Storage Somers Town Privacy Policy
This Privacy Policy explains how Storage Somers Town collects, uses, stores, and protects personal data relating to customers and prospective customers in the Somers Town area. It is intended to ensure compliance with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy applies to all individuals using our storage services or interacting with us as a customer or potential customer in the Somers Town area.
Who This Policy Applies To
This Privacy Policy applies to all Storage Somers Town customers, former customers, and prospective customers in the Somers Town area, as well as individuals who contact us with enquiries about our storage services, visit our premises, or otherwise provide personal data to us in connection with our services.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as name, title, date of birth and identification document details where required for security or contract purposes.
Contact data such as correspondence address, billing address, and other contact preferences.
Account and contract data such as unit numbers, contract start and end dates, payment history, deposit information, and details of services you have purchased or enquired about.
Financial data such as limited payment details where necessary for processing payments and maintaining accounting records. Card information may be processed by third party payment providers.
Communication data such as emails, letters, and records of telephone or in person conversations relating to quotes, bookings, support requests, complaints, and general enquiries.
Security and access data such as CCTV footage, access control logs, and incident reports relating to the safety and security of our premises, customers, and staff.
Technical data where relevant, such as IP addresses and basic device information if you interact with our online services, for security and functionality purposes.
How We Collect Your Personal Data
We collect personal data from you directly when you:
Request a quote or information about our storage services.
Enter into a storage contract with us or sign related documents.
Communicate with us by phone, in writing, or in person.
Visit our premises, including areas covered by CCTV.
Make or receive payments related to your storage services.
We may also obtain personal data indirectly from third parties such as payment service providers, debt recovery agencies, or law enforcement bodies where this is lawful and necessary.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract. We process personal data that is necessary for entering into or performing a contract with you, for example to provide storage services, manage your account, process payments, and communicate with you about your booking.
Legal obligation. We process personal data where we are required to do so by law, such as for accounting, tax reporting, and compliance with law enforcement or court orders.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your rights and freedoms are not overridden. This includes ensuring the security of our premises and customers, preventing fraud, managing our operations, and improving our services.
Consent. In limited situations we may rely on your consent, for example for certain types of optional communications. Where we rely on consent you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up and administering your contract, allocating storage units, managing access, and handling renewals or terminations.
To process payments, deposits, and refunds, and to maintain accurate financial and transactional records.
To communicate with you about your contract, enquiries, quotes, operational notices, security matters, and any changes to our terms or policies.
To maintain the safety and security of our customers, staff, and property, including the use of CCTV and access logs.
To manage debts, resolve disputes, handle complaints, and enforce our contractual rights.
To comply with legal and regulatory obligations, including responding to lawful requests from public authorities.
To manage and improve our operations and services, including internal reporting, audits, and quality control.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to meet legal, accounting, or reporting requirements.
Customer contract data and related records are usually retained for a period after the end of your contract. This period allows us to respond to queries, handle disputes, and meet legal obligations. Financial records are kept for the period required by applicable tax and accounting laws.
CCTV footage and access control data are retained for shorter periods, which are limited to what is necessary for security, incident investigation, and prevention of crime, unless a longer retention period is required in connection with a specific incident or legal claim.
When personal data is no longer needed, it is securely deleted, anonymised, or otherwise processed so that it no longer identifies you.
Data Sharing and Processors
We may share your personal data with carefully selected third parties who act as processors on our behalf. These processors are required to handle your data securely, only in accordance with our instructions, and in compliance with data protection law.
Typical categories of processors include:
Payment processing providers that handle card or electronic payments.
IT and cloud service providers that support our data storage, software, and communications systems.
Security service providers that assist with CCTV, access control systems, and incident management.
Professional advisers such as accountants or legal advisers where necessary for legitimate business purposes.
We may also share personal data with other third parties acting as controllers, where necessary and lawful, such as debt collection agencies, law enforcement bodies, regulators, and public authorities.
We do not sell your personal data. If we are involved in a business reorganisation, transfer, or merger, your personal data may be transferred as part of that arrangement, subject to appropriate safeguards.
International Transfers
Where any of our processors are located outside the United Kingdom or the European Economic Area, or store data in such locations, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include relying on adequacy regulations, entering into contracts containing appropriate data protection clauses, or using other safeguards recognised by data protection law.
How We Protect Your Data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include access controls, secure storage, restricted access to personal data, staff training, and regular review of our security practices. While we take reasonable precautions, no system can be completely secure and you should take care when sharing information with us.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification. You can ask us to correct inaccurate personal data and to complete incomplete information.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected.
Right to restriction. You can request that we restrict the processing of your personal data in specific situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object. You can object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request that we provide certain personal data in a structured, commonly used, machine readable format, or that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have any questions or concerns about how we handle your personal data, you can contact us using our usual communication channels set out in our standard customer documents or on our premises.
You also have the right to lodge a complaint with the applicable data protection supervisory authority if you believe that your data protection rights have been infringed. We would encourage you to contact us first so that we can seek to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The most current version will always apply to the personal data we hold. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.
