Storage Deptford Privacy Policy
This Privacy Policy explains how Storage Deptford collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Deptford service area. It is intended to be compliant with the United Kingdom General Data Protection Regulation and relevant data protection laws. This Privacy Policy applies to all Storage Deptford customers and anyone who makes an enquiry or interacts with us in connection with our storage services.
Who This Policy Applies To
This Privacy Policy applies to individuals who use or enquire about Storage Deptford services, including personal storage, business storage, and any related support or ancillary services. It covers all customers, authorised representatives, guarantors, and any individuals whose personal data we process in connection with providing storage services within the Storage Deptford area.
Types of Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with Storage Deptford and which services you use:
Identification data such as full name, title, date of birth, and a form of identification document details where required for verification and security purposes.
Contact data such as postal address, billing address, and other contact information you choose to provide that allows us to communicate with you about your storage agreement and related services.
Contract and account data such as unit number, contract start and end dates, storage plan details, payment status, invoices, communications relating to your account, and records of your interactions with our customer service team.
Payment and transaction data such as payment method type, billing information necessary for processing payments, and records of payments made and refunds issued.
Usage and operational data such as access logs to storage units or premises where access control systems are in place, records of visits, and security-related information necessary for the safe operation of the facility.
Technical data such as information generated by your use of our website, including device and browser information, approximate location derived from your device or internet protocol address, and general analytics data that help us understand how our website is used.
Marketing and communication preferences such as your choices about receiving marketing communications from us and your responses to surveys or feedback requests when you voluntarily provide this information.
How We Collect Personal Data
We collect personal data directly from you when you make an enquiry, request a quote, reserve or rent a storage unit, sign a storage agreement, make a payment, contact customer support, or update your details. We may also collect data when you visit our website or interact with our online tools.
In some cases, we may receive personal data from third parties, such as payment service providers, credit reference agencies where applicable, or other parties you have authorised to share your data with us. We may also receive information from business partners in connection with referrals or joint promotions.
Lawful Bases for Processing
Storage Deptford processes personal data only where a lawful basis exists under data protection law. Depending on the context, we rely on the following lawful bases:
Contract performance. We process personal data where it is necessary to enter into or perform a contract with you, including making reservations, managing your storage unit, issuing invoices, taking payments, and providing customer support.
Legal obligations. We process certain personal data to comply with our legal and regulatory obligations, including accounting, taxation, record-keeping, fraud prevention, security, and where authorities lawfully require information.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. These legitimate interests may include managing and improving our storage services, maintaining facility security, preventing non-payment and misuse, handling queries and complaints, and pursuing or defending legal claims.
Consent. In limited situations, we may rely on your consent, for example for certain types of direct marketing communications or optional cookies and analytics tools. Where we rely on consent, you can withdraw it at any time as described in this Privacy Policy.
How We Use Personal Data
We use the personal data we collect for the following purposes:
To provide storage services, including setting up and managing your account, administering access to your storage unit, collecting payments, and communicating with you about your contract and any changes to our services or terms.
To respond to enquiries and requests, including providing quotes, availability information, and guidance about choosing a suitable storage option.
To manage security and safety at our facilities, including verifying identity where appropriate, monitoring access, and investigating incidents or suspected misuse.
To manage our business operations, including internal administration, accounting, audits, quality control, staff training, and service improvement.
To send service communications, such as payment reminders, contract notices, important updates about facility access or maintenance, and other information necessary for the performance of the contract.
To conduct permitted marketing, surveys, and service feedback activities where we rely on legitimate interests or your consent, as applicable, and always respecting your right to object or opt out.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties that act as processors on our behalf or as separate controllers where required by law or for the performance of our contract with you. These may include:
Payment processors and financial service providers that process card or other payments and assist with billing and refunds.
Information technology and hosting providers that supply systems, software, and data storage services needed to run our operations and website.
Access control, security, and maintenance service providers that help manage facility security systems, access logs, and building maintenance.
Professional advisers such as accountants, auditors, or legal advisers where needed for our legitimate business interests and to comply with regulatory obligations.
Public authorities, law enforcement, or regulatory bodies where we are legally required or permitted to share personal data, for example in connection with investigations, court orders, or legal proceedings.
Where we use processors, they act only on our documented instructions and are bound by appropriate contractual obligations to protect your personal data.
International Transfers
Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include the use of standard contractual clauses and other lawful mechanisms designed to protect your data and your rights.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In determining the appropriate retention period, we consider the nature and sensitivity of the data, the risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any applicable legal obligations.
As a general guideline, we retain contract and billing related records for several years after the end of your storage agreement to comply with legal obligations and to address potential queries or disputes. Data linked solely to enquiries or quotes where no contract is formed is retained for a shorter period necessary for handling your enquiry and any follow-up. Access logs and security-related records are retained for a period that allows us to maintain security and investigate incidents, after which they are securely deleted or anonymised.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data processed by Storage Deptford. These rights may be subject to conditions and exemptions. They include:
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with certain additional information.
Right to rectification. You have the right to request that inaccurate or incomplete personal data about you be corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing. You may request that we restrict our processing of your personal data in certain situations, such as while we verify accuracy or consider an objection.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling based on those interests. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
Right to data portability. Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.
Security of Your Personal Data
Storage Deptford takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include access controls, secure storage practices, staff training, and regular review of our security arrangements. While we take reasonable steps to protect your data, no system can be completely secure and you should also take care when sharing personal data with us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or the way we process personal data. Any updates will be effective when the revised Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
