Storage Tooting Bec Privacy Policy
This Privacy Policy explains how Storage Tooting Bec collects, uses, stores, and protects personal data relating to its customers and prospective customers in the Tooting Bec area. It also describes your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all customers, prospective customers, and users of Storage Tooting Bec services in the Tooting Bec area, whether you contact us online, by phone, or in person at our storage facility.
Who We Are and Scope of This Policy
Storage Tooting Bec is a storage services provider offering storage units and related services to customers in the Tooting Bec area. In relation to the personal data we collect and process, Storage Tooting Bec acts as the data controller. This means we decide how and why your personal data is used and are responsible for complying with data protection law in that regard.
This Privacy Policy covers personal data we collect in connection with enquiries, bookings, contracts, payments, access to storage units, and related customer services provided in the Tooting Bec area.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification information such as your full name, date of birth, and identification document details where required for verification or legal purposes.
Contact details such as your home or billing address, storage unit address if different, and any other contact information you choose to provide.
Account and booking details such as storage unit number, contract start and end dates, access codes, and your communication preferences.
Payment and billing information such as payment card details processed via secure payment providers, payment history, invoices, and records of amounts due or paid.
Communication records such as emails, written correspondence, notes of telephone conversations, and any feedback or complaints you submit to us.
Security and access information such as CCTV footage from our facility, access logs, and other security records necessary to protect our premises, customers, and staff.
Technical information such as basic device or usage information when you visit our website, depending on how you interact with our online services and your browser settings.
How and Why We Use Your Personal Data
We use your personal data only where we have a lawful basis to do so. The main purposes for which we use your data are:
To provide storage services. We process your identification, contact, account, and payment details to set up, manage, and administer your storage contract, allocate units, manage access, and handle payments. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To manage customer relationships. We use your contact and communication records to respond to enquiries, provide customer support, manage renewals or changes to your contract, and deal with any issues or complaints. The lawful basis is performance of a contract and our legitimate interests in operating and improving our business.
To ensure security and prevent crime. We may use CCTV footage, access logs, and identification information to protect our facility, our customers property, and our staff, and to help detect and prevent fraud or other unlawful activity. The lawful basis is our legitimate interests in ensuring safety and security, and where necessary compliance with legal obligations.
To comply with legal obligations. We may process identification, contract, and transaction details to comply with tax, accounting, anti-money laundering, or other regulatory requirements. The lawful basis is compliance with our legal obligations.
To send service-related communications. We may send you important information about your contract, such as changes to terms, payment reminders, or notices about access to your unit. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about important service matters.
Marketing communications. Where permitted by law, and where you have not opted out, we may use your contact details to send you information about relevant services, offers, or updates relating to Storage Tooting Bec. The lawful basis is our legitimate interests in promoting our business, or your consent where required. You can opt out of marketing at any time.
Lawful Bases for Processing
Under data protection law, we must have a lawful basis for each type of processing. Depending on the circumstances, Storage Tooting Bec relies on the following lawful bases:
Performance of a contract where we process your data to provide storage services that you have requested, including handling bookings, payments, and access to units.
Compliance with legal obligations where we need to retain certain records or provide information to public authorities in order to meet our legal and regulatory duties.
Legitimate interests where we use your data in ways that are necessary for the operation of our business and that do not override your interests or fundamental rights, for example security, prevention of fraud, customer service improvements, and marketing to existing customers.
Consent where required by law for certain forms of marketing or where you choose to provide optional information beyond what is necessary for your contract. When we rely on consent, you have the right to withdraw it at any time.
Data Retention
We will keep your personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements.
Customer contract and billing records are typically retained for a period required by law for tax and accounting purposes, after which they are securely deleted or anonymised.
CCTV and access logs are kept for a limited period that allows us to investigate security incidents, normally for no longer than is reasonably necessary for security and safety purposes, unless a longer retention period is required in connection with an investigation or legal claim.
Marketing data is retained while you remain an active customer or prospective customer in contact with us, or until you object to or opt out of receiving marketing communications.
When our retention periods expire, we will securely delete or anonymise your personal data so that it can no longer be associated with you.
Data Sharing and Use of Processors
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only allowed to use your data in accordance with our instructions and are required to protect your data appropriately.
Types of processors we may use include payment processors for handling card payments and secure transactions, information technology and system support providers who help us operate our booking, billing, and communication systems, and professional advisers, such as accountants or legal advisers, who assist us in meeting our legal and regulatory obligations.
Where we use processors, we have contracts in place requiring them to keep your data secure, use it only for the agreed purposes, and delete or return it at the end of the service provision.
We may also need to share data with law enforcement agencies, regulatory authorities, or courts where required by law, or where necessary to establish, exercise, or defend legal claims involving Storage Tooting Bec.
We do not sell your personal data to third parties.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom, or where data is accessed from another country, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of standard contractual clauses or other measures approved under data protection law.
Your Data Protection Rights
Under data protection law, you have several rights in relation to your personal data held by Storage Tooting Bec. These include:
The right of access. You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you, together with certain information about how we use it.
The right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you can ask us to delete or remove your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
The right to restrict processing. You can ask us to suspend the processing of your personal data in certain situations, for example while we verify its accuracy or consider an objection you have raised.
The right to object. You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including for direct marketing. We will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds to continue.
The right to data portability. In some cases, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or that we transmit it to another controller, where this is technically feasible and the processing is based on your consent or on a contract.
Where we rely on consent to process your data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your rights, or if you have any questions or concerns about how Storage Tooting Bec handles your personal data, you can contact us using the contact details given on our website or in your contract documentation.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can attempt to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data processing practices, or applicable law. Any changes will be made available at our facility and on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
