Storage Wormwood Scrubs Privacy Policy
This Privacy Policy explains how Storage Wormwood Scrubs collects, uses, stores and shares personal data about its customers. It applies to all Storage Wormwood Scrubs customers in our service area and to anyone who contacts or interacts with us in relation to our storage services.
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way in accordance with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
Who this policy covers
This Privacy Policy applies to all individual customers of Storage Wormwood Scrubs, including prospective, current and former customers, and to individuals acting on behalf of business customers where we collect personal data. It also applies to visitors and enquirers who contact us or visit our premises in the Storage Wormwood Scrubs area.
What personal data we collect
We may collect and process the following categories of personal data:
Identification data such as full name, title, date of birth, and proof of identity details shown on official documents where required for verification.
Contact data such as billing and correspondence address, storage unit address if different, and other contact details needed to manage your account and services.
Account and contract data such as customer account numbers, storage unit numbers, contract start and end dates, services selected, payment history and communication preferences.
Financial and payment data such as limited payment information necessary to process your payments and records of invoices and transactions.
Communication data such as emails, written correspondence, and records of telephone conversations or in person discussions where necessary for service or complaint handling.
Security and access data such as records of site entry and exit times, access control logs, vehicle registration details where recorded for security, and CCTV images taken on or around our premises.
Technical data such as basic device or system information used to access our online services, and log data relating to use of our customer portals where available.
How we collect your personal data
We collect personal data in several ways:
Directly from you when you enquire about our services, request a quotation, sign a storage contract, make a payment or communicate with us by any method.
From your use of our premises and services, such as access control systems, CCTV and vehicle entry records maintained for safety and security.
From third parties where permitted by law, for example from credit reference agencies when we carry out credit checks, or from persons authorised by you to act on your behalf.
Lawful basis for processing your data
We only process your personal data where we have a valid lawful basis under the UK GDPR. The main lawful bases we rely on are:
Contract performance. We process your data when it is necessary for entering into or performing a contract with you, including setting up and managing your storage unit, processing payments, providing customer service and communicating with you about your account.
Legal obligation. We process certain data to comply with our legal and regulatory obligations, such as record keeping, tax and accounting requirements, responding to lawful requests from authorities and maintaining health and safety records.
Legitimate interests. We process personal data for our legitimate business interests, provided your rights and freedoms are not overridden. This includes securing our premises, preventing and detecting crime or fraud, managing our business operations, improving our services, and handling complaints or disputes.
Consent. In limited situations, we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you can withdraw it at any time by contacting us or using the unsubscribe option where available.
How we use your personal data
We use your personal data for the following purposes:
To respond to enquiries, provide quotations and help you choose appropriate storage services.
To set up, manage and administer your storage contract, including verifying your identity where needed and maintaining accurate customer records.
To process payments, issue bills and invoices, and manage any arrears or disputes over payment.
To provide customer service and support, including responding to questions, handling complaints and resolving issues.
To maintain the security and safety of our premises, customers and staff, including through access control and CCTV monitoring.
To comply with our legal and regulatory obligations, cooperate with law enforcement where required and maintain appropriate records.
To manage our business, including auditing, reporting, planning and service improvement.
Data retention and storage
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting or reporting obligations.
Contract and account data is generally retained for a period after your contract ends, to enable us to answer queries, resolve disputes, and comply with our legal obligations. The exact retention period may vary depending on statutory requirements and the nature of the information.
CCTV footage and access logs are retained for a limited period, unless required for investigation of an incident, suspected crime or dispute, in which case they may be kept for longer where legally necessary.
When personal data is no longer needed, it will be securely deleted, anonymised or otherwise processed so that it can no longer identify you.
Data processors and third party sharing
We may share your personal data with selected third parties who act as data processors on our behalf. These service providers are engaged to support our business operations and may include:
Payment processing services for handling card or electronic payments.
IT and cloud service providers who host or support our systems and data storage.
Security and CCTV system providers who help operate and maintain our security infrastructure.
Professional advisers such as accountants, auditors or legal advisers where necessary for our legitimate business needs.
All processors are required to handle personal data securely and only in accordance with our written instructions and applicable data protection laws.
We may also share personal data with other third parties in specific circumstances, for example:
With law enforcement agencies, regulators or authorities where required by law or where necessary to protect our rights, customers, staff or property.
With debt collection agencies or legal representatives for the purpose of pursuing outstanding payments or enforcing our legal rights.
We do not sell your personal data to third parties.
International transfers
If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in line with data protection law. These safeguards may include use of standard contractual clauses or equivalent legal mechanisms.
Your data protection rights
You have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions and legal exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of that data.
Right to rectification. You can ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. In some circumstances, you can request that we delete your personal data. This right may not apply where we need to retain data for legal obligations or to establish, exercise or defend legal claims.
Right to restriction. You may request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or assess an objection.
Right to object. You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we have compelling legitimate grounds that override your interests or where processing is required for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it is transferred to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you have the right to withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
How to exercise your rights and complaints
If you wish to exercise any of your rights or raise a concern about how we handle your personal data, you can contact us using our usual customer contact channels described in your contract or on our customer documentation. We will respond to your request in accordance with applicable data protection laws.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we have used your data. We would, however, welcome the opportunity to address your concerns directly before you contact the authority.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage arrangements, staff training and regular review of our security procedures.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updates will take effect when the revised policy is made available to customers. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
