Storage Putney Privacy Policy
This Privacy Policy explains how Storage Putney collects, uses, stores and shares personal data relating to customers and prospective customers in the Putney area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018, and how you can exercise those rights.
This Privacy Policy applies to all Storage Putney customers, anyone who makes an enquiry about our services, and any person who accesses or uses our storage facilities in the Putney area on behalf of a customer, such as an authorised contact or emergency contact.
Data Controller
For the purposes of data protection law, Storage Putney is the data controller. This means that we determine the purposes and means of processing your personal data when you use our storage services or otherwise interact with us in the Putney area.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. The main categories of personal data we collect are:
Identification and contact data, such as your full name, postal address, billing address, and general contact details. These details are collected when you enquire about our services or enter into a storage agreement with us.
Account and contract data, such as storage unit number, move in and move out dates, access authorisations, payment status, contract history, and correspondence relating to your agreement. This data is created or collected during the setup and administration of your storage account.
Payment and transaction data, such as payment method, payment history, invoices, and records of refunds or arrears. We do not store full card details where payment is taken through a secure payment service provider acting as our processor.
Security and access data, such as CCTV footage in and around the facility, access control logs, unit entry times, and vehicle registration numbers where relevant to site security arrangements.
Communication data, such as information you provide when you contact us with an enquiry, complaint, or feedback, and records of our communications with you relating to your account or our services.
Marketing preference data, such as whether you have consented to receive marketing communications from us and your communication channel preferences.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us to request a quote, visit our facilities, sign a storage agreement, make a payment, or communicate with us in person, by post, or by other communication channels.
We also collect personal data automatically through our security and access systems, such as CCTV recordings at our storage site and entry or exit logs linked to your authorised access credentials.
In some circumstances, we receive personal data about you from third parties, for example from a person who adds you as an authorised contact or emergency contact on their storage account, or from payment providers that confirm whether a payment has been successful or declined.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis to do so under data protection law. The lawful bases we rely on are:
Contract. We process your identification, contact, payment, account, and communication data to take steps at your request prior to entering into a contract, to provide you with storage services, and to manage and enforce the storage agreement.
Legal obligation. We process certain personal data where necessary to comply with legal requirements, such as tax and accounting rules, health and safety obligations, fraud prevention laws, and where we are required to cooperate with law enforcement or regulatory authorities.
Legitimate interests. We process CCTV footage, access logs, contact data, communication data, and limited profiling for credit control and service improvement where this is necessary for our legitimate interests, and where those interests are not overridden by your rights and freedoms. Our legitimate interests include maintaining the security of our premises, preventing and detecting crime, managing our business, improving our services, and protecting our legal rights.
Consent. We may rely on your consent for specific processing activities, such as sending you direct electronic marketing where this is required by law. When we rely on consent, you may withdraw your consent at any time, and this will not affect the lawfulness of processing carried out before you withdrew it.
How We Use Your Personal Data
We use your personal data to provide and manage storage services, including setting up your account, administering your storage agreement, taking payments, and managing any questions, complaints, or operational issues relating to your use of the storage facility.
We use personal data to maintain the safety and security of our storage site, including verifying your identity where needed, monitoring access points, and reviewing CCTV footage when necessary to investigate incidents, prevent crime, and protect people and property.
We use your personal data for business administration, including financial management, reporting, auditing, and maintaining appropriate records in line with our legal and regulatory obligations.
Where you have provided consent or where we are otherwise permitted by law, we may use your contact and preference data to inform you of relevant services, offers, or updates relating to Storage Putney.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements.
Customer account and contract records are typically retained for a period after the end of your storage agreement, to enable us to respond to questions, manage any disputes, and comply with applicable legal obligations.
CCTV footage and access logs are generally kept for a shorter period, unless a longer retention is required due to an incident, investigation, or legal requirement.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.
Data Processors and Third Parties
We use carefully selected third party service providers to help us operate our business and deliver storage services. These providers act as data processors and only process your personal data on our documented instructions and for the purposes we specify.
Examples of processing activities carried out by these service providers include payment processing, secure card handling, cloud based storage of business records, email and document management services, property maintenance contractors who may have controlled access to areas containing personal data, and IT support services that maintain our systems and security.
Where we share personal data with third parties that act as independent controllers, such as insurers, professional advisers, or law enforcement authorities, this is done where necessary to meet our legal obligations, protect our rights, or manage claims and disputes.
We require all service providers who process personal data on our behalf to implement appropriate technical and organisational measures to protect your data and to comply with data protection law.
International Transfers
Where any of our service providers or systems are located outside the United Kingdom, we take appropriate steps to ensure your personal data remains protected in accordance with applicable law. This may include using standard contractual clauses or ensuring that the destination country benefits from an adequacy decision by the relevant data protection authority.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply in many situations, although they may be subject to certain limitations and conditions.
Right of access. You have the right to obtain confirmation of whether we process your personal data and to request a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You may have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing, while we consider your request.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you have the right to receive certain personal data in a structured, commonly used, and machine readable format and to transmit that data to another controller where technically feasible.
Rights related to consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in law, our services, or our internal practices. Any updated version will apply to all existing and new customers in the Storage Putney area from the date it is issued.
