Storage Walthamstow Village Customer Privacy Policy
This Privacy Policy explains how Storage Walthamstow Village collects, uses, shares and protects the personal data of its customers and prospective customers in the Walthamstow Village area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or communicating with us as a customer or prospective customer, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Walthamstow Village customers and prospective customers in the local area who use or enquire about our storage units, related services, or facilities. It covers personal data collected in person at our premises, over the telephone, by post, and through any online contact forms or digital communication channels we may operate.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, title, date of birth, and proof of identity details where required for security and verification purposes.
Contact data such as correspondence address, billing address, and details required to reach you, for example for account management and service communications.
Account and contract data such as storage unit number, contract start and end dates, rental terms, payment history, deposit information, and records of services you have taken.
Payment data such as limited payment details necessary to process your payments and maintain financial records. We do not store full card details where this is handled by secure payment processors.
Usage and operational data such as access logs for entry to the storage facility, records of visits, and any incident reports relating to safety or security on our premises.
Communication data such as records of correspondence, service enquiries, complaints, feedback, and any information you choose to provide when communicating with us.
Technical data where relevant to our services, such as basic information collected by security systems, including CCTV footage in and around our premises for safety and crime prevention.
How We Collect Personal Data
We collect personal data directly from you when you request a quotation, reserve or rent a storage unit, sign a contract, make a payment, contact us with an enquiry, or visit our premises. We may also receive personal data from third parties acting on your behalf, such as someone authorised to manage the storage unit for you, and from publicly available sources or official documents used to verify your identity and address where required.
Lawful Bases for Processing Your Data
We process your personal data only where we have a lawful basis to do so under the UK General Data Protection Regulation. Depending on the context, we may rely on one or more of the following lawful bases:
Contract: We process your data where it is necessary to enter into and perform a storage contract with you, including administering bookings, managing your account, processing payments, and providing customer support.
Legal obligation: We process certain data to comply with legal and regulatory requirements, such as financial record-keeping, tax obligations, and obligations relating to safety, security, and crime prevention.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. These interests include managing and improving our storage services, ensuring site security, preventing fraud, handling customer queries, and pursuing or defending legal claims.
Consent: In limited circumstances, we may rely on your consent, for example for certain optional communications or activities that are not strictly necessary for your contract. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data to provide and manage storage services, including setting up and administering your account, processing reservations and payments, operating access control systems, and responding to your enquires. We also use your data to maintain the security and integrity of our premises and services, including through the use of CCTV and access logs, to detect and investigate incidents and to protect our customers and staff.
We may use personal data to communicate with you about your contract, for example to send invoices, payment reminders, important service updates, or notices relating to your unit. Where permitted, we may also send you information about related services or offers that may be relevant to you, in line with applicable marketing rules and any preferences you have expressed.
We further use data for internal business purposes, including auditing, quality control, financial management, and to improve the way our storage services operate. Where necessary, we may use data to establish, exercise, or defend legal rights and to cooperate with law enforcement or regulatory authorities in accordance with the law.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties that act as data processors on our behalf to help us deliver and manage our services. These may include providers of payment processing, secure IT and cloud storage services, facility management systems, customer relationship management tools, and professional advisers such as accountants or legal advisers.
Where we engage such processors, we ensure that they only process your personal data on our documented instructions, that they are subject to confidentiality obligations, and that appropriate technical and organisational measures are in place to protect your data in accordance with data protection law.
We may also share your personal data with third parties where required by law, such as law enforcement agencies, courts, or regulatory bodies, or in connection with potential or actual legal proceedings. In the event of a business reorganisation, merger, or transfer of assets, personal data may be shared with relevant parties where necessary and lawful.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements. In deciding how long to retain information we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and applicable legal obligations.
In general, we retain core customer and contract records for a period required by tax and financial regulations following the end of your contract. CCTV footage and access logs are kept for shorter periods, unless they are required to investigate an incident or support legal proceedings, in which case they may be retained for as long as necessary for that purpose. When personal data is no longer needed, we securely delete or anonymise it.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include the following:
Right of access: You can request confirmation that we process your personal data and obtain a copy of that data, together with certain additional information about how it is used.
Right to rectification: You can request the correction of inaccurate or incomplete personal data we hold about you.
Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies.
Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to data portability: In certain cases, you can request that we provide you with personal data you have supplied to us in a structured, commonly used format and, where technically feasible, transmit it to another controller.
Right to object: You can object to the processing of your personal data where we rely on legitimate interests, including any direct marketing activities. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent for specific processing, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, and restricting personal data to those employees, contractors, and processors who have a business need to know and are subject to confidentiality obligations.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection guidance. Any significant changes will be communicated where appropriate, and the updated version will apply from the date it is issued. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
