Storage Rotherhithe Privacy Policy
This Privacy Policy explains how Storage Rotherhithe collects, uses, stores, and shares personal data. It applies to all Storage Rotherhithe customers and prospective customers in our service area, including individuals and businesses who enquire about or use our storage services, whether in person, by phone, or online.
Who We Are
Storage Rotherhithe is a storage service provider offering storage units and related services to customers within the local area. For the purposes of the UK General Data Protection Regulation and the EU General Data Protection Regulation, Storage Rotherhithe is the data controller for the personal data we collect and process about you in connection with our services.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details, such as your name, postal address, billing address, and any additional contact details you choose to provide.
Account and contract information, such as customer reference numbers, storage unit numbers, signed storage agreements, move-in and move-out dates, payment history, and communication records relating to your contract.
Payment and transaction data, such as payment method details, amounts paid, due dates, and invoices. Where processed, card or bank details are handled by secure payment processors and are not stored by us in full where this is not necessary.
Communication data, including information you provide when you contact us with enquiries, feedback, complaints, or service requests, as well as notes and records of those communications.
Security and access data, which may include CCTV footage from our sites, entry and exit logs, and information relating to incidents, to help ensure the safety and security of our premises, customers, and staff.
Marketing preference data, such as your choices about receiving information about offers or updates relating to our services.
How We Collect Personal Data
We collect personal data directly from you when you request a quote, make a booking, sign a storage agreement, set up or manage your account, make a payment, visit our premises, or contact us with an enquiry.
We may also collect data automatically when you use our online services, such as basic technical and usage information needed to provide and secure those services.
In limited cases, we may receive information about you from third parties, such as payment service providers or debt collection agencies, where this is necessary to manage your account or enforce our contractual rights.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:
Contractual necessity. We process your personal data when it is necessary to enter into or perform a contract with you, such as to set up your account, provide storage services, manage your bookings, process payments, and respond to your service requests.
Legal obligation. We process certain data to comply with legal and regulatory requirements, including tax, accounting, health and safety, and obligations related to crime prevention and security.
Legitimate interests. We process data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include operating and improving our services, maintaining security and safety, handling customer service queries, preventing and detecting fraud, and pursuing or defending legal claims.
Consent. In certain situations, we rely on your consent, for example for some types of marketing communication or where consent is required by law. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including processing bookings, managing your storage unit, handling access, and communicating with you about your contract and account.
To process payments and manage billing, including issuing invoices, taking payments, handling refunds where appropriate, and managing any arrears.
To respond to your enquiries and communicate with you, including handling queries, complaints, feedback, and service updates.
To maintain security and safety, including the use of CCTV and access controls to protect our premises, customers, staff, and stored property.
To meet legal, regulatory, and compliance requirements, such as tax and accounting obligations, and to cooperate with law enforcement or regulatory authorities where legally required.
To manage our business, including record keeping, staff training, service improvement, customer satisfaction monitoring, and performance reporting.
To send you marketing information about our services where you have consented or where we are otherwise permitted by law to do so, and you have not opted out.
Data Sharing and Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data under our instructions and for the purposes described in this Privacy Policy. They are required to keep your data secure and to comply with data protection law.
Such processors may include providers of payment processing services, customer relationship management tools, secure data storage and hosting, IT support and maintenance, and professional advisers such as accountants or legal advisers.
In some circumstances, we may also share your data with third parties acting as independent data controllers, for example with law enforcement agencies, regulatory bodies, insurers, or debt collection agencies where necessary and lawful.
We do not sell your personal data to third parties.
International Data Transfers
Where our service providers or their systems are located outside the United Kingdom or the European Economic Area, there may be transfers of your personal data to countries that do not have the same level of data protection laws. When we do this, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other legally recognised mechanisms, so that your data remains protected.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for the duration of your relationship with us and for a reasonable period afterwards to deal with queries, disputes, or legal claims. Financial and transaction records are typically kept for the period required by tax and accounting laws.
CCTV recordings and access logs are kept for a limited period, which is usually short, unless they are required longer in connection with an incident, claim, or investigation.
When personal data is no longer required, we will delete it or anonymise it in a secure manner.
Your Data Protection Rights
You have a number of rights in relation to the personal data we hold about you. These rights may be subject to certain conditions and legal exemptions. Your rights include:
The right of access. You have the right to request confirmation of whether we process your personal data and to request a copy of that data, together with information about how we use it.
The right to rectification. You have the right to request that inaccurate or incomplete personal data about you is corrected or completed.
The right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent.
The right to restrict processing. You have the right to request that we restrict the processing of your data in certain situations, such as while we investigate a concern about accuracy or the lawfulness of processing.
The right to data portability. In some cases, you have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format and to have it transmitted to another controller, where this is technically feasible.
The right to object. You have the right to object to our processing of your personal data where we are relying on legitimate interests, including for direct marketing. If you object to marketing, we will stop using your data for that purpose.
The right to withdraw consent. Where we rely on your consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how we handle your personal data.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, staff training, secure storage, and regular review of our security practices.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any updates will apply from the date they are published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
