Storage Wimbledon Privacy Policy for Customers
This Privacy Policy explains how Storage Wimbledon collects, uses, stores, and protects personal data relating to customers and prospective customers in our service area. It also explains your rights under UK data protection law and the UK General Data Protection Regulation. By using our self-storage or related services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all individual customers and business representatives who use, or enquire about, storage or related services provided by Storage Wimbledon in our operating area. For the purposes of applicable data protection laws, Storage Wimbledon is the data controller in respect of the personal data we process about you. This means we determine the purposes and means of processing your personal data.
Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on your relationship with us and the services you use:
Identification and contact details: name, postal address, billing address, contact address, date of birth, and forms of identification such as passport or driving licence numbers and associated details where required for verification.
Contact information: email address, mobile number and landline number, as well as preferred contact methods and language preferences.
Contract and account information: storage unit number, access codes, rental start and end dates, contract history, communications related to quotations and bookings, and details of services or products you have requested or purchased.
Payment and billing details: payment method, partial card details where necessary for processing, billing history, direct debit or standing order references, and records of payments and refunds. We do not store full card details where this is not strictly necessary.
Security and access information: CCTV footage from common areas, access logs for entrances and units, vehicle registration numbers when entering the premises, and incident reports relating to safety or security.
Communications and enquiries: records of queries, complaints, feedback, or other correspondence with us by phone, in writing, or via other communication channels.
Marketing preferences: your choices about receiving marketing communications and information about how you use or respond to such communications where legally permitted.
How We Collect Your Personal Data
We collect personal data in several ways, including when you provide it directly to us when making an enquiry, obtaining a quote, signing a contract, paying for services, or communicating with our team. We may also collect data automatically through access control systems, CCTV, and our internal phone or booking systems. In some cases, we may receive limited personal data from third parties such as comparison sites, business partners, or referees where they are legitimately involved in arranging or guaranteeing your contract.
Lawful Basis for Processing Your Data
We only process personal data where we have a lawful basis to do so under data protection laws. The main lawful bases we rely on are:
Performance of a contract: we need to process your data to enter into and fulfil our storage agreements and other contracts with you, including managing bookings, payments, access, renewals, and customer service.
Compliance with legal obligations: we process data where necessary to comply with laws and regulations, such as record keeping, tax rules, prevention of fraud and crime, and responding to lawful requests from public authorities.
Legitimate interests: we process data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes maintaining the security of our premises, improving our services, managing customer relationships, and defending our legal rights.
Consent: in some limited cases, we will rely on your explicit consent, for example for certain types of direct marketing where consent is required. You may withdraw your consent at any time, although this will not affect the lawfulness of processing before the withdrawal.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To create and manage your customer account and storage contract.
To verify your identity and suitability for our services, including fraud prevention checks where required.
To process payments, issue invoices, handle refunds, and maintain financial records.
To provide access to our storage facilities and ensure the security of customers, staff, and property through access controls and CCTV.
To communicate with you about bookings, contract renewals, service updates, changes to terms, or other operational matters.
To respond to your enquiries, feedback, and complaints and to provide customer support.
To send you marketing communications about our services where we are permitted to do so by law and you have not opted out.
To conduct internal analysis, reporting, and service improvement while using aggregated or anonymised data where possible.
To comply with our legal and regulatory obligations and to establish, exercise, or defend legal claims.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention period will vary depending on the type of data and our obligations, but we follow these general principles:
Contract and billing records are typically retained for a number of years after your contract ends, in line with applicable limitation periods and tax and accounting rules.
CCTV footage and access records are usually retained for a shorter period, unless a longer retention is required in connection with an incident, investigation, or legal claim.
Marketing data is kept while you remain subscribed or until you object or withdraw consent, after which it is suppressed from further marketing use but may be retained in minimal form to record your preferences.
When data is no longer required, we will securely delete or anonymise it so it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who process data on our behalf as data processors. These may include:
IT and cloud service providers who host our systems and data.
Payment service providers and financial institutions involved in processing transactions.
Security and access control providers who support our CCTV and entry systems.
Professional advisers such as accountants, auditors, or legal advisers where necessary.
Marketing and customer communication service providers, subject to your permissions and applicable law.
Where we use processors, we require them by contract to keep your data secure, use it only in accordance with our instructions, and comply with data protection law.
We may also share personal data with other independent controllers where necessary, for example with law enforcement, regulatory bodies, or insurers in connection with legal obligations, investigations, or claims. We do not sell your personal data.
International Data Transfers
Where any processing involves the transfer of personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent measures, to protect your data to a standard essentially equivalent to that required under UK law.
How We Protect Your Data
We implement technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, secure storage of physical records, and appropriate security for our IT and communications systems. While we take reasonable steps to protect your data, no system can be completely secure and we cannot guarantee absolute security.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. Subject to certain conditions and exemptions, these include:
Right of access: you can request confirmation of whether we process your personal data and obtain a copy of the data we hold, together with information about how it is processed.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected.
Right to restriction of processing: you can ask us to restrict the processing of your personal data in certain situations, such as while we check its accuracy or consider an objection.
Right to object: you can object to processing based on our legitimate interests, including profiling, and we will stop unless we have compelling legitimate grounds. You always have the right to object to direct marketing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request that certain personal data is provided in a structured, commonly used, machine-readable format and transferred to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent for processing, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any updates will take effect when the revised Privacy Policy is made available. We encourage you to review this policy periodically to stay informed about how we handle your personal data.
