Self Storage Fulham Privacy Policy
This Privacy Policy explains how Self Storage Fulham collects, uses, stores, and protects personal data relating to customers and prospective customers. It applies to all Self Storage Fulham customers and users of our services in the Fulham area, including individuals, sole traders, partnerships, and corporate customers whose representatives interact with us.
Who We Are
Self Storage Fulham is a provider of storage units and related services to customers in the Fulham area. We act as the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
Scope of This Privacy Policy
This Privacy Policy applies to all personal data that we collect in connection with enquiries about our services, the conclusion and performance of storage agreements, and the ongoing management of customer accounts. It covers personal data collected in person at our facility, over the phone, by post, and through any online forms or digital tools that we may provide for the management of your storage services.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you use our services or communicate with us:
Identification data, such as your full name, date of birth, and identification document details where required for account verification or regulatory purposes.
Contact data, such as your home or business address, billing address, and general correspondence address, along with any alternative contact person you nominate.
Communication data, such as records of enquiries, complaints, feedback, or other communications you send to us or we send to you in relation to your account or our services.
Contract and account data, such as details of your storage unit, agreements, payment status, rental history, and any specific instructions you give us regarding access or authorised users.
Payment data, such as details about payments you make to us and methods of payment. We do not store full payment card numbers ourselves when third party processors are used, but we may hold partial details sufficient to identify a transaction.
Security data, such as access logs to our facility, vehicle registration numbers where provided for access control purposes, and, where implemented, closed-circuit television footage used to protect our premises and customers property.
How We Collect Your Data
We normally collect personal data directly from you when you make an enquiry, request a quotation, visit our facility, sign a storage agreement, or update your details. We may also receive information from third parties acting on your behalf, such as authorised representatives or business partners, and from payment service providers in relation to completed or failed transactions.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under applicable data protection law. Depending on the specific processing activity, the lawful basis may be one or more of the following:
Contract: Processing is necessary to enter into and perform a storage agreement with you, including setting up your account, managing your unit, taking payments, and communicating with you about your services.
Legal obligation: Processing is necessary to comply with legal and regulatory obligations, such as accounting, tax, law enforcement requests, and maintaining certain records for a fixed period.
Legitimate interests: Processing is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. This may include securing our facility, preventing non-payment or fraud, improving our services, and managing our relationship with you.
Consent: In limited cases, we may rely on your consent, for example for certain optional communications that are not related to your existing contract. Where we rely on consent, you are free to withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide and manage storage services, including creating and administering your account, managing access to your storage unit, and handling renewals or changes to your agreement.
To process payments, manage invoices, and recover amounts owed to us, including taking steps to prevent and detect fraud or misuse of our facility.
To communicate with you about your enquiries, bookings, contracts, operational notices, changes to our terms, and other service-related matters.
To manage security of our premises, for example by controlling access to the site, monitoring for unauthorised activity, and preserving evidence in case of disputes or security incidents.
To meet our legal and regulatory obligations, including accounting, tax reporting, and responding to lawful requests from public authorities.
To perform internal analysis and service improvement, such as reviewing service usage patterns and feedback, while taking steps to limit or anonymise data where feasible.
Data Retention
We keep your personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy and to satisfy any legal, accounting, or reporting requirements.
Customer account and contract data are normally retained for a period after your contract ends, to deal with any queries, disputes, or legal claims. Payment and invoicing records are kept in accordance with applicable financial record-keeping requirements. Security-related records, including access logs and any CCTV footage, are typically retained for a shorter period, unless required for the investigation of a specific incident or legal claim.
When data is no longer needed for any purpose and there is no legal requirement to retain it, we will delete it or anonymise it so that it can no longer be linked to you.
Data Processors and Third Parties
We may share your personal data with carefully selected third party service providers who act as data processors on our behalf. These may include payment processing providers, IT and cloud service providers, customer management and billing systems, security system providers, and professional advisers such as accountants or auditors.
Where we use data processors, they are only permitted to process your personal data in accordance with our documented instructions, for the purposes specified by us, and with appropriate technical and organisational measures in place to protect your data. They are not allowed to use your personal data for their own purposes.
We may also share data with third parties where required by law, for example with law enforcement authorities or regulators, or where necessary to establish, exercise, or defend legal claims.
We do not sell your personal data to third parties.
International Data Transfers
Where we use service providers that are located outside the United Kingdom or that store data in other jurisdictions, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include relying on adequacy regulations, using standard contractual clauses approved by the relevant authorities, or implementing other appropriate safeguards required by data protection law.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include access controls, secure storage, staff training, and regular review of our security practices. Although no system can be guaranteed to be fully secure, we continuously work to reduce risks and respond promptly to any suspected issues.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include the following:
Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, together with supplementary information about our processing.
Right to rectification: You have the right to request that inaccurate personal data be corrected and incomplete data be completed.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to our use of it.
Right to data portability: In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to have that data transmitted to another controller where technically feasible.
Right to object: You have the right to object to processing that is based on our legitimate interests, including any direct marketing, on grounds relating to your particular situation. We will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your rights, or you have questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our website or at our facility. We may need to verify your identity before responding to certain requests.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can seek to resolve any issues directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any changes will be made available through our usual communication channels. We recommend that you review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
