Storage Battersea Customer Privacy Policy
This Privacy Policy explains how Storage Battersea collects, uses and protects personal data relating to customers and prospective customers within our service area. It also describes the rights you have under the UK General Data Protection Regulation and related data protection laws.
By using Storage Battersea services, making an enquiry or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Who This Privacy Policy Applies To
This Privacy Policy applies to all Storage Battersea customers and prospective customers located in our service area who use, or consider using, our storage units, related services or website. It also applies to individuals contacting us on behalf of a business, and to visitors to our premises where we operate security and access control systems.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us:
Identification and contact details: name, postal address, billing address, contact address, nationality, and similar information required to identify or contact you.
Account and contract information: customer account number, unit number, contract start and end dates, services selected, payment terms and correspondence about your contract.
Payment and transaction data: payment method details, recurring payment information, payment history, invoices, credits, refunds and charges related to your use of our services. We do not store full card details when these are processed by a secure payment provider acting as our processor.
Communication data: records of enquiries, complaints and feedback, and other communications with us by phone, post or electronic means.
Security and access data: CCTV footage captured on our premises, access logs to storage units and buildings, information on key fob or code usage, incident reports and any related security documentation.
Website and technical data: information such as IP address, device identifiers, browser type and settings, pages visited, time and date of visits, and other technical information collected through cookies or similar technologies where permitted by law.
Marketing preferences: your choices in relation to receiving marketing communications from us and your preferred channels for such communications.
How We Collect Your Personal Data
We collect personal data in several ways:
Directly from you when you contact us, request a quote, sign a contract, make a payment, visit our site, complete forms or communicate with us.
Automatically when you access our website or digital services, through the use of cookies and similar technologies, subject to your consent where required.
From third parties, such as payment service providers, credit reference agencies, fraud prevention agencies and business partners, where this is necessary for our contractual relationship or to protect our legitimate interests.
Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis to process your personal data. Depending on the context, Storage Battersea relies on the following lawful bases:
Contract: We process personal data where it is necessary to enter into, perform or manage a contract with you, including setting up your account, providing storage services, taking payments, managing renewals and handling customer service matters.
Legal obligation: We process certain data to comply with legal and regulatory obligations, including tax and accounting rules, health and safety requirements, anti money laundering and fraud prevention obligations, and requests from law enforcement or regulatory authorities where we are legally required to respond.
Legitimate interests: We process data where it is necessary for our legitimate business interests and where these interests are not overridden by your rights and freedoms. These interests include securing our premises and property, preventing non payment or misuse of units, improving our services, understanding how our website is used, managing our business operations and establishing, exercising or defending legal claims.
Consent: In some cases we rely on your consent, for example for certain types of marketing communications or for the use of non essential cookies on our website. When we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide, administer and manage your storage services and related products.
To set up and maintain your customer account, including identity verification where appropriate.
To process payments, handle billing queries and manage debt collection where necessary.
To respond to your enquiries, requests and complaints and to provide customer support.
To operate security measures on our sites, including access control and CCTV systems, for the safety of customers, staff and property.
To manage our business operations, including reporting, auditing, quality control and staff training.
To send you service communications related to your contract, such as policy updates, safety notices or important information about your unit or account.
To send you marketing information about our services where permitted by law and in line with your marketing preferences.
To comply with legal and regulatory obligations and to cooperate with law enforcement when required.
To protect our rights, property and safety, and that of our customers, staff and the public, including in relation to fraud prevention and dispute resolution.
Data Sharing and Processors
We may share your personal data with trusted third parties acting as data processors on our behalf. These processors are only permitted to use your data in accordance with our instructions and must implement appropriate security measures. Examples of such processors include:
IT and cloud service providers who host or support our systems and data storage.
Payment service providers who process card or direct debit payments.
Professional advisers such as accountants, auditors, insurers and legal advisers.
Marketing and customer communication service providers who assist us with permitted communications and surveys.
Security and maintenance contractors who support our premises and equipment.
In addition, we may share personal data where required by law or where necessary to protect our legitimate interests, for example with law enforcement agencies, courts, regulators, or debt collection agencies. Where personal data is transferred outside the United Kingdom or European Economic Area, we will take steps to ensure appropriate safeguards are in place, as required by data protection law.
Data Retention
Storage Battersea retains personal data only for as long as is necessary for the purpose for which it was collected, including to meet any legal, accounting or reporting requirements.
In general, we will retain:
Customer account and contract records for a period after the end of the contract, to deal with queries, disputes and legal obligations.
Financial and transaction records for the periods required by tax and accounting laws.
CCTV recordings and access control logs for a limited time to ensure site security and investigate incidents, unless specific footage is required for an ongoing investigation or legal claim.
Marketing data for as long as you remain subscribed to our communications or until you exercise your right to object or withdraw consent.
When data is no longer required, it will be securely deleted, anonymised or otherwise removed from our systems in accordance with our data retention policies.
Data Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption where appropriate, secure storage arrangements, staff training, and regular review of our security procedures. While we strive to protect your personal data, no method of transmission or storage is completely secure, and you should take your own precautions, particularly when sending information to us electronically.
Your Data Protection Rights
Under UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions in law. These rights include:
Right of access: you can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how it is processed.
Right to rectification: you can request correction of inaccurate or incomplete personal data that we hold about you.
Right to erasure: in certain circumstances you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis.
Right to restriction of processing: you can request that we restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: in some cases you can request that we provide your personal data in a structured, commonly used and machine readable format and that it is transmitted to another controller where technically feasible.
Right to object: you can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling, and we will stop processing unless we have compelling legitimate grounds. You always have the right to object to direct marketing.
Rights relating to automated decision making: if we use automated decision making that produces legal or similarly significant effects, you have rights to obtain human intervention, to express your point of view and to contest the decision.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is the Information Commissioner's Office. We encourage you to contact us first so that we can address your concerns.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. When we make changes, we will update the date of the latest version and make the revised policy available. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
