Self Storage Dulwich Privacy Policy
This Privacy Policy explains how Self Storage Dulwich collects, uses, stores, and protects personal data relating to existing and prospective customers. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Self Storage Dulwich customers and enquiries in our service area, including any use of our storage services, facilities, and related support.
Who We Are
Self Storage Dulwich is a provider of self-storage units and related services to individuals and businesses. For the purposes of data protection laws, Self Storage Dulwich is the data controller for the personal data we collect and process in connection with our services.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details: Name, postal address, billing address, contact address, and any other address you provide; date of birth; and other data that allows us to identify you for account and verification purposes.
Contact and communication data: Information you provide when you contact us in person, by post, or via other communication channels, including enquiries, service requests, feedback, and responses to surveys.
Account and contract information: Details relating to your storage agreement, such as unit number, start and end date of your contract, payment history, and records of interactions relating to your account.
Payment information: Records of payments made to us, such as payment dates, amounts, and methods. We do not store full payment card details where payments are processed through secure third-party payment providers; we only keep limited information needed for accounting, fraud prevention, and dispute handling.
Security and access data: Information used to manage access to our premises and units, such as records of visits, access logs, and where applicable, CCTV footage taken within and around our facilities for security and safety purposes.
Technical data: If you access our information online, we may collect technical data such as device type, general location, and usage information required to ensure the security and proper functioning of any online tools we provide.
How We Collect Your Data
We collect personal data in several ways, including:
Directly from you when you make an enquiry, request a quote, sign a storage agreement, visit our facility, or contact us for any reason.
Automatically when you use services that involve electronic systems, such as access control or security systems within our facility.
From third parties, in limited circumstances, such as references, fraud prevention agencies, payment service providers, or other service providers acting on our behalf.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contract: We process your data where it is necessary to enter into or perform a contract with you, such as setting up and managing your storage agreement, processing your payments, and providing related services.
Legal obligation: We may process your data to comply with our legal and regulatory obligations, such as financial record keeping, tax requirements, fraud prevention, and safeguarding duties.
Legitimate interests: We process data where it is necessary for our legitimate business interests or those of a third party, provided that your rights and freedoms do not override those interests. Examples include protecting our premises and assets, managing queries and complaints, improving our services, and maintaining security through CCTV and access controls.
Consent: In limited situations, we may rely on your consent, for example for certain types of optional marketing communications. You can withdraw consent at any time, but this will not affect the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide self-storage services and manage your account, including setting up contracts, handling payments, and responding to enquiries and service requests.
To maintain security and safety at our facilities, including monitoring access and using CCTV systems where in place to help prevent crime and protect customers, staff, and property.
To manage our relationship with you, including notifying you about changes to our terms, services, and policies, and handling feedback or complaints.
To perform internal administration, record keeping, audits, and reporting required for our business operations.
To comply with legal obligations, including financial and tax regulations, law enforcement requests, and requirements from regulators or public authorities.
To send you relevant information about our services where we are permitted to do so by law, and where required, where you have given your consent.
Data Retention
We keep personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including to meet any legal, regulatory, tax, accounting, or reporting requirements. The retention period will vary depending on the type of data and the reasons we hold it.
In general, we retain contract and billing records for a number of years after the end of your relationship with us, in line with applicable legal limitation periods and statutory retention duties. CCTV recordings, where used, are typically retained for a shorter period, unless required longer for the investigation of an incident, legal proceedings, or law enforcement requests.
When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in a safe manner.
Data Sharing and Processors
We may share your personal data with trusted third parties that help us operate our business and deliver our services. These third parties act as data processors and process personal data on our instructions, under written contracts that require them to protect your data in accordance with data protection law.
Typical categories of data processors we may use include:
Payment processing providers for handling card payments and direct debits.
Information technology and system support providers who maintain our software, security, and communication systems.
Security service providers, including providers of CCTV systems, access control systems, and alarm monitoring where applicable.
Professional advisers, such as accountants, auditors, or legal advisors, where necessary for the management of our business.
We may also need to share personal data with law enforcement agencies, regulators, public authorities, or insurers where required by law or where necessary to protect our rights, customers, staff, or property.
We do not sell your personal data. If we were to undergo a business reorganisation, merger, or sale, we may transfer relevant personal data to the new entity as part of that process, in accordance with data protection laws.
International Transfers
Our main data storage and processing activities are intended to take place within the United Kingdom or within other jurisdictions that provide an adequate level of data protection. If we use a service provider that transfers or stores data outside of these locations, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections required by data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions, but generally include:
Right of access: You can request a copy of the personal data we hold about you, along with information about how we use it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other lawful basis to continue processing it.
Right to restriction of processing: You can ask us to restrict the processing of your data in certain situations, such as while we consider a request for rectification or an objection.
Right to object: You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will stop processing unless we have compelling legitimate grounds that override your interests or we need to continue for legal reasons.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transmit it to another data controller where this is technically feasible.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect any processing carried out before consent was withdrawn.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the contact details provided on our main customer information materials or at our facility.
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the UK data protection supervisory authority. Further information on this process is available from the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The most current version will always apply to how we process your personal data. We encourage you to review this policy periodically to stay informed about how we protect your information.
