Storage Plumstead Privacy Policy
This Privacy Policy explains how Storage Plumstead collects, uses, stores and protects personal data relating to individuals who use our storage facilities and related services in the Plumstead area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act.
This Privacy Policy applies to all Storage Plumstead customers and prospective customers in the Plumstead area, including individuals, sole traders and representatives of corporate clients, as well as visitors to our premises and individuals who communicate with us in relation to our services.
Data Controller
Storage Plumstead is the controller of the personal data described in this Privacy Policy. This means that we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about, use or interact with our services:
Identification and contact details such as your name, postal address, billing address, correspondence address, and any contact details you choose to provide, such as an online handle or profile name.
Customer account data such as your storage unit number, access permissions, contract start and end dates, services selected, payment history, and communications relating to your account.
Payment and billing information such as records of payments made, payment method details as required to process transactions, and related invoicing and tax information. We do not store full card details when payments are processed through secure payment providers.
Security and access data such as CCTV footage at our premises, access control logs (including times of entry and exit and unit access records), and records of any incidents or accidents occurring on site.
Communication data such as records of enquiries, complaints, feedback and other correspondence with us, whether made in person, by post, through online forms or by other communication channels.
Technical information where relevant to your use of our online services, such as basic device and usage data generated by your interaction with our website or online tools.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so under data protection laws. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into, perform or manage a contract with you, for example to provide storage services, administer your account, process payments, communicate with you about your booking, or manage renewals and terminations.
Legal obligation: We process personal data where this is necessary for compliance with our legal obligations, including accounting, tax and regulatory requirements, health and safety obligations, and our duty to assist competent authorities when we are legally required to do so.
Legitimate interests: We process personal data where it is necessary for our legitimate interests, or those of a third party, and where your interests and fundamental rights do not override those interests. This includes ensuring site security and preventing unauthorised access, protecting our property and the property stored with us, maintaining and improving our services, handling customer queries, and pursuing or defending legal claims.
Consent: In limited cases, we may rely on your consent, for example for certain types of marketing. Where consent is the basis, you may withdraw it at any time. The withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data described above for the following purposes:
To provide and manage storage services, including creating and administering your customer account, allocating and securing storage units, and managing bookings and renewals.
To process payments and maintain accurate financial records, including issuing invoices, processing refunds and handling queries about charges.
To maintain the safety and security of our premises, staff, customers and property, including the use of CCTV and access control systems, and to investigate and respond to security incidents.
To respond to enquiries, provide customer support, handle complaints and manage our ongoing relationship with you as a customer.
To comply with applicable legal and regulatory obligations, including record-keeping, reporting, and cooperation with competent authorities where required by law.
To improve and develop our services, for example through analysis of service usage, storage occupancy and operational performance.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements.
Customer account and contract data are generally retained for the duration of your contract and for a period afterwards that allows us to resolve disputes, respond to queries about past services, and comply with statutory limitation periods. Financial and invoicing records are kept for the retention periods required by tax and accounting laws.
CCTV footage and access control logs are usually retained for a limited period necessary for security and investigative purposes, unless a specific incident or legal requirement justifies a longer retention period.
When personal data is no longer required, we will securely delete or anonymise it, so that it can no longer be associated with an identifiable individual.
Data Processors and Third Parties
We may engage carefully selected third-party service providers to process personal data on our behalf. These providers act as data processors and are only permitted to process your personal data in accordance with our instructions and for the purposes described in this Privacy Policy.
Examples of such processors may include providers of secure payment processing services, accounting and billing systems, customer relationship management tools, access control and security system providers, IT support and hosting providers, and document storage or destruction companies.
We require all data processors to implement appropriate technical and organisational measures to protect your personal data and to ensure compliance with applicable data protection laws.
In certain circumstances, we may share your personal data with other third parties acting as independent controllers, such as professional advisers, insurers, law enforcement authorities, courts and regulatory bodies, where this is necessary to comply with legal obligations, protect our rights, or defend legal claims.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where personal data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection laws. These safeguards may include the use of standard contractual clauses or reliance on an adequacy decision issued by relevant authorities.
Security of Your Personal Data
We take the security of your personal data seriously and implement technical and organisational measures designed to prevent unauthorised access, loss, misuse, alteration or disclosure. These measures include physical security at our premises, access controls to our systems, staff training on data protection responsibilities, and regular review of our security arrangements.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Plumstead customers and prospective customers in the Plumstead area, subject to certain conditions and legal exemptions.
Right of access: You have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data, together with information about how we process it.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may be limited where we have a legal obligation or overriding legitimate interest to retain certain data.
Right to restrict processing: You have the right in certain situations to ask us to restrict the processing of your personal data, for example where you contest its accuracy or object to our use of it.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests or where processing is required for legal claims.
Right to data portability: Where our processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transmitted to another controller, where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed in a way that does not comply with data protection laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any updated version will apply to all Storage Plumstead customers and prospective customers in the Plumstead area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
