Self Storage Catford Privacy Policy
This Privacy Policy explains how Self Storage Catford collects, uses, stores and shares personal data relating to our customers and prospective customers in the Catford area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Self Storage Catford services, including enquiries, reservations, storage contracts and related activities for customers located in the Catford area.
Data Controller
For the purposes of data protection law, Self Storage Catford is the data controller in relation to the personal data that we collect and process about you. This means that we decide how and why your personal data is used and are responsible for ensuring it is handled lawfully and securely.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and the services you use. The main types of data we may collect include:
Identification and contact details such as your name, postal address, previous address where required for verification, and contact details including your preferred correspondence address.
Contract and account information such as storage unit number, contract start and end dates, services selected, payment history, deposit information, correspondence relating to your account and any notices we issue.
Payment and billing data such as billing address, limited payment details necessary to process transactions and records of payments made. We do not store full card details where payments are processed by third party payment providers.
Verification and security information such as copies or details of identity documents where required by law or for fraud prevention, notes of verification checks, vehicle registration numbers used to access the facility and access control records.
Usage and access information such as log records relating to your entry to and exit from the site, times and dates of access, CCTV footage within and around our premises, and records of interactions with our staff.
Communication data such as email correspondence, written letters, notes of telephone conversations, contact forms, and any feedback or complaints you submit to us.
Marketing preferences such as your choices about receiving service updates, promotional information and customer surveys by permitted channels.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, reserve a unit, sign a storage agreement, make a payment, contact us with a question or complaint, or update your details.
We may also collect data automatically when you access our premises, including CCTV images and access log records. Limited data may be obtained from third parties, such as credit reference agencies, identity verification providers or payment processors, where this is necessary for our legitimate purposes or to comply with legal obligations.
Lawful Basis for Processing
We will only process your personal data where we have a lawful basis under data protection law. Depending on the purpose, this may include:
Contractual necessity, where processing is required to enter into or perform a storage contract with you, including taking payment, managing your account, providing access to your unit, issuing notices and handling queries relating to the contract.
Legal obligation, where we are required to process data to comply with applicable laws, regulatory requirements, court orders or law enforcement requests. This can include record keeping obligations, fraud prevention and crime prevention measures such as CCTV.
Legitimate interests, where processing is necessary for our reasonable business interests or those of a third party, provided your rights and freedoms do not override those interests. This can include securing our premises, managing our operations, improving our services, handling customer service issues, pursuing overdue payments and protecting our property.
Consent, where you have explicitly agreed that we may use your data for a specific purpose, such as sending certain types of marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to enquiries, provide quotations and assess your requirements for storage services.
To set up, manage and administer your storage contract, including opening and closing accounts, managing unit allocations and communicating with you about your contract.
To process payments, issue invoices, handle deposits and manage any arrears or disputes related to charges.
To maintain the safety and security of our customers, staff, premises and property, including through access controls, CCTV monitoring and fraud or crime prevention measures.
To provide customer service, respond to complaints or queries, and keep you informed about important changes to our services or terms.
To comply with legal and regulatory obligations, including record keeping, responding to lawful requests from public authorities and cooperating with investigations where required.
To conduct internal management, reporting and analysis, such as reviewing occupancy, improving service quality and planning future services.
To send you information about similar services or relevant updates, where permitted by law and always respecting your communication preferences.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this Privacy Policy, including:
Service providers acting as data processors, who supply services such as payment processing, IT hosting, software support, CCTV system maintenance, document storage, identity verification and debt collection. These providers are only allowed to process your data in accordance with our instructions and must implement appropriate security measures.
Professional advisers such as legal advisers or accountants where necessary to obtain advice, manage disputes or fulfil our legal obligations.
Public authorities, regulators, law enforcement or courts where we are legally required to share data or where such sharing is necessary to protect our rights, the rights of others or for the prevention or detection of crime.
Any potential buyer or business partner in the context of a corporate transaction, subject to appropriate confidentiality protections and only where the data is required for assessing or implementing the transaction.
International Transfers
Where we use service providers or systems located outside the United Kingdom, your personal data may be transferred to countries that may not have the same level of data protection laws as the UK. In such cases, we will ensure that appropriate safeguards are in place, such as standard data protection clauses approved by relevant authorities or equivalent lawful mechanisms, to protect your rights.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying any legal, accounting or reporting requirements.
Typically, we retain contract and account records for a period after your relationship with us ends, to manage any queries, disputes or legal claims, and to comply with statutory retention periods. CCTV footage is kept for a shorter period, unless it is required for an investigation or legal proceedings.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to you.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. These rights are subject to certain conditions and exceptions, but they generally include:
The right of access, which allows you to obtain confirmation of whether we process your personal data and, if so, to receive a copy of the data along with certain information about how it is used.
The right to rectification, which allows you to have inaccurate or incomplete personal data corrected or updated.
The right to erasure, sometimes called the right to be forgotten, which allows you to request deletion of your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and there is no legal reason for us to continue processing it.
The right to restriction of processing, which allows you to request that we limit the way we use your data in certain circumstances, such as while we are investigating a complaint about accuracy.
The right to data portability, which allows you to receive certain personal data in a structured, commonly used and machine readable format and to ask us to transmit that data to another controller where technically feasible.
The right to object, which allows you to object to processing that is based on our legitimate interests or for direct marketing. If you object to direct marketing, we will stop using your data for that purpose.
Where we rely on consent as the lawful basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How To Exercise Your Rights
If you wish to exercise any of your data protection rights, you can contact us with sufficient information to identify you and specify the right you wish to exercise. We may need to request additional information from you to verify your identity and to ensure your data is protected. We will respond to your request in accordance with applicable legal time limits.
Security of Your Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include physical security at our premises, access controls, staff training and contractual safeguards with our service providers.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or the way we process personal data. When we make significant changes, we will take appropriate steps to bring the update to your attention. The most recent version of this Privacy Policy will always apply to the personal data we hold about you.
