Privacy Policy - Putney Storage

Putney Storage is committed to protecting the privacy and personal data of all customers in the Putney area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK GDPR and the Data Protection Act 2018. It applies to all Putney Storage customers in the area, including prospective customers, current customers, former customers, and individuals who contact us on behalf of a business or household account.

1. Introduction

This Privacy Policy sets out how Putney Storage handles personal data when you use our storage services, make enquiries, enter into a storage agreement, access our facilities, make payments, or otherwise interact with us. We only process personal data where we have a lawful basis to do so, and we aim to collect only the information that is relevant and necessary for our business operations, legal obligations, and customer support.

By using Putney Storage services, you acknowledge that your personal data will be handled in line with this policy. We may update this policy from time to time to reflect changes in our services, legal requirements, or data protection practices.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, date of birth, and identification details.
Contact information: address, email address, and telephone number.
Account and contract information: storage unit details, booking records, agreements, renewal dates, and service preferences.
Payment information: payment method, billing details, transaction records, and payment status.
Access and security information: entry logs, security records, CCTV footage where applicable, and incident reports.
Communications: enquiries, complaints, feedback, notices, and correspondence with our team.
Technical information: device data, IP address, cookies, and website usage information if you interact with our online services.
Verification information: documents or details needed to confirm identity, authorisation, or eligibility to use our services.

We usually collect this information directly from you when you complete forms, sign agreements, make payments, or speak with us. In some cases, we may receive information from third parties such as payment providers, insurers, identity verification services, or legal and regulatory bodies where necessary.

3. How We Use Personal Data

Putney Storage uses personal data for the following purposes:

to provide and manage storage services;
to create and administer customer accounts;
to process bookings, renewals, and payments;
to verify identity and prevent fraud;
to manage access to storage facilities and maintain security;
to communicate with customers about services, changes, and administrative matters;
to respond to queries, complaints, and support requests;
to meet legal, tax, accounting, and regulatory obligations;
to monitor and improve our services, processes, and security arrangements;
to protect our rights, property, staff, customers, and facilities.

We may also use aggregated or anonymised data for analytical purposes, provided it no longer identifies any individual person.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Putney Storage relies on the following lawful bases depending on the activity involved:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up storage services, managing your account, taking payments, and delivering the services you request.

Legal obligation

We process personal data where we need to comply with laws and regulations, such as financial record keeping, tax obligations, fraud prevention, or responding to lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving services, preventing misuse, maintaining security, or resolving disputes. When relying on this basis, we ensure our use of data is proportionate and relevant.

Consent

In limited situations, we may ask for your consent, for example where it is required for optional marketing communications or certain non-essential cookies. Where consent is used, you may withdraw it at any time.

Vital interests

In rare cases, we may process personal data to protect someone’s vital interests, such as in an emergency involving health or safety.

5. Sharing Data and Processors

Putney Storage does not sell personal data. However, we may share information with trusted third parties who act as data processors or independent controllers, where necessary for our operations or legal compliance.

Our processors may include:

Payment processors that handle card or other payment transactions;
IT and cloud service providers that support account management, data storage, and system security;
Security service providers that support surveillance, access control, alarms, or incident monitoring;
Identity verification providers that assist with checking identity and preventing fraud;
Professional advisers such as accountants, auditors, insurers, and legal advisers;
Maintenance and support providers that help operate our facilities and related systems;
Regulators, courts, and law enforcement where disclosure is required by law or necessary to protect rights and safety.

Where a processor acts on our behalf, we require appropriate contractual safeguards to protect personal data and ensure it is processed only under our instructions and in line with data protection law. If information is transferred outside the UK, we will ensure suitable safeguards are in place.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and in line with legal, accounting, insurance, and operational requirements. Retention periods may vary depending on the type of data and the reason we hold it.

In general:

customer account and contract records are retained for the duration of the service relationship and for a reasonable period afterwards;
payment and invoicing records are retained for tax and accounting purposes;
security and access records are kept only as long as needed for safety, incident investigation, and operational control;
communications and support records are kept as long as necessary to resolve matters and maintain records of service;
data that is no longer required is securely deleted, anonymised, or archived in line with our retention procedures.

We review retention periods regularly to ensure we do not keep personal data for longer than necessary.

7. Your Rights

As a data subject under the UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to conditions and exemptions.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: in some circumstances, you may ask us to delete your personal data.
Right to restrict processing: you may ask us to limit how we use your data in certain situations.
Right to data portability: where applicable, you may request a copy of data in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

You also have the right to raise concerns with the relevant data protection authority if you believe your data rights have been infringed. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

8. Security Measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, role-based permissions, and regular review of procedures.

While we strive to protect personal data, no system can be guaranteed to be completely secure. We therefore encourage customers to take appropriate care when sharing personal information and to notify us promptly if they believe any information has been compromised.

9. Children’s Data

Putney Storage services are intended for adults and business users. We do not knowingly collect personal data from children except where it is incidental to a customer account and required for legitimate business or legal purposes. If we become aware that we have collected data unlawfully, we will take steps to delete or restrict it where appropriate.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Scope of Application

This Privacy Policy applies to all Putney Storage customers in area, including individuals and organisations using our storage services, making enquiries, or interacting with us in connection with storage arrangements. By continuing to use our services, you acknowledge that your personal data will be processed in accordance with this policy and applicable data protection law.

Last updated: 2026