Self Storage Pimlico Privacy Policy
This Privacy Policy explains how Self Storage Pimlico collects, uses, stores and protects personal data relating to customers and prospective customers in the Pimlico area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Self Storage Pimlico customers and anyone who makes an enquiry or otherwise interacts with our services in the area.
Who this privacy policy applies to
This Privacy Policy applies to individuals who use, have used, or enquire about our self storage services in the Pimlico area, including customers, prospective customers, guarantors, emergency contacts and individuals acting on behalf of business customers. If you provide us with personal data about another person, you are responsible for ensuring that they are aware of this Privacy Policy.
Personal data we collect
We may collect and process the following categories of personal data when you contact or use Self Storage Pimlico:
Identification and contact details such as full name, home and correspondence addresses, country of residence, date of birth, and identification document details such as passport or driving licence number where required for verification.
Contact details such as email address and communication preferences where you choose to provide them.
Contract and account information such as storage unit number, contract start and end dates, payment history, deposit information, access permissions, and records of correspondence relating to your contract.
Financial and billing information such as card or payment details processed through secure third-party payment processors, billing address and records of invoices and payments.
Security and access information such as vehicle registration details you provide, access codes or fobs, entry and exit logs and on-site CCTV images captured for security and safety purposes.
Communication data including enquiries, complaints, feedback, and records of correspondence via phone, online forms or in person at our facility.
Technical data where you interact with our online information such as device information, IP address and basic usage data to help us manage security and improve our services, where collected.
How we collect your personal data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, visit our facility, or communicate with us by phone or other channels.
We may also receive personal data indirectly from third parties, such as payment service providers, referencing or verification agencies, or business customers who authorise you to access a unit. In limited circumstances, we may receive information from law enforcement or regulatory bodies where this is permitted by law.
Lawful bases for processing your data
We only process your personal data where we have a lawful basis under UK data protection law. Depending on the specific use, we rely on the following lawful bases:
Contract. We process personal data to enter into and perform our storage agreements with you, including pre-contract enquiries, account set-up, access management, billing and payment, customer service and termination of the contract.
Legal obligation. We process personal data where we are required to comply with legal and regulatory obligations, such as tax and accounting rules, anti-money laundering requirements where applicable, health and safety obligations, and responding to lawful requests from authorities.
Legitimate interests. We process certain personal data where it is necessary for our legitimate interests, and those interests are not overridden by your rights. These interests include operating and managing our storage facilities, maintaining the safety and security of our premises and customers, preventing and detecting crime and fraud, managing and improving our services, handling queries and complaints, and pursuing, establishing or defending legal claims.
Consent. In some situations we may rely on your consent, for example for certain forms of marketing communications or optional services. Where we rely on consent, you can withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage self storage services, including customer registration, identity and eligibility checks, unit allocation, access control and day-to-day service administration.
To process payments, manage billing, handle deposits, issue invoices and statements and deal with any payment queries.
To maintain onsite security, including managing access systems, monitoring access logs and operating CCTV for the safety of customers, staff, visitors and property.
To communicate with you about your contract, including service updates, contract renewals, reminders, changes to terms, and responses to enquiries or complaints.
To maintain accurate internal records, perform audits, manage risk and ensure compliance with our legal and regulatory obligations.
To improve our services, including monitoring facility usage patterns, analysing customer feedback and enhancing our processes, security systems and customer experience.
Data retention
We retain personal data only for as long as it is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting obligations.
In general, we retain customer contract records, billing information and access records for the duration of your contract and for a period afterwards to comply with legal requirements and to establish, exercise or defend potential legal claims. The precise retention period may vary depending on the category of data and our obligations under law.
CCTV recordings are typically kept for a limited period necessary for security and incident investigation purposes, after which they are securely overwritten or deleted, unless a longer retention is required in connection with a specific incident or legal requirement.
Where we no longer need personal data, we will either anonymise it so that it can no longer be associated with an identifiable individual, or securely delete or destroy it.
Data processors and third parties
We use carefully selected third-party service providers to help us operate our business and deliver our services. These service providers act as data processors on our behalf and may process personal data for purposes such as payment processing, secure data hosting, IT support, access control systems, CCTV maintenance, customer management systems, accounting and professional advisory services.
We ensure that all data processors are bound by written contracts requiring them to process personal data only in accordance with our instructions, to maintain appropriate security measures and to comply with applicable data protection laws. They are not permitted to use your personal data for their own purposes.
We may also share personal data with third parties acting as independent controllers where required or permitted by law, such as law enforcement agencies, regulatory bodies, courts, insurers and professional advisers, or in relation to establishing, exercising or defending legal claims.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. These safeguards may include adequacy regulations recognising that the destination country provides an adequate level of protection, or data transfer mechanisms such as standard contractual clauses.
How we protect your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include physical security of our premises, controlled access to systems, role-based access rights, staff training on data protection responsibilities and procedures for responding to suspected data breaches.
Your data protection rights
Under UK data protection law, you have several rights in relation to your personal data. These rights are subject to certain conditions and exemptions. You have the right to:
Access your personal data and receive information about how it is processed.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no lawful reason for us to continue processing it, for example where it is no longer needed for the purposes for which it was collected.
Request restriction of processing in certain circumstances, such as where you contest the accuracy of the data or object to our processing and we are considering your request.
Object to processing that is based on our legitimate interests, including direct marketing, where you believe your rights and interests outweigh our reasons for processing.
Request the transfer of certain personal data to you or another organisation in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Withdraw consent where we rely on your consent as the lawful basis for processing. Withdrawal of consent will not affect processing that has already taken place.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory developments, or best practice. Any updated version will apply to all ongoing and new use of our services in the Pimlico area from the date it is made available. You should review this Privacy Policy periodically to stay informed about how we handle your personal data.
If you continue to use Self Storage Pimlico services after any changes take effect, this will indicate that you have read and understood the updated Privacy Policy.
