service, and communicate with you about your bookings, payments, and any changes to our terms or services. We use it to maintain the security and safety of our premises, customers, and staff, including through CCTV and access control systems. We use it to maintain business records, comply with legal and regulatory requirements, and assist with dispute resolution or enforcement of our contract. We may also use personal data to send information about similar services we provide that may be of interest to you, in line with your marketing preferences and subject to your right to opt out.
Data retention and storage
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet our legal, accounting, or reporting obligations. In general, we keep customer account and contract records for up to seven years after the end of your relationship with us, in line with tax and accounting requirements. CCTV footage and access logs are typically retained for a shorter period, only for as long as needed to ensure security, investigate incidents, and comply with legal obligations, unless a longer retention is required as part of an investigation or legal claim. After the relevant retention period expires, personal data is securely deleted, anonymised, or otherwise disposed of in a safe and irreversible manner.
Data processors and third party sharing
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include payment service providers who process card and other payments, IT and system support providers who help us operate our booking, billing, and communication systems, security and CCTV maintenance providers who support our safety and security systems, and professional advisers such as auditors, accountants, or legal advisers where necessary. These processors are only allowed to process your personal data under our instructions and are required to keep your data secure and confidential.
We may also share personal data with third parties acting as independent controllers where required by law, for example with law enforcement, regulatory bodies, or courts, or in connection with the prevention or detection of crime. If we are involved in a business restructuring, sale, or transfer of all or part of our business, your data may be shared with parties involved in that process, subject to appropriate safeguards.
International transfers
Our primary data processing activities are based in the United Kingdom. Where we or our service providers transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as using countries with an adequacy decision or implementing standard contractual clauses or equivalent protections, so that your data remains protected to a standard essentially equivalent to UK and EU data protection law.
How we protect your personal data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, secure storage of paper records, encryption and security measures for relevant electronic systems, regular monitoring of our security arrangements, and limiting access to your data to those employees and processors who have a genuine need to know it for their work.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions, but we will always respond to your requests in line with legal requirements.
You have the right to request access to the personal data we hold about you and to receive a copy of that data. You have the right to ask us to correct inaccurate or incomplete personal data. You have the right to request the deletion of your personal data in certain circumstances, for example when it is no longer needed for the purposes for which it was collected or when you withdraw consent and there is no other legal basis for processing. You have the right to ask us to restrict the processing of your data in certain cases, such as when you contest the accuracy of the data or object to our processing. You have the right to object to processing based on our legitimate interests, including direct marketing, in which case we will stop processing your data unless we have compelling legitimate grounds to continue. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to data portability, meaning you can request that we provide your data in a structured, commonly used format or transfer it directly to another controller where technically feasible. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising your rights and complaints
You can exercise your data protection rights by contacting us and providing sufficient information to identify yourself and your relationship with Self Storage Wandsworth. We may need to verify your identity before complying with your request for security reasons. We aim to respond to all legitimate requests within one month, or within any extended period allowed by law where requests are complex or numerous.
If you are unhappy with how we handle your personal data, please contact us so we can try to resolve your concerns. You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in the United Kingdom.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any updates will take effect from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
