Storage Lower Morden Privacy Policy
This Privacy Policy explains how Storage Lower Morden collects, uses and protects your personal data. It applies to all individuals using our storage services and related facilities in the Storage Lower Morden service area, including current, former and prospective customers, as well as individuals acting on behalf of business customers.
Storage Lower Morden is committed to handling your personal data lawfully, fairly and transparently, in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Who We Are And Scope Of This Policy
This Privacy Policy covers personal data processed by Storage Lower Morden in connection with the operation of our storage units, customer accounts, and associated services such as reservations, contract management, billing and customer support. By using our services, visiting our premises, or communicating with us, you acknowledge that your personal data will be processed as described in this Privacy Policy.
Types Of Personal Data We Collect
The personal data we collect will depend on your relationship with us and how you interact with our services. We may collect and process the following categories of personal data:
Identification and contact details, such as name, title, postal address, billing address, and other contact details you choose to provide when you enquire about or use our services.
Account and contract information, such as customer reference numbers, contract start and end dates, storage unit numbers, access permissions, correspondence relating to your account, and details of any authorised persons acting on your behalf.
Payment and transaction information, such as records of payments made to us, methods of payment used and associated billing history. We do not store full payment card details; where payments are processed electronically, these are handled by our payment service processors.
Usage and access information, such as dates and times of visits to our premises, logs relating to access control systems, and records of services you have requested or used.
Security and CCTV data, including video images captured on our premises in areas covered by surveillance cameras, and incident reports where relevant to the safety and security of our customers, staff and property.
Communications and support, including copies of correspondence you send to us, customer service enquiries and complaints, and any information you provide during those interactions.
Lawful Basis For Processing Your Data
We rely on one or more of the following lawful bases when processing your personal data:
Contract. We process personal data where it is necessary to enter into, perform or administer a contract with you, for example to manage your storage agreement, take payment, and provide access to your storage unit.
Legal obligation. We may process personal data where this is required to comply with legal obligations, such as tax and accounting requirements, fraud prevention duties or responding to lawful requests from public authorities.
Legitimate interests. We may process personal data where necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, preventing and detecting crime, managing our business operations, improving our services and handling customer queries.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional communications or where required by law. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide storage services, including handling enquiries, setting up and managing customer accounts, issuing and administering contracts, providing access to units and processing payments.
To manage customer relationships, including responding to questions, handling complaints, notifying you about changes to services or terms, and keeping records of your communications with us.
To ensure safety and security, including operating CCTV and access control systems, investigating incidents, preventing unauthorised access, protecting our property and that of our customers, and supporting law enforcement where necessary.
To manage our business operations, including internal record keeping, financial management, auditing, training, reporting and service improvement.
To comply with legal and regulatory obligations, including maintaining appropriate records, assisting with investigations, preventing fraud, and complying with tax and accounting requirements.
Data Sharing And Processing By Third Parties
We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy and in accordance with data protection law. These third parties act as data processors or, in some cases, as separate data controllers.
Data processors. We may engage carefully selected service providers to process personal data on our behalf and under our instructions. These may include payment processing providers, IT and cloud hosting providers, security and CCTV system providers, document storage providers and professional advisors. We ensure that such processors are bound by contractual obligations to protect personal data and process it only for specified purposes.
Other recipients. Where necessary, we may share personal data with legal and professional advisors, insurers, law enforcement agencies, courts and regulatory authorities, to protect our rights or where required by law. We may also share limited personal data with authorised persons you nominate, for example where you authorise another individual to access your storage unit or make decisions on your behalf.
We do not sell your personal data to third parties.
International Transfers
If we transfer personal data outside the United Kingdom to countries that do not have the same level of data protection, we will ensure that appropriate safeguards are in place. These safeguards may include the use of standard contractual clauses or other mechanisms approved by data protection authorities, and additional technical and organisational measures where appropriate.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, and to meet our legal, accounting or reporting obligations.
In general, we retain customer account and contract information for a period after the end of the contractual relationship to address any queries, disputes or legal requirements. Payment records and invoices are retained in line with applicable tax and financial regulations. CCTV images are retained for a shorter period, unless required for the investigation of an incident or for legal proceedings.
When personal data is no longer required, we will securely delete or anonymise it.
Your Data Protection Rights
Under data protection laws, you have various rights in relation to your personal data, subject to certain conditions and exceptions. These include:
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification. You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may ask us to restrict the processing of your personal data in certain situations, such as while we are verifying the accuracy of the data or considering an objection you have raised.
Right to object. You have the right to object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or unless the processing is for the establishment, exercise or defence of legal claims.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
If you wish to exercise any of these rights, we may need to verify your identity before responding, in order to protect your privacy and security.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures may include access controls, physical security measures on our premises, secure data storage and regular review of our security procedures. While we take reasonable steps to safeguard your data, no system can be completely secure and we cannot guarantee absolute security.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any updates will apply from the date they are published. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
Your continued use of Storage Lower Morden services after any changes to this Privacy Policy will be taken as acceptance of the updated terms, to the extent permitted by law.
