Storage Nunhead Privacy Policy
This Privacy Policy explains how Storage Nunhead collects, uses, shares and protects personal data relating to our customers and prospective customers in the Nunhead area. It is intended to comply with the United Kingdom General Data Protection Regulation and all applicable data protection laws. This Privacy Policy applies to all Storage Nunhead customers in the area, including individuals, businesses, and any authorised users or representatives connected to a customer account.
Who we are and scope of this policy
Storage Nunhead provides self-storage and related services to customers in the Nunhead area. In providing these services, we act as the data controller for the personal data we collect, meaning we decide why and how your personal data is processed. This Privacy Policy covers personal data collected in person at our premises, over the phone, through forms and documents, and through any other interactions you may have with us in the course of using our services.
Personal data we collect
We collect different categories of personal data depending on how you interact with us and the services you use. This may include:
Identification and contact details such as your name, postal address, billing address, proof of address details, identification numbers contained in documents you provide, and basic contact details such as your preferred method of contact.
Account and contract details such as your customer number, storage unit number, contract start and end dates, rental charges, payment history, deposits, notices to vacate, and information relating to communications about your account.
Payment and transaction information such as records of payments made to us, the method of payment, date and time of payment, and any refunds or chargebacks. We do not store full card details where payments are processed through a secure third-party payment provider; we only receive limited information necessary to confirm the payment and manage your account.
Security and access information such as CCTV recordings on or around our premises, key or access code details associated with your storage unit or site entry system, and records of access where such systems are in place. CCTV is used for security, health and safety, and incident investigation purposes.
Communications and correspondence such as copies of letters, forms, or other documents you provide to us, as well as notes from telephone conversations and any other communications relevant to your relationship with us.
How we collect personal data
We generally collect personal data directly from you when you make an enquiry, request a quote, sign a contract, make a payment, or visit our premises. We may also obtain personal data from authorised persons acting on your behalf, such as a co-signer, business partner or other named representative on your account. In some cases, we may receive limited personal data from third parties, such as payment providers, to confirm that a transaction has taken place.
Lawful bases for processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the circumstances, this may include:
Contract: We process personal data to enter into and perform our storage contracts with you, including setting up your account, managing payments, providing access to your storage unit, and handling renewals or termination of your contract.
Legal obligation: We process certain data to comply with legal obligations, such as record-keeping, tax regulations, fraud prevention, and responding to lawful requests from law enforcement or regulatory authorities.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and these are not overridden by your rights. This includes ensuring the security of our premises, preventing and investigating theft or damage, managing and improving our services, and recovering debts owed to us.
Consent: Where we rely on your consent, we will explain what you are consenting to and how you can withdraw your consent at any time. We will not rely on consent where another lawful basis is more appropriate.
How we use your personal data
We use personal data for the following purposes:
To create and manage your account, including setting up contracts, verifying your identity where appropriate, and providing ongoing customer service.
To manage payments, charges and billing, including processing payments, issuing invoices, and dealing with queries or disputes regarding payments.
To maintain the safety and security of our premises, including monitoring CCTV, managing access systems, investigating incidents, and cooperating with law enforcement where necessary.
To communicate with you about your contract, including sending essential notices, changes to terms, service updates, and information about your storage unit.
To comply with our legal duties, such as maintaining accurate records for tax and accounting purposes, and meeting obligations under consumer and data protection law.
Data retention
We keep personal data for as long as it is reasonably necessary to fulfil the purposes set out in this Privacy Policy, and to meet any legal, regulatory, accounting or reporting requirements. In general, we keep most customer records for a period after the end of your contract to deal with any queries, disputes or legal issues that may arise. CCTV recordings are retained for a shorter period, unless they are required for an ongoing investigation or legal proceedings. When personal data is no longer needed, we will securely delete or anonymise it.
Data processors and third parties
In order to operate our business and provide our services, we may share personal data with trusted third parties who act as data processors on our behalf. These may include:
Payment processing companies that process payments and manage transactions.
IT and systems providers who support our customer databases, access control systems, and security systems such as CCTV storage and maintenance providers.
Professional advisers such as accountants or legal advisers who assist us in meeting our legal and regulatory obligations.
These service providers are only permitted to process your personal data on our instructions, for our specified purposes, and with appropriate security measures in place. We do not sell your personal data to third parties.
Where we are required or permitted by law, we may disclose personal data to public authorities, law enforcement agencies, or regulatory bodies. Any such disclosures will be limited to what is legally necessary.
International transfers
Where possible, we seek to store and process your personal data within the United Kingdom. If any of our service providers transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, to protect your data in line with applicable data protection laws.
How we protect your information
We take appropriate technical and organisational measures to safeguard personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include physical security at our premises, controlled access to our systems, secure storage of documents, and internal policies and procedures on data protection and information security. While we cannot guarantee absolute security, we strive to protect your personal data in line with industry standards and legal requirements.
Your data protection rights
Under data protection law, you have certain rights in relation to your personal data. These rights apply to all Storage Nunhead customers in the area, although some are subject to conditions and exemptions. Your rights may include:
Right of access: You can request confirmation of whether we hold personal data about you and receive a copy of the personal data we hold, along with certain other information.
Right to rectification: You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies.
Right to restriction of processing: You can ask us to restrict how we use your personal data in certain situations, such as while we are considering a request to rectify or erase your data.
Right to object: You may have the right to object to our processing of your personal data where we rely on legitimate interests, including for security or operational reasons, if you believe your rights outweigh our interests.
Right to data portability: In certain circumstances, you can ask us to provide your personal data in a structured, commonly used and machine-readable format, or request that we transmit it to another organisation.
Where we rely on your consent as a lawful basis, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any updates will apply from the date they are published. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle personal data for Storage Nunhead customers in the area.
