Self Storage St John's Wood Privacy Policy
This Privacy Policy explains how Self Storage St John's Wood collects, uses, stores, and protects personal data relating to customers and prospective customers in the St John's Wood area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all customers, prospective customers, and users of Self Storage St John's Wood services within the St John's Wood area, whether you contact us online, by post, or in person at our storage facility.
Data Controller
Self Storage St John's Wood is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in compliance with applicable data protection laws.
Categories of Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and the services you use. The main categories of data we may collect include:
Identification and contact details: name, address, previous address if required for verification, date of birth, and contact details such as postal address and communication preferences.
Account and contract information: storage unit number, contract start and end dates, payment history, transaction records, and information about the services you have requested or used.
Payment and billing information: billing address and limited payment information needed to process your payments. Where you make card payments, card details are processed by our payment service providers and are not stored in full by us.
Security and access information: copies of identity documents where required for verification, vehicle registration number if used for facility access, access logs, keypad or fob usage records, and closed-circuit television recordings on and around our premises.
Communication data: records of communications with you, including emails, letters, and notes of calls or enquiries, as well as information you provide when making an enquiry, request, or complaint.
Marketing and preference data: your preferences in receiving marketing information from us and records of your consent where applicable.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us, request a quote, make a booking, sign a storage agreement, make a payment, or communicate with us in any other way.
We may also collect data automatically through the operation of our premises, for example via access control systems and closed-circuit television cameras used for security and safety purposes.
In some circumstances, we may receive personal data from third parties, such as payment service providers, credit reference agencies if we carry out identity or eligibility checks, or from individuals who provide your details as an emergency contact or authorised user of a storage unit.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so. Depending on the processing activity, this may include:
Contractual necessity: to enter into and perform our contract with you, including setting up your account, providing storage services, administering payments, managing bookings and renewals, and communicating with you about your contract.
Legal obligation: to comply with legal and regulatory requirements, such as tax, accounting, fraud prevention, law enforcement requests, and obligations relating to safety and security of our premises.
Legitimate interests: to pursue our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This can include ensuring the security of our premises and property, monitoring access to units, managing and improving our services, handling enquiries and complaints, and sending limited service-related updates.
Consent: where required by law for specific activities, such as certain forms of electronic marketing, we will rely on your consent. You can withdraw your consent at any time by contacting us or by using any opt-out mechanisms provided in our communications.
Purposes for Which We Use Personal Data
We use your personal data for the following purposes:
To provide storage services, manage bookings, and administer your account and contract.
To verify your identity, assess eligibility, and help prevent fraud or misuse of our facilities.
To process payments, manage fees and charges, and recover any monies owed.
To ensure the safety and security of you, our staff, other customers, and property, including by operating access control systems and closed-circuit television at and around our premises.
To communicate with you about your contract, including notices, renewals, changes to terms, and important information about the operation of our storage facilities.
To respond to enquiries, requests, and complaints, and to maintain service quality.
To send you marketing information about our services where we are permitted to do so and where you have not objected or have given consent where required.
To comply with legal obligations and cooperate with law enforcement or regulatory authorities where necessary.
Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.
In general, we will keep your customer and contract data for the duration of your relationship with us and for a reasonable period afterwards to deal with any queries, disputes, or legal obligations. Financial and transaction records are usually kept for the period required under tax and accounting laws.
Closed-circuit television recordings and access logs are kept for a shorter period, typically only as long as necessary for security and investigation purposes, unless a longer retention period is justified, for example in connection with an incident or legal claim.
When personal data is no longer required, we will delete it or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with trusted third-party service providers who act as data processors on our behalf. These processors may assist us with services such as payment processing, customer relationship management systems, data storage and hosting, security and surveillance systems, and professional advisors such as accountants or legal advisers.
We require all processors to comply with data protection laws, to use your data only on our instructions, and to take appropriate security measures to protect your personal data.
Where necessary, we may also share personal data with third parties who act as independent data controllers, such as law enforcement agencies, regulatory authorities, or insurers. This will only occur where we have a lawful basis, for example to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.
We do not sell your personal data to third parties.
International Data Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as use of standard contractual clauses or transfers to countries that have been recognised as providing an adequate level of data protection.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include restricted access controls, encryption or pseudonymisation where appropriate, secure storage, regular review of security practices, and staff training on data protection responsibilities.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Self Storage St John's Wood customers in the St John's Wood area, subject to certain legal limitations and exemptions.
Right of access: you have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification: you have the right to request that any inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: in certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent.
Right to restriction of processing: you may request that we restrict the processing of your personal data in certain cases, such as where you contest the accuracy of the data or object to our processing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to object: you have the right to object to processing that is based on our legitimate interests, including profiling on that basis. You also have the right to object at any time to the use of your personal data for direct marketing.
Rights related to consent: where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it is withdrawn.
To exercise any of these rights, please contact us using the contact details provided in your contract or customer documentation. We may need to verify your identity before responding to your request.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority, for example the Information Commissioner's Office in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will be effective from the date of publication. You should review this Privacy Policy periodically to stay informed about how we process your personal data.
