Storage Anerley Privacy Policy
This Privacy Policy explains how Storage Anerley collects, uses, stores and protects personal data relating to our self storage services. It applies to all Storage Anerley customers and prospective customers in the local area, including individuals, sole traders and representatives of businesses that use or enquire about our services.
Who this policy applies to
This policy applies to anyone who:
Uses or has used a storage unit or related service from Storage Anerley in the area.
Makes an enquiry about our services in person, by post or online forms that do not include direct contact details in this notice.
Visits our premises where security systems may collect personal data.
Acts on behalf of a business or organisation that has a relationship with Storage Anerley.
Types of personal data we collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identity and contact information such as name, postal address and any other details you choose to provide to us in writing.
Customer account information such as unit number, dates of occupation, services used, invoices and payment history.
Verification and security information such as copies or details of identification documents you provide in person, vehicle registration numbers recorded for site access, and entry or exit times where access control systems are used.
Financial information such as limited payment related data contained on invoices and transaction records that we are required to keep for accounting and taxation purposes. Full payment card data is not stored by us where separate secure payment processors are used.
Communication records such as written correspondence and notes relating to enquiries, quotations, bookings, contract changes, complaints and other interactions with us.
Technical and monitoring information such as CCTV images captured on or around our premises, access control logs and other security related data necessary to protect our customers, staff and property.
How we collect personal data
We collect personal data in several ways, including:
Directly from you when you complete forms, sign a storage agreement, provide identification, send us correspondence or provide information at our premises.
Automatically when you enter or move around our site where CCTV and access control systems operate.
From business partners or intermediaries where they are authorised to share your details with us to provide storage or related services.
Our lawful bases for processing personal data
We only process personal data where we have a lawful basis under the UK General Data Protection Regulation and associated data protection laws. The main lawful bases we rely on are:
Contract. We process personal data to enter into, perform and manage our contract with you, including setting up your account, providing storage, managing payments, handling renewals and responding to your requests.
Legal obligation. We process personal data to comply with legal and regulatory requirements, such as record keeping for tax, accounting and health and safety, and cooperating with law enforcement or regulatory authorities where required.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. These interests include managing and improving our services, ensuring site and customer security, preventing and detecting fraud and crime, recovering debts, protecting our property and handling customer enquiries.
Consent. In limited situations we may rely on your consent, for example where this is required for certain categories of data or specific optional uses. When we rely on consent, you have the right to withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use the personal data we collect for the following purposes:
To set up, manage and administer your storage agreement and any related services.
To verify your identity and eligibility to use our services.
To manage billing, process payments and maintain accounting records.
To communicate with you about your account, including renewals, access matters, operational updates and important information about your unit.
To maintain the security and integrity of our sites, units, staff and customers, including the use of CCTV, access controls and incident logs.
To respond to enquiries, complaints and disputes.
To exercise or defend our legal rights and manage potential or actual claims.
To comply with applicable laws and regulatory requirements.
Data sharing and processors
We may share personal data with carefully selected third parties where this is necessary for the purposes described in this policy and where appropriate safeguards are in place. These third parties typically act as data processors on our behalf and may include:
Payment and billing service providers that process transactions and assist with invoicing and account management.
IT and cloud service providers that host or support our systems, data storage and security tools.
Professional advisers such as accountants, auditors, legal advisers and insurers who assist us in running our business and managing risks.
Security providers and maintenance contractors who support our physical and electronic security systems and site management.
Debt collection agencies and tracing agents where this is necessary to recover unpaid fees.
Public authorities, law enforcement agencies and regulators where we are legally required or permitted to share information.
We require processors that handle personal data on our behalf to act only on our instructions, use appropriate security measures and comply with applicable data protection laws.
Data retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements. The exact retention period depends on the nature of the data and the purpose of processing, but we apply the following general principles:
Customer account and contract data is usually retained for a period after the end of your relationship with us to deal with any queries, disputes or legal claims and to comply with financial record keeping obligations.
CCTV and access control data is kept for a limited period that is appropriate for security monitoring and incident investigation, unless a longer retention period is required in connection with a specific incident, dispute or legal claim.
Communication records are retained in line with our customer account data where they relate to your contract or our services.
When personal data is no longer required, we will securely delete or anonymise it.
International transfers
Where we use service providers that process personal data outside the United Kingdom or the European Economic Area, we take steps to ensure that your information is protected in line with applicable data protection laws. This may include using countries that have been recognised as providing an adequate level of protection or putting in place appropriate contractual safeguards.
How we protect your data
We use a combination of organisational and technical measures to keep personal data secure. These may include access controls, staff training, secure storage, encryption and regular review of our security arrangements. While no system can be completely secure, we take reasonable steps to reduce the risk of unauthorised access, loss, misuse or disclosure of personal data.
Your data protection rights
Under data protection law, and subject to certain conditions and exemptions, you have the following rights in relation to your personal data:
Right of access. You can request confirmation that we process your personal data and ask for a copy of the information we hold about you.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. You can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purpose for which it was collected and we are not required to retain it.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we are considering a request to rectify or erase it.
Right to object. You can object to processing based on our legitimate interests where you believe your rights and interests outweigh our reasons for processing.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine readable format, or that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are unhappy with how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, in the way we handle personal data or in applicable law. Any updated version will apply to all Storage Anerley customers and prospective customers in the area from the date it is made available. We recommend that you review this policy periodically so that you remain informed about how we use and protect your personal data.
