Storage Tulse Hill Privacy Policy
This Privacy Policy explains how Storage Tulse Hill collects, uses, stores and protects personal data of its customers and prospective customers in the Tulse Hill area. It is intended to comply with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all individuals who enquire about, use, or have used Storage Tulse Hill services in the area, whether as private individuals or on behalf of a business.
Who We Are and Scope of This Policy
Storage Tulse Hill is a storage service provider operating in the Tulse Hill area. We act as the controller of the personal data we collect in connection with enquiries, bookings, contracts, and the use of our storage facilities and related services. This policy covers all customers and prospective customers within our service area, including individuals, sole traders and representatives of corporate clients.
Types of Personal Data We Collect
We collect and process different categories of personal data, depending on how you interact with us and which services you use:
Identification and contact details, such as your name, postal address, billing address, and, where provided by you, your preferred contact details.
Customer account information, such as your customer reference, contract details, unit number, key or access card identifiers, and correspondence records relating to your account.
Payment and billing information, such as payment method details and transaction records. We do not store full payment card details when payments are processed via secure payment processors.
Usage and operational data, such as dates and times of entry and exit from the facility, CCTV images in and around our premises, and records of any incidents or enquiries while you use our services.
Marketing and communication preferences, such as whether you wish to receive updates about our services and how you prefer to be contacted.
How We Collect Personal Data
We collect personal data directly from you when you:
Make an enquiry about our storage services in person, by post, or through electronic communication.
Request a quote, make a booking, or enter into a contract for storage services.
Visit our facility, including through CCTV monitoring for security and safety purposes.
Communicate with us in relation to your account, make a complaint, or provide feedback.
We may also receive personal data about you from third parties where this is necessary to provide our services, for example from payment processors or, if you act on behalf of a business, from your employer or organisation.
Lawful Bases for Processing Your Personal Data
We rely on the following lawful bases under data protection law to process your personal data:
Performance of a contract. We process data needed to provide our services, such as managing bookings, operating your storage unit, and handling payments and account administration.
Compliance with legal obligations. We process certain data to meet our legal and regulatory duties, such as accounting, tax, and health and safety obligations, and to cooperate with law enforcement or regulatory authorities where required.
Legitimate interests. We may process data where it is necessary for our legitimate business interests and those interests are not overridden by your rights. These interests include ensuring the security of our premises and customers, preventing and detecting fraud and theft, maintaining accurate records, improving our services, and managing business operations.
Consent. Where required by law, for example for specific types of marketing communications, we will process your data based on your freely given, specific and informed consent. You can withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide storage and related services, including setting up and managing your account, granting and managing access to units, handling queries, and providing customer support.
To process payments, manage billing and collections, and maintain accurate financial records.
To ensure safety and security, including monitoring access to the facility, operating CCTV for crime prevention and detection, and managing incident reports.
To manage our relationship with you, including notifying you about changes to our terms or policies and responding to your requests, questions and complaints.
To conduct internal reporting, analysis and service improvement, such as understanding how our services are used and planning future capacity.
To send you information about our services, offers or updates where you have given consent or where we are otherwise permitted to do so under applicable law.
Data Retention and Storage Periods
We keep your personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal, accounting, or reporting requirements.
Customer account and contract records are typically retained for a period after the end of your contract to address any queries, disputes or legal claims and to meet our statutory obligations.
Billing and transaction records are retained for periods required by tax and accounting laws.
CCTV footage is retained for a limited period, which is kept as short as is reasonably practical, unless it is required for the investigation of an incident, suspected crime or legal claim, in which case it may be retained for longer.
Marketing preferences and contact details for marketing purposes are retained until you withdraw your consent or object to such processing, or until we determine that the information is no longer accurate or up to date.
Data Sharing and Use of Processors
We do not sell your personal data. We may share personal data with third parties in the following circumstances:
Service providers acting as processors, such as payment processors, cloud storage providers, IT support and system maintenance providers, customer management system providers, security and CCTV system providers, and document storage or destruction companies. These processors are only permitted to process your data in accordance with our documented instructions and must implement appropriate technical and organisational measures to protect your data.
Professional advisers, such as accountants, auditors, insurance providers and legal advisers, where this is necessary to obtain professional services and manage legal or regulatory obligations.
Public authorities and law enforcement agencies, where we are legally required to do so or where it is necessary to protect our rights, property, customers or the public.
We ensure that appropriate contractual and security safeguards are in place when we share personal data with processors or other third parties.
International Transfers
Where any of our service providers or systems involve transfers of personal data outside the United Kingdom, we will ensure that adequate safeguards are in place in accordance with data protection law. These safeguards may include the use of standard contractual clauses or reliance on an adequacy decision, to ensure that your personal data continues to be protected to a standard essentially equivalent to that in the United Kingdom.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to the personal data we hold about you. These rights may be subject to legal conditions and exemptions. They include:
Right of access. You can request confirmation of whether we process your personal data and receive a copy of that data.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other legal basis for retaining it.
Right to restriction of processing. You can ask us to restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our processing.
Right to data portability. In certain cases, you can request that we provide you with personal data you have provided to us in a structured, commonly used and machine readable format, or that we transmit it to another controller where technically feasible.
Right to object. You can object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will stop processing unless we have compelling legitimate grounds which override your interests, rights and freedoms or where the processing is required for legal claims.
Right to withdraw consent. Where processing is based on your consent, you can withdraw that consent at any time.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage. Measures may include access controls, secure storage, encryption where appropriate, staff training and regular review of our data handling policies and practices. While we strive to protect your data, no system can be completely secure and you should take care to keep any account credentials or access information safe.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically to stay informed about how we handle your personal data.
