Storage Peckham Privacy Policy
This Privacy Policy explains how Storage Peckham collects, uses, stores and shares personal data relating to customers and prospective customers in our service area. It also sets out the rights you have under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Peckham customers and anyone who makes an enquiry, request or booking for storage services with us in our local area, whether in person, by post, by telephone or online.
By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy. We may update this Privacy Policy from time to time to reflect changes in law or how we operate. The most recent version will always apply to the personal data we hold and process.
Who we are and scope of this policy
Storage Peckham is the controller of the personal data described in this Privacy Policy. That means we determine the purposes and means of processing your personal data. This Privacy Policy covers all personal data we collect about individual customers, prospective customers and authorised users of storage units within the Storage Peckham area.
This Privacy Policy does not apply to employees, workers or job applicants, who will be provided with separate privacy information, or to personal data processed by third parties for their own independent purposes.
Personal data we collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and which services you use:
Identification and contact details, such as your full name, postal address, billing address, preferred contact address, and any other contact details you choose to provide.
Account and contract information, such as customer account numbers or internal identifiers, storage unit numbers, contract start and end dates, payment terms and correspondence relating to your account or agreement with us.
Payment and transaction information, such as payment method details, payment status, transaction history, invoices, credit notes and records of amounts paid or due. We do not store full payment card details if payment is taken through a secure third party payment processor.
Verification and security information, such as copies of identity documents where required for security or anti fraud checks, vehicle registration numbers used to access the premises, access logs, entry and exit times, and records of authorised persons linked to your unit.
Communications and enquiry data, such as information you provide when you contact us with questions, feedback, complaints or requests, including the content and timing of your communications and any responses given by us.
Technical and usage information, where relevant, such as information about how you use our website or online enquiry forms, including device information, basic log data and similar data collected through standard technical means.
How we collect your personal data
We collect personal data directly from you when you:
Request information or a quote for storage services.
Enter into a contract or booking with Storage Peckham.
Set up or manage your customer account.
Communicate with us by post, telephone or online forms.
Visit our premises and use our facilities or security systems.
We may also receive personal data from third parties, such as payment service providers processing your transactions on our behalf, credit reference agencies if we undertake credit checks where appropriate, or law enforcement and regulatory authorities where required by law.
Lawful basis for processing
We rely on one or more of the following lawful bases to process your personal data, as permitted by the UK GDPR:
Contract. We process personal data where it is necessary to enter into or perform a contract for storage or related services with you, including setting up and managing your account, taking payment, providing access to units, and communicating with you about your agreement.
Legal obligation. We process personal data where we must comply with legal and regulatory obligations, for example to maintain accurate financial records, comply with tax requirements, respond to lawful requests from authorities, or meet health and safety obligations.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or those of a third party, and where your interests and fundamental rights do not override those interests. Our legitimate interests include operating and improving our storage business, ensuring site and asset security, preventing fraud, managing risk and defending legal claims, and maintaining good customer relations.
Consent. In limited cases, we may rely on your consent to process your personal data, for example for certain types of direct marketing where consent is required. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing that took place before withdrawal.
How we use your personal data
We use your personal data to:
Provide, manage and administer storage services and related customer support.
Set up and maintain customer accounts and records.
Take and process payments and manage billing.
Verify your identity where appropriate and control access to our premises.
Maintain the security of our facilities, assets and customers.
Respond to enquiries, feedback, complaints and requests.
Send service communications related to your account, contract or facility, such as changes to terms, notices regarding access or maintenance, and important safety information.
Improve and develop our services and internal processes, including through analysis and internal reporting.
Comply with legal, regulatory and law enforcement requirements, and to establish, exercise or defend legal claims.
Data sharing and processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy, including:
Service providers acting as processors, who supply us with services such as payment processing, secure data hosting, customer relationship management systems, IT support, security services and document storage or destruction. These providers process personal data only on our instructions and are required to implement appropriate security measures.
Professional advisers, such as legal advisers, accountants and insurers, where necessary for the management of our business and the protection of our rights.
Law enforcement, regulatory bodies, courts and tribunals, where we are required or permitted by law to disclose personal data, or where disclosure is necessary to protect our rights, property or the safety of customers and staff.
We do not sell your personal data to third parties. Where we engage processors, we ensure appropriate data protection terms are in place in accordance with the UK GDPR.
International transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will only do so where appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or other mechanisms approved under data protection law. We will take steps to ensure that your personal data continues to be protected to a standard that is essentially equivalent to UK data protection law.
Data retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. In determining appropriate retention periods, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether those purposes can be achieved by other means.
Customer account and contract records are generally retained for a period after the end of your contract to enable us to manage queries, disputes, legal claims and regulatory obligations. Financial and transactional records are usually retained for the periods required by tax and accounting laws. Security and access records are retained for shorter periods unless a longer period is required in connection with an incident, investigation or legal claim.
When personal data is no longer required, we will securely delete, anonymise or destroy it in line with our data retention procedures.
Your data protection rights
Under the UK GDPR, you have certain rights in relation to the personal data we hold about you. These rights may be subject to specific conditions and legal exceptions. They include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain additional information.
Right to rectification. You can ask us to correct inaccurate personal data and to complete incomplete data.
Right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You can object to processing based on our legitimate interests where you believe your rights and interests outweigh our grounds for processing. You also have an absolute right to object to direct marketing at any time.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can ask to receive your personal data in a structured, commonly used and machine readable format and to have it transmitted to another controller where technically feasible.
Right not to be subject to automated decisions. You have rights in relation to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects concerning you. Storage Peckham does not typically make such decisions about customers.
Exercising your rights and complaints
If you wish to exercise any of your rights or raise a question about how we handle your personal data, you can contact us using the contact details provided on our main customer communications or at our premises. We may need to request specific information from you to help us confirm your identity and ensure your rights are respected.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we process your personal data. We would, however, welcome the opportunity to address your concerns directly before you contact the authority.
