Storage Old Malden Privacy Policy
This Privacy Policy explains how Storage Old Malden collects, uses, stores, and shares personal data relating to our customers in the Storage Old Malden service area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services, visiting our premises, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Who We Are
Storage Old Malden is a provider of storage facilities and related services. For the purposes of data protection law, we are the data controller in respect of the personal data we collect and process about our customers, prospective customers, and visitors to our premises within the Storage Old Malden area.
Scope Of This Privacy Policy
This Privacy Policy applies to all Storage Old Malden customers, prospective customers, and account holders who use or enquire about our storage units or related services at our locations in the Storage Old Malden area. It also applies to individuals who contact us, visit our facilities, or appear in our on-site CCTV recordings.
Personal Data We Collect
We may collect and process the following types of personal data, depending on how you interact with us and the services you use:
Identification and contact details, such as full name, residential address, billing address, date of birth, and other details required to verify your identity, as well as contact information such as postal address and communication preferences.
Account and contract information, such as storage unit number, contract start and end dates, payment history relating to your storage agreement, and records of communications with you about your account.
Payment and billing information, such as the method of payment used for our services and basic transaction details required to process payments and maintain financial records. We do not store full card numbers where payments are processed through secure third party providers.
Communications and correspondence, such as enquiries, complaints, feedback, and related information you provide when you contact us in person, by post, or online.
Security and access information, including vehicle registration details that you provide for access control, and CCTV footage recorded on our premises for security and safety purposes.
Technical information, where relevant, such as basic information about your device and interaction with any online tools we provide to manage your storage agreement, including date and time of access and basic log information.
How We Collect Personal Data
We collect personal data directly from you when you sign a storage agreement, request a quote, make a payment, contact us with an enquiry, or visit our premises. We may also obtain information from third parties such as payment service providers that confirm whether a transaction has been authorised, or from publicly available sources where we need to verify information to comply with legal or regulatory requirements.
Lawful Bases For Processing
We rely on the following lawful bases under the UK GDPR to process your personal data:
Contractual necessity. We process personal data when it is necessary to enter into and perform our contract with you, including setting up your storage account, administering your storage unit, taking payment, and communicating with you about your agreement.
Legal obligations. We process personal data when required to comply with our legal and regulatory obligations, including tax and accounting requirements, fraud prevention, health and safety obligations, and responding to lawful requests from law enforcement or other authorities.
Legitimate interests. We process personal data for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. These interests include operating and improving our storage facilities, ensuring site security through CCTV and access records, managing customer relationships, recovering debts, and protecting our business and customers from misuse or illegal activity.
Consent. In limited circumstances, we may rely on your consent, for example where we wish to send you certain types of marketing communications about new services that are not closely related to your existing contract. Where we rely on consent, you may withdraw it at any time using the methods we provide.
How We Use Your Personal Data
We use personal data to provide and manage storage services, including processing your application, allocating storage units, managing access and security, and handling renewals or terminations of your agreement.
We use personal data to process payments, manage invoicing, keep accurate accounting records, and deal with any payment queries or disputes.
We use personal data to communicate with you about your storage agreement, notify you of any changes to our terms and conditions, inform you about access issues or facility updates, and respond to your queries and complaints.
We use personal data for security and safety, including monitoring our premises through CCTV, managing access control, investigating security incidents or suspected misuse of our facilities, and cooperating with law enforcement where necessary.
We use personal data to operate, improve, and develop our services, including reviewing how our facilities are used, planning capacity, and enhancing our customer experience.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations.
Customer and contract records are generally retained for the duration of your agreement and for a period afterwards as required for tax, accounting, and potential dispute resolution. This period is typically several years from the end of your contract, after which records are securely deleted or anonymised.
CCTV recordings are kept for a limited period necessary to maintain security and investigate incidents, after which they are automatically overwritten or securely deleted, unless they are required for an ongoing investigation or legal claim.
Enquiries and correspondence are retained for as long as needed to respond and to maintain records of our interactions, especially where these may be relevant to legal obligations or disputes.
Sharing Your Personal Data And Processors
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These include payment processing providers, secure data storage and backup providers, information technology and systems support providers, and professional advisers such as accountants or legal advisers where necessary.
These processors are only permitted to process your personal data in accordance with our instructions and must implement appropriate technical and organisational measures to protect your data.
We may share personal data with law enforcement authorities, regulatory bodies, or courts where required by law or where it is necessary to protect our rights, property, or the safety of our customers, staff, or the public.
We do not sell your personal data. We also do not transfer your personal data outside the United Kingdom unless appropriate safeguards are in place in accordance with data protection law.
Your Data Protection Rights
You have several rights under data protection law in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. You have the right to request that we delete your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected and we are not required to keep it for legal reasons.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
Right to data portability. You have the right, in certain circumstances, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transmit that data to another controller where technically feasible.
Right to object. You have the right to object, on grounds relating to your particular situation, to our processing of your personal data where we rely on legitimate interests. You also have the right to object at any time to the use of your personal data for direct marketing.
Rights in relation to automated decision-making. Storage Old Malden does not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.
Exercising Your Rights
If you wish to exercise any of your data protection rights, you can contact us using the contact methods publicised on our official customer documentation or at our premises. We may need to verify your identity before responding to your request. We aim to respond within the time limits set out in data protection law.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we handle your personal data.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, secure storage systems, staff training, and regular review of our security procedures.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any significant changes will be communicated through our usual customer communication methods or made available at our premises. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
