Storage Fulham Privacy Policy
This Privacy Policy explains how Storage Fulham collects, uses, stores, and protects personal data relating to our customers and prospective customers located in the Fulham area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Fulham customers and users of our services in the Fulham area, whether you contact us online, by post, or in person at our premises.
Who We Are and Scope of This Policy
Storage Fulham is a self-storage provider offering storage units and related services to individuals and businesses in the Fulham area. For the purposes of data protection law, Storage Fulham is the data controller of the personal data described in this policy. This means that we decide why and how your personal data is processed and we are responsible for ensuring that it is handled lawfully.
This Privacy Policy covers all personal data processed in connection with enquiries, reservations, contracts, and the ongoing use of our storage facilities and related services in the Fulham area.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identity and contact information, including your name, postal address, billing address, and other contact details you provide.
Account and contract information, such as your customer reference number, storage unit number, start and end dates of your contract, payment status, and correspondence relating to your contract.
Payment and billing information, including payment method details and transaction records. Payment card information is processed securely by our payment service providers and is not stored by us beyond what is strictly necessary.
Communication data, including records of communications you send to us or we send to you, such as emails, letters, and notes of phone calls in relation to your account or enquiries.
Security and access data, such as access control logs relating to entry and exit from our premises, and any incident reports involving you or your storage unit.
Technical information, for example basic device and usage information when you visit our website, such as IP address, browser type, and pages visited, to the extent necessary for website operation, security, and analytics.
How We Collect Your Personal Data
We collect personal data directly from you when you make an enquiry, obtain a quote, reserve a unit, sign a contract, make a payment, or communicate with us regarding our services. We also generate data when we maintain records of your contract, billing, and access to our premises in the normal course of business.
In some cases, we may also receive personal data about you from third parties where it is lawful to do so. For example, this may include credit reference information or verification details from identity or fraud-prevention agencies when necessary for account set up and security.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the particular processing activity, this may include one or more of the following:
Contract. We process personal data when it is necessary to enter into, perform, or manage a contract with you. This includes providing storage services, processing payments, managing access to your unit, and communicating with you about your account.
Legal obligation. We process certain personal data to comply with legal and regulatory requirements, such as tax laws, accounting rules, and obligations relating to safety, security, and crime prevention.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include securing our premises, preventing fraud, managing our business operations, improving our services, and handling queries and complaints.
Consent. In limited circumstances, we may rely on your consent, for example where we send you certain forms of marketing communications that require opt in. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide self-storage and related services to you, including processing enquiries, reservations, and contract documentation, and managing your access to the storage facility.
To manage billing and payments, including issuing invoices, processing payments, and dealing with any non-payment or disputes.
To maintain safety and security on our premises, including monitoring access, investigating incidents, and protecting our property and the property stored by our customers.
To respond to your questions, requests, and complaints, and to provide customer service throughout your relationship with us.
To manage our business operations, such as record keeping, accounting, internal reporting, and maintaining and improving our services.
To send you service messages and information that are necessary for the performance of your contract, such as changes to access arrangements or updates to your account.
To send you marketing communications about our storage services where permitted by law and, where required, with your consent. You can opt out of marketing at any time.
Sharing Your Personal Data with Processors and Others
We may share your personal data with carefully selected third parties where lawful and necessary for the purposes set out in this Privacy Policy. These third parties may include:
Service providers who act as data processors on our behalf. These may include providers of payment processing, customer relationship management systems, accounting software, document storage, and IT support. These processors are only permitted to use your personal data in accordance with our instructions and for the purposes we specify, and they are required to implement appropriate security measures.
Professional advisers, such as lawyers, accountants, or auditors, where necessary for legal, tax, or business advisory services.
Public authorities, law enforcement, or regulatory bodies if we are legally required or permitted to disclose your personal data, for example in connection with crime prevention, health and safety, or regulatory reporting.
Other third parties in the context of a business transaction, such as a merger, sale, or restructuring, where necessary to evaluate or complete the transaction in accordance with applicable law.
We do not sell your personal data to third parties.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations. The specific retention period will depend on the type of data and the reasons for processing.
In general, we keep customer account and contract records for a period after your contract ends, to enable us to deal with any queries, disputes, tax, or legal issues that may arise. Security and access records are retained for a shorter period, unless they are required for the investigation of an incident or legal claim.
When personal data is no longer required for these purposes, we will delete it, anonymise it, or otherwise dispose of it securely.
International Transfers
Where we use service providers or systems that are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include relying on adequacy regulations, or using appropriate safeguards such as standard contractual clauses approved by regulators. Further information can be provided upon request.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, secure storage, encryption where appropriate, staff training, and regular review of our security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights include:
Right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request that we correct inaccurate or incomplete personal data about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may ask us to restrict our use of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims. You always have the right to object to direct marketing.
Right to data portability. Where we process your personal data by automated means on the basis of consent or contract, you may have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you believe that we have not complied with data protection laws in our handling of your personal data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. When we make changes, we will revise the date of the latest version and, where appropriate, inform you through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
