Storage Denmark Hill Privacy Policy
This Privacy Policy explains how Storage Denmark Hill collects, uses, stores and shares personal data relating to customers and prospective customers in the Denmark Hill area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all Storage Denmark Hill customers and anyone who makes an enquiry about our services in the Denmark Hill area, whether online, by phone or in person. By using our services or contacting us, you acknowledge that you have read this Privacy Policy.
Who we are and scope of this policy
Storage Denmark Hill is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed.
This Privacy Policy covers personal data we collect from you directly, from your use of our facilities and services, and from certain third parties where this is necessary for the operation of our business and the performance of our contracts with you.
Personal data we collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, postal address, billing address, contact address, date of birth, and any identification documents you provide for verification purposes, such as a passport or driving licence, including document numbers and expiry dates where required by law or our insurance and security obligations.
Contact and account details: email address, username or account identifiers, and communication preferences.
Communication records: details of enquiries, complaints and other communications with you, including notes of phone calls and copies of correspondence.
Contract and payment information: records of storage agreements, unit numbers, contract dates, rental charges, payment history, partial card details as processed by our payment provider, and information required for invoicing and accounting.
Security and access information: vehicle registration numbers for site access where relevant, gate and unit access logs, CCTV footage in and around our premises, and records of any security incidents.
Technical and usage data: information about how you interact with our website or customer portals, such as IP address, device information and basic usage analytics where these are collected in a way that identifies you.
How we collect your personal data
We collect personal data directly from you when you request a quote, make a booking, sign a storage agreement, make a payment, contact us with an enquiry, visit our site, or otherwise communicate with us.
We may also receive personal data from third parties, such as payment service providers, credit checking or address verification services, insurers, and law enforcement or regulatory authorities where legally permitted.
Lawful bases for processing your data
We rely on the following lawful bases under the UK GDPR to process your personal data:
Contract: we process your personal data where this is necessary to take steps at your request before entering into a contract, and to perform our contract with you. This includes setting up your storage unit, administering your account, processing payments, managing access, and communicating with you about your agreement.
Legal obligation: we process certain data to comply with our legal obligations, including tax and accounting rules, insurance and security requirements, and obligations to law enforcement or regulatory bodies.
Legitimate interests: we process some personal data where necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes using CCTV for security, monitoring access to our premises, recovering unpaid charges, improving our services, and handling queries and complaints.
Consent: where we rely on your consent, for example for certain forms of marketing or optional cookies, we will request this clearly and separately. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services: including setting up and administering your account, managing bookings, processing payments, providing access to storage units, and communicating with you about your storage agreement.
To maintain security and protect our business: including monitoring access to our premises, operating CCTV for crime prevention and safety, addressing security incidents, and preventing fraud or misuse of our services.
To comply with legal and regulatory requirements: including responding to lawful requests from authorities, handling insurance matters, maintaining proper business and financial records, and meeting our tax, accounting and reporting obligations.
To communicate with you: including responding to your enquiries, notifying you of changes to your agreement or our terms, and sending essential service messages about your storage unit and payments.
To improve our services and operations: including analysing how our sites and services are used in order to enhance safety, efficiency and customer experience, where this is compatible with your privacy rights.
Data retention
We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, and to meet any legal, accounting or reporting requirements.
Customer account and contract information will generally be kept for the duration of your storage agreement and for a reasonable period afterwards, typically up to six years, to deal with any queries, disputes or legal claims and to comply with tax and accounting rules.
CCTV footage and access logs are retained for a shorter period, normally only for as long as is necessary for security, investigation of incidents, and the protection of our customers, staff and property, unless a longer retention period is required in connection with a specific incident or legal claim.
Where we no longer need your personal data for the purposes for which it was collected and we are not required by law to keep it, we will securely delete or anonymise it.
Data processors and sharing your data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy, and they must implement appropriate security measures.
Our data processors may include providers of payment processing services, IT and cloud hosting services, customer management systems, security and CCTV maintenance services, and professional advisers such as accountants or auditors.
We may also share your personal data with other third parties where this is necessary to comply with a legal obligation, to protect your vital interests or those of another person, to establish, exercise or defend legal claims, or where you have explicitly requested or consented to such sharing.
If any transfer of your personal data outside the United Kingdom or European Economic Area is required, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or an equivalent mechanism recognised by data protection law.
Your data protection rights
As a customer or prospective customer of Storage Denmark Hill in the Denmark Hill area, you have the following rights in relation to your personal data, subject to certain conditions and exemptions set out in the law:
Right of access: you have the right to request confirmation of whether we process your personal data and to receive a copy of that data, together with certain information about how we use it.
Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure: in some circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis for processing.
Right to restriction of processing: you may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.
Right to data portability: where processing is based on your consent or on a contract and is carried out by automated means, you have the right to request that we provide your personal data in a structured, commonly used and machine-readable format and, where technically feasible, transmit it to another controller.
Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where the processing is for the establishment, exercise or defence of legal claims.
Rights in relation to automated decision-making: where we use automated decision-making that has legal or similarly significant effects on you, you have the right to obtain human intervention, to express your point of view and to contest the decision.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve any concerns directly.
Security of your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, staff training, physical security at our premises, and the use of secure systems for storing and processing data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any changes will be posted in the most recent version of this Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we process your personal data.
