Storage Camberwell Privacy Policy
This Privacy Policy explains how Storage Camberwell collects, uses, stores and protects personal data relating to its customers in the Camberwell area, and sets out your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all customers, prospective customers and users of our storage services and related facilities within the Storage Camberwell service area.
Who This Policy Applies To
This Privacy Policy applies to all individual customers, business contacts and account holders who use, enquire about or are otherwise associated with Storage Camberwell services in the Camberwell area. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Types of Personal Data We Collect
We collect and process different categories of personal data, depending on how you interact with us. This may include:
Identification and contact data, such as full name, postal address, billing address, contact address, and any other contact details you choose to provide.
Account and contract data, such as customer number, contract details, storage unit number, rental period, payment status, and communication preferences.
Financial and payment data, such as payment card details processed via secure payment processors, bank details for transfers, invoices, transaction history and records of payments made to or from Storage Camberwell.
Usage and communication data, such as enquiries you submit, emails or letters you send to us, information you provide over the phone or in person, and records of your communication history with Storage Camberwell.
Security and access data, such as access codes, log records for site entry systems, CCTV footage in and around Storage Camberwell premises, and incident reports relating to safety or security.
Technical data, such as IP addresses, device identifiers, basic analytics about how you use any online services we provide, and related diagnostic information. Where we use cookies or similar technologies, we do so in accordance with applicable law and for necessary or clearly communicated purposes.
How We Collect Personal Data
We collect personal data in several ways:
Directly from you when you contact us, request a quote, sign a storage agreement, visit our premises, make a payment, or communicate with us by any means.
From your use of our services and facilities, including access control systems, CCTV, and site visit logs.
From third parties, such as payment providers, business partners, and credit reference agencies, where this is lawful and necessary for providing our services or meeting legal obligations.
Lawful Basis for Processing
We only process personal data where we have a lawful basis under the UK GDPR. Depending on the circumstances, we may rely on the following bases:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, including to set up and manage your storage agreement, process payments, respond to your requests, and provide customer support.
Legal obligation: We process personal data where we are required to do so by law, such as for tax, accounting, record-keeping, and regulatory purposes, or to respond to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms. This includes ensuring the security of our premises, preventing fraud, managing customer relationships, improving our services, and defending legal claims.
Consent: In certain limited situations, we may rely on your consent, for example for particular forms of marketing or where local law requires consent for specific tracking technologies. When we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing that took place before withdrawal.
Purposes for Which We Use Personal Data
We use personal data for the following purposes:
To provide and manage storage services, including processing bookings, setting up accounts, allocating units, administering access and managing your contract.
To take payment, issue invoices, handle billing queries and manage any debt recovery processes.
To maintain safety and security at Storage Camberwell premises, including monitoring access and using CCTV to prevent and detect crime, protect people and property, and support incident investigations.
To respond to your enquiries, complaints or feedback and to provide customer service and support.
To manage our business operations, including record-keeping, accounting, auditing, and governance activities.
To send service-related communications, such as notices about your unit, changes to terms, payment reminders, or important safety information.
To comply with legal and regulatory requirements and to cooperate with law enforcement, regulators or courts where we have a legal duty to do so.
Data Retention Periods
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the context in which it was collected.
Customer account and contract records are generally retained for a period after your contract ends, to deal with any queries, disputes or legal claims and to meet statutory obligations. Payment and invoicing records are typically retained for the period required by tax and accounting laws.
CCTV recordings are usually retained for a limited period appropriate to security needs, unless an incident requires us to keep specific footage for longer in connection with an investigation or legal claim.
When personal data is no longer needed, we will securely delete, anonymise or otherwise dispose of it in line with our data retention and information security policies.
Data Processors and Third Parties
We may share personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged under written contracts and are required to keep your data secure and to use it only in accordance with our instructions and applicable data protection laws.
Categories of processors and third parties may include:
Payment service providers that process card or electronic payments.
IT and cloud service providers that host our systems, data and communications.
Security and access control providers supporting CCTV, alarms and entry systems.
Professional advisers such as accountants, auditors, or legal counsel where this is necessary for our legitimate interests and to meet legal obligations.
Debt recovery agencies and credit reference agencies where needed to manage overdue accounts or assess credit risk in a lawful way.
We may also need to share personal data with public authorities, law enforcement agencies or regulators where we are under a legal or regulatory obligation to do so, or where this is necessary to protect our rights, property, customers or the safety of others.
Where data is transferred outside the United Kingdom or European Economic Area, we will ensure appropriate safeguards are in place in accordance with data protection law, such as using approved standard contractual clauses or ensuring that the destination country has adequate data protection standards.
Your Data Protection Rights
Under data protection law, you have a range of rights in relation to your personal data, subject to certain conditions and exemptions. These may include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification: You can request that inaccurate or incomplete personal data about you is corrected or updated.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction: You can request that we restrict the processing of your personal data in certain circumstances, such as while we verify accuracy or consider an objection you have raised.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller where technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests, including for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Rights related to consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
How To Exercise Your Rights
If you wish to exercise any of your data protection rights, or if you have questions about how Storage Camberwell handles your personal data, you can contact us using the contact details provided on our website or in your customer documentation. To help us respond efficiently, please provide sufficient information to identify yourself and the data concerned. We may need to verify your identity before acting on your request, to protect your privacy and the security of your data.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These measures may include access controls, physical security at our premises, secure storage, encryption where appropriate, staff training and regular review of our security practices. While we take reasonable steps to protect your personal data, no system can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, in applicable laws or in how we process personal data. Any updates will be made available through our usual customer communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how Storage Camberwell protects your privacy.
