Storage Selsdon Privacy Policy
This Privacy Policy describes how Storage Selsdon collects, uses, stores and protects personal data relating to customers and prospective customers in the Selsdon area. It also explains your rights under the UK General Data Protection Regulation GDPR and related data protection laws. This Privacy Policy applies to all Storage Selsdon customers and users of our services in the area, whether you contact us online, by post, or in person.
Who We Are and Scope of This Policy
Storage Selsdon is a self storage provider offering storage units and related services to individuals and businesses. For the purposes of data protection law, Storage Selsdon is the data controller in respect of the personal data described in this Privacy Policy. This policy covers all personal data that we process about our customers, prospective customers and other individuals located in or using our services in the Selsdon area.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and the services you use. This may include
Identification and contact details such as name, postal address, billing address, date of birth, and other similar identifying information.
Account and contract information such as customer reference numbers, storage unit details, contract start and end dates, payment terms, and correspondence relating to your account.
Payment and billing information such as card or bank details provided to process payments, transaction records, invoices and payment history. We do not store full card details where payment is processed through a secure payment provider.
Verification and security data such as copies of identification documents when required for identity checks, records from access control systems, and CCTV footage in and around our facilities.
Communication data such as enquiries, complaints, feedback, and records of communications by phone, post or online forms.
Marketing preferences such as your choices about receiving updates about our services and offers.
How We Collect Personal Data
We collect personal data directly from you when you enquire about our services, request a quotation, sign a storage agreement, make a payment, or communicate with us for any other reason. We may also receive personal data from third parties where this is necessary to provide our services, such as payment processors and identity verification services. CCTV images are collected automatically through our security systems when you attend our facilities.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis under UK GDPR. Depending on the circumstances, this may include
Contractual necessity where processing is necessary to enter into or perform a contract with you, such as providing storage services, managing your booking, processing payments, and communicating with you about your account.
Legal obligation where we are required to process personal data to comply with legal or regulatory duties, including tax, accounting, anti money laundering, fraud prevention and health and safety requirements.
Legitimate interests where processing is necessary for our legitimate business interests or those of a third party, and these interests are not overridden by your rights. This may include managing our facilities, improving our services, ensuring security, preventing fraud, and defending legal claims.
Consent where you have clearly agreed to specific processing, for example certain types of marketing communications. You can withdraw your consent at any time, but this will not affect processing that has already taken place.
How We Use Your Personal Data
We may use your personal data for the following purposes
To set up and manage your account, including verifying your identity, preparing and administering storage agreements, and recording unit allocations.
To provide and operate storage facilities, including managing access, maintaining security and responding to your requests.
To process payments, issue invoices, handle refunds where applicable, and maintain accurate financial records.
To maintain the safety and security of our premises through access control systems and CCTV monitoring intended to help prevent crime, detect incidents, and protect our customers, staff and property.
To communicate with you about your account, bookings, changes to our terms, service interruptions, and other operational matters.
To manage enquiries, complaints, feedback and disputes, and to establish, exercise or defend legal claims.
To send you information about our services, offers or updates where this is permitted by law and in line with your communication preferences.
Data Retention and Storage
We keep personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by law. Retention periods may vary depending on the type of data and our legal and contractual obligations.
Data relating to storage contracts and associated financial records is generally retained for the duration of your contract and for a period afterwards to comply with tax, accounting and legal requirements.
CCTV footage is kept for a limited period, which is usually short, unless an incident requires us to retain specific footage for longer in connection with an investigation or legal claim.
Marketing data is retained while you remain subscribed or engaged with our communications and for a reasonable period after you unsubscribe, to ensure we respect your preferences.
At the end of the relevant retention period, we will securely delete or anonymise your personal data.
Use of Data Processors and Sharing of Information
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include
Payment processing providers who handle card and online payments.
IT and cloud service providers who support our business systems, data storage, and communication tools.
Security and access control providers who support our CCTV and facility security systems.
Professional advisers such as accountants, auditors, or legal advisers, where necessary to support our business operations.
We require all processors to treat your data securely, to use it only in accordance with our instructions and to comply with applicable data protection laws. We may also need to share personal data with public authorities, law enforcement, regulators or courts where required by law or to protect our rights or those of others.
International Data Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, or where data is processed in another country, we will ensure that appropriate safeguards are in place. These may include standard contractual clauses or other mechanisms approved by data protection authorities to protect your personal data to a standard equivalent to that in the UK.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you, subject to certain conditions and exceptions
The right of access you can request a copy of your personal data and information about how we process it.
The right to rectification you can ask us to correct inaccurate or incomplete personal data.
The right to erasure you can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and we have no other lawful basis.
The right to restriction you can ask us to restrict processing of your personal data in certain circumstances, such as while we are investigating a concern about accuracy.
The right to data portability you can request that we provide certain personal data to you or another organisation in a structured, commonly used and machine readable format, where the processing is based on consent or contract and carried out by automated means.
The right to object you can object to processing that is based on our legitimate interests, including profiling, and to processing for direct marketing.
The right to withdraw consent where we rely on your consent, you can withdraw it at any time, without affecting the lawfulness of processing based on consent before withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption, secure storage solutions, staff training, and procedures for handling data incidents. While no system can be completely secure, we are committed to protecting your information and regularly review our security practices.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or applicable legal requirements. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data as a Storage Selsdon customer in the Selsdon area.
