Storage Hampton Wick Privacy Policy
This Privacy Policy explains how Storage Hampton Wick collects, uses and protects the personal information of customers and prospective customers in the local area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Hampton Wick customers, prospective customers and website visitors in the surrounding area who interact with us, whether by visiting our premises, using our website, making enquiries, or entering into a storage agreement. It covers all personal data we process in connection with our storage services and related activities.
Data Controller
Storage Hampton Wick is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in compliance with applicable data protection laws.
Personal Data We Collect
We may collect and process different types of personal data about you depending on how you interact with us and which services you use. This may include the following categories of data.
Identification data such as your full name, date of birth, identification document details and signature where required for verification and security purposes.
Contact data such as your home or business address, billing address, and any other correspondence address relevant to your storage agreement.
Communication data such as email correspondence content, written communications, and any other records of your interactions with us, including notes from telephone conversations and in-person discussions.
Contractual data such as storage unit number, rental period, pricing, payment history, and details of any additional services you request or agreements you enter into with us.
Payment and transaction data such as details of payments received, payment method type, and invoices. We do not store full card details used for payment if this is handled by an external payment service provider.
Security and access data such as CCTV footage from our premises, access control logs, dates and times of site entry and exit, and records relating to security incidents.
Technical and usage data where you use our website, such as IP address, browser type, device information and pages visited, collected through cookies or similar technologies where legally permitted.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, this may include the following.
To provide storage services and manage our relationship with you. We use your personal data to set up and manage your storage agreement, administer your account, process payments, and communicate with you about your contract. The lawful basis is performance of a contract or taking steps at your request prior to entering into a contract, and in some cases our legitimate interests in effectively operating our business.
To verify your identity and maintain security. We may verify identification documents where necessary to prevent fraud and protect our premises, staff, and customers. We also operate security systems, including CCTV and access controls. The lawful basis is our legitimate interests in preventing crime, protecting property and ensuring the safety of individuals, and where required to comply with legal obligations.
To comply with legal and regulatory obligations. We may process and retain certain data to meet tax, accounting, law enforcement, and other regulatory requirements. The lawful basis is compliance with legal obligations.
To handle enquiries, complaints and disputes. We use your data to respond to questions, address complaints, and manage any legal claims or disputes. The lawful basis is our legitimate interests in resolving issues and defending legal claims, and where appropriate performance of a contract.
To improve our services and operations. We may use aggregate and anonymised data about how customers use our services to improve our facilities, pricing, and processes. Where this involves personal data, the lawful basis is our legitimate interests in developing and improving our business.
To send service communications. We may send you important information relating to your storage agreement, such as changes to terms, payment reminders or access arrangements. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about your service.
Where we rely on legitimate interests, we always balance our interests against your rights and freedoms and only process personal data where our interests are not overridden by your privacy interests.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying any legal, accounting or reporting requirements.
Customer account and contract information is typically retained for the duration of your storage agreement and for a period afterward to deal with any queries, disputes or legal claims, and to comply with statutory record-keeping requirements.
CCTV and security access data are retained for a limited period necessary to ensure security and investigate incidents, unless a longer retention period is required in connection with a specific investigation or legal claim.
Where we no longer need your personal data for the purposes for which it was collected, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions, for specified purposes, and are subject to appropriate contractual and security obligations.
Such processors may include providers of payment processing services, customer relationship management systems, accounting and bookkeeping services, IT hosting and support, security and CCTV maintenance, and document storage and destruction services.
We may also share personal data with third parties acting as independent data controllers where required by law, such as law enforcement authorities, tax authorities, regulatory bodies, or professional advisers including lawyers and auditors.
We do not sell your personal data to third parties. If we are involved in a business reorganisation, sale or transfer of all or part of our operations, your personal data may be transferred to a successor entity as part of that transaction, in compliance with data protection law.
International Transfers
Where any of our service providers are located outside the United Kingdom or process data in other countries, we take steps to ensure that appropriate safeguards are in place to protect your personal data, such as using contracts approved for use under data protection law or ensuring that the destination country has been recognised as providing an adequate level of protection.
Data Security
We implement appropriate technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include physical security at our premises, restricted access to systems and records, secure storage of documents, and regular review of data handling practices. While no system can be completely secure, we take reasonable steps to reduce the risk of a security breach.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to the personal data we hold about you. These include the following, subject to applicable conditions and exemptions.
The right of access. You may request confirmation that we process your personal data and obtain a copy of that data together with information about how it is used.
The right to rectification. You may request that inaccurate or incomplete personal data be corrected or updated.
The right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
The right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of data you contest.
The right to data portability. In certain circumstances, you may request that we provide your personal data in a structured, commonly used and machine-readable format and transmit it to another controller where technically feasible.
The right to object. You may object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests or where processing is needed for legal claims.
The right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.
You also have the right to lodge a complaint with the competent supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so we can attempt to resolve your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal and regulatory developments. Any updated version will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
