Storage Brockley Privacy Policy
This Privacy Policy explains how Storage Brockley collects, uses, stores and protects personal data relating to our self-storage services. It applies to all Storage Brockley customers and prospective customers in our service area, as well as individuals who contact us with enquiries or visit our premises.
We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. This Policy should be read carefully so that you understand how and why we process your personal data.
Personal data we collect
We collect and process personal data that is necessary for the provision and management of our storage services and for the operation of our business. The types of personal data we may collect include:
Identification and contact details such as full name, postal address, billing address, date of birth, and contact details necessary to communicate with you.
Account and contract information such as customer number, unit number, contract start and end dates, payment history, correspondence relating to your contract and services, and information about the goods you store where this is relevant to the contract.
Payment and transaction data such as payment method details and records of payments made and received, including the date, time and amount of each transaction.
Communication data such as enquiries, complaints, feedback, and any other communications you send to us or have with our staff, whether by phone, in person or through any other communication method you choose to use.
Security and access data such as CCTV footage recorded on our premises, access control logs, vehicle registration numbers recorded for access and security purposes, and records of visits to the site.
Technical and usage information where relevant, such as details of your interactions with any online tools we provide, including the date, time and nature of your visit, and information you submit via online forms.
How we collect your data
We collect personal data directly from you when you contact us, obtain a quote, sign a storage agreement, make a payment, visit our site, or communicate with us in any way. We may also receive personal data from third parties where this is necessary to manage payments, prevent fraud, or comply with legal obligations, such as from payment service providers or law enforcement agencies.
Purposes and lawful bases for processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the specific processing activity, we rely on the following lawful bases:
Contractual necessity. We use your identification, contact, payment, and account information to provide and manage our storage services, set up and administer your account, communicate with you about your contract, process payments, handle queries about your unit, and manage move-ins and move-outs. This processing is necessary to enter into and perform our contract with you or to take steps at your request before entering into a contract.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes maintaining the security of our premises and stored goods, operating CCTV and access control systems, monitoring and improving our services, managing our business operations and record keeping, preventing and detecting fraud and misuse of our facilities, and pursuing and defending legal claims.
Legal obligations. We process certain information to comply with our legal and regulatory obligations, including taxation, accounting, record retention and responding to lawful requests from authorities or law enforcement.
Consent. In limited circumstances, we may rely on your consent, for example where we wish to send you certain types of marketing communications beyond what is permitted on the basis of legitimate interests. Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
How we use your personal data
We use your personal data for the following main purposes:
To provide storage services, including setting up your account, allocating storage units, managing access to the site, maintaining records of your contract and handling customer service queries and requests.
To administer billing and payments, including collecting payments, administering deposits, handling failed or late payments, and dealing with refunds and adjustments where applicable.
To secure our premises, including operating CCTV systems, monitoring entry and exit, and keeping records that help protect you, other customers, our staff, and property stored at our site.
To manage our relationship with you, including notifying you about changes to our terms, policies or services, sending administrative communications about your account, and responding to your enquiries or complaints.
To comply with legal and regulatory requirements, including maintaining appropriate records for tax and accounting purposes, cooperating with law enforcement, and responding to lawful information requests.
To improve our services, including reviewing how customers use our facilities, gathering feedback, and using this information to develop and enhance our operations and customer service.
Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy and to meet any legal, accounting or reporting requirements. The length of time we retain personal data varies depending on the type of data and the reasons for which we collected it.
Customer account and contract information is typically kept for a period after the end of your contract, to handle any queries, disputes or legal claims, and to comply with statutory retention requirements for financial and tax records.
CCTV recordings are kept for a limited period necessary to support security and incident investigation, unless a particular recording is required for a longer period in connection with an ongoing investigation, legal proceedings or law enforcement request.
Where personal data is no longer needed, or the relevant retention period has expired, we will securely delete or anonymise it so that it can no longer be associated with you.
Data processors and third parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These include providers of payment processing services, accounting or administrative support, secure data storage and backup, IT and security services, and other professional service providers who help us operate our business.
Where we use data processors, they are only permitted to process your personal data in accordance with our written instructions, for the purposes specified by us, and in compliance with data protection law. They are required to implement appropriate technical and organisational measures to protect your data.
We may also share personal data with third parties acting as independent controllers in specific circumstances, such as insurers, law enforcement bodies, courts and regulatory authorities, where required by law or necessary to protect our rights, property or safety, or the rights, property or safety of our customers or others.
We do not sell your personal data. We do not routinely transfer personal data outside the United Kingdom or the European Economic Area. If, in the future, international data transfers become necessary, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.
Security of your data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, secure storage, encryption, staff training on data protection responsibilities, and regular review of our security procedures.
While we take reasonable steps to protect your personal data, no system is completely secure. You are also responsible for taking appropriate measures to protect any account or access details you use in connection with our services.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions, and we may need to verify your identity before responding to your request. Your rights include:
The right of access. You can request confirmation of whether we hold personal data about you and receive a copy of that data, together with certain information about how and why we process it.
The right to rectification. You can request that we correct inaccurate or incomplete personal data that we hold about you.
The right to erasure. In certain circumstances, you can request that we delete your personal data. This right is not absolute and may not apply where we still need the data for lawful purposes such as compliance with legal obligations or the establishment, exercise or defence of legal claims.
The right to restrict processing. You can request that we restrict the processing of your personal data in specific situations, for example while we are investigating the accuracy of data you believe is incorrect or considering an objection you have raised to our use of your data.
The right to data portability. In some cases, you can request that we provide your personal data in a commonly used, machine-readable format or that we transmit it directly to another controller where this is technically feasible.
The right to object. You can object at any time to processing based on our legitimate interests, including profiling, and we will stop processing your personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims. You also have an absolute right to object to direct marketing at any time.
The right to withdraw consent. Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our processing activities, or legal requirements. When we make changes, we will revise the date of the latest version and, where appropriate, take steps to notify you of significant updates. We recommend that you review this Policy periodically to stay informed about how we handle your personal data.
This Privacy Policy applies to all Storage Brockley customers and users of our services in our operating area and is intended to be clear and transparent about our data protection practices.
