Storage Lewisham Privacy Policy
This Privacy Policy explains how Storage Lewisham collects, uses, stores, and protects personal data relating to customers and prospective customers in the Lewisham area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws, and how you can exercise those rights.
This Privacy Policy applies to all Storage Lewisham customers, including individuals and businesses who rent or enquire about storage units or associated services within our operating area.
Who We Are And Scope Of This Policy
Storage Lewisham is a storage service provider offering storage units and related services to customers in the Lewisham area. Where we decide why and how personal data is processed, we act as the data controller for the purposes of data protection law. This Privacy Policy covers personal data collected in connection with the provision of our storage services, including when you contact us, visit our premises, or use our services.
Types Of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, title, date of birth, and identification documents where required for verification and security purposes.
Contact details such as home or business address, billing address, and other correspondence addresses.
Account and contract data such as customer reference numbers, storage unit numbers, contract start and end dates, services selected, payment history, and records of communications with you.
Payment and billing information such as billing details, payment method, transaction history, and invoicing records. Card details are handled in accordance with relevant security standards and, where applicable, through secure payment processors.
Usage and interaction data such as information relating to your use of our storage facilities, including access logs, entry and exit times, and records of visits for security and operational purposes.
Security and safety data such as CCTV footage of public and shared areas on our premises, incident reports, and information collected to monitor and maintain the security of our sites.
Marketing and communication preferences such as records of your consent or objection to receive marketing, details of your responses to surveys or promotions, and information about communication channels you prefer.
How We Collect Your Personal Data
We collect personal data from you directly when you enquire about our services, request a quotation, make a booking, sign a contract, contact us by phone or other channels, or visit our premises.
We may also obtain personal data from third parties where this is necessary to verify identity, perform credit checks where appropriate and lawful, or recover unpaid charges. In such cases we ensure that the third party is permitted to share this information with us.
CCTV systems and access control systems installed at our facilities may automatically collect limited personal data about your use of the premises for security and safety purposes.
Lawful Basis For Processing Your Data
We only process your personal data where we have a valid lawful basis under data protection laws. Depending on the specific processing activity, we may rely on one or more of the following lawful bases:
Contract. We process personal data to take steps at your request before entering into a storage agreement, to conclude and perform our contract with you, and to manage your account and the services we provide. This includes handling bookings, payments, renewals, and responding to your enquiries.
Legal obligations. We process certain personal data to comply with legal and regulatory obligations, such as tax and accounting requirements, identity verification obligations, and duties relating to health and safety or crime prevention.
Legitimate interests. We process personal data where this is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. Examples include securing our premises, monitoring access to storage units, managing and improving our services, protecting our property and the property of our customers, and handling queries, complaints, or disputes.
Consent. In some cases we rely on your consent, for example for sending you certain forms of direct marketing or for using optional cookies or similar technologies if we provide online services or platforms. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you, including setting up, administering, and managing your storage contract, processing payments, and arranging access to your storage unit.
To communicate with you, respond to your enquiries, provide customer support, send service notifications, and inform you of important changes to our terms, conditions, or this Privacy Policy.
To maintain security and safety at our sites, including monitoring access, using CCTV to deter and investigate crime or misconduct, and protecting our customers, staff, and property.
To manage our business operations, such as maintaining records, performing internal audits, analysing service use, and improving our facilities and customer experience.
To comply with legal obligations, including record keeping for tax and accounting, cooperating with law enforcement where required, and responding to lawful requests for information.
To send you marketing information about our services, promotions, or related offerings where you have given consent or where we may lawfully do so based on our legitimate interests. You can opt out of marketing communications at any time.
Data Sharing And Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties in the following circumstances:
Service providers acting as data processors who provide services on our behalf such as payment processing, secure data hosting, information technology support, maintenance of access control or CCTV systems, or document storage and destruction. These processors are only permitted to process your personal data in accordance with our instructions and must protect it with appropriate technical and organisational measures.
Professional advisers including lawyers, auditors, accountants, and insurers where necessary for the establishment, exercise, or defence of legal claims, to obtain advice, or to manage risk.
Public authorities and law enforcement where we are legally required or permitted to do so, such as to prevent or detect crime, protect public safety, or comply with a legal obligation or court order.
Other parties in connection with a business transaction, such as a merger, acquisition, or transfer of business assets, provided that appropriate safeguards are in place and you are informed where required by law.
International Transfers
Where it is necessary to transfer your personal data to countries outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data. These safeguards may include the use of standard contractual clauses approved by relevant authorities or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including to provide our services, meet legal, accounting, or reporting requirements, and resolve disputes.
In general, we retain contract and billing records for a minimum period required under applicable tax and accounting laws after your storage agreement ends. Security and CCTV records are typically kept for a shorter period, only as long as needed for security, investigation, or legal purposes, unless they are required to be kept longer in connection with an incident or legal claim.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be used to identify you.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access. You have the right to obtain confirmation of whether we process your personal data and to receive a copy of the data we hold about you, together with information about how we use it.
Right to rectification. You have the right to request correction of inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or assess an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. You also have an absolute right to object at any time to the processing of your personal data for direct marketing purposes.
Right to data portability. Where the processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Measures may include physical security at our premises, access controls, staff training, secure storage of records, and the use of encryption or other safeguards where appropriate.
While we strive to protect your personal data, no system can be completely secure. You also play an important role in protecting your information by keeping any access codes, passwords, and personal identifiers confidential and notifying us promptly of any suspected misuse.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will be effective when we publish the updated Privacy Policy. We recommend that you review this page periodically to stay informed about how we handle your personal data.
