Storage Abbey Wood Privacy Policy
This Privacy Policy explains how Storage Abbey Wood collects, uses, stores, and protects personal data belonging to our customers and prospective customers in the Abbey Wood area. We are committed to complying with the United Kingdom General Data Protection Regulation and the Data Protection Act, and to processing your personal data in a lawful, fair, and transparent way.
This Privacy Policy applies to all Storage Abbey Wood customers, including individuals and businesses, as well as anyone who contacts us to enquire about our services within the Abbey Wood area.
Who we are and scope of this policy
Storage Abbey Wood is a self storage service provider operating in the Abbey Wood area. In relation to the personal data described in this Privacy Policy, Storage Abbey Wood is the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled in accordance with applicable data protection laws.
By using our services, visiting our premises, or otherwise providing us with your personal data, you acknowledge that you have read this Privacy Policy. We may update this Privacy Policy from time to time and will make the latest version available to you.
Types of personal data we collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and which services you use:
Identification and contact data such as full name, postal address, billing address, contact address, date of birth where required, and identification details where needed to verify your identity.
Contact details such as email address and correspondence address where you choose to provide them, for example when making enquiries, requesting a quote, or managing your booking.
Contract and account data such as booking details, unit number, access rights, rental period, payment history, service preferences, and communications relating to your contract with us.
Payment and billing information such as billing name, invoicing details, payment method details, transaction amounts, and payment status. Where we use third party payment processors, we will receive limited payment confirmation details rather than full card information.
Security and access data such as unit access logs, gate or door entry records, CCTV footage in and around our premises where applicable, and incident reports related to safety and security.
Communication data such as enquiries, complaints, feedback, and any correspondence or notes we make when we communicate with you in person, over the phone, or through other channels.
Technical data such as device information, IP address, and basic usage information where you access any online services or digital tools we provide. This information is used to support security, service functionality, and administration.
How we collect your personal data
We collect personal data directly from you when you contact us to request information, obtain a quote, make a booking, sign a contract, make a payment, visit our premises, or communicate with us in any way about our services.
We may also collect personal data indirectly from third parties, for example from payment service providers confirming that a payment has been made, or from agencies or business partners who refer you to us. Where we use CCTV systems or access control systems at our premises, we may capture personal data about you when you visit the site.
Lawful bases for processing your data
We will only process your personal data where we have a valid lawful basis under data protection law. Depending on the circumstances, we may rely on the following lawful bases:
Performance of a contract where processing is necessary to enter into or perform a contract with you, including setting up your storage unit, administering your booking, processing payments, managing your account, and providing customer support.
Compliance with legal obligations where we are required to process your data to comply with applicable laws, regulations, or regulatory requirements. This may include record keeping duties, tax and accounting rules, fraud prevention, security obligations, and obligations relating to safety and crime prevention.
Legitimate interests where processing is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. These legitimate interests may include operating and improving our storage facilities and services, ensuring site security, preventing and detecting crime, managing customer relationships, handling disputes, and improving our customer experience.
Consent where you have given us clear and informed consent to process your personal data for a specific purpose, such as receiving certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw your consent at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services including processing enquiries, creating and administering your booking, preparing and managing contracts, controlling access to storage units, and handling renewals, extensions, or terminations.
To process payments and manage billing including issuing invoices, processing and confirming payments, managing arrears, and handling refunds where applicable.
To communicate with you including responding to your questions and requests, sending service-related information and notices, informing you of changes to our terms or policies, and managing any complaints or disputes.
To maintain safety and security including operating and monitoring access control systems and CCTV where used, investigating incidents and accidents, preventing and detecting crime, and protecting our customers, staff, and property.
To manage our business and comply with legal obligations including maintaining accurate records, supporting audits, responding to lawful requests from authorities, managing insurance claims, and enforcing our contractual and legal rights.
To improve and develop services including reviewing service usage and trends at an aggregated level, improving customer experience, and enhancing site operations and procedures.
Data retention and storage
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected and to satisfy any legal, accounting, or reporting requirements.
In general, we keep data relating to your contract for the duration of your agreement with us and for a period after it ends. This post contract retention period allows us to respond to queries about past services, manage any disputes, and comply with legal obligations. Records such as invoices and financial transaction details may be kept for longer periods where required by tax and accounting laws.
CCTV recordings, access logs, and security related data are typically retained for a shorter period, unless an incident requires us to preserve specific footage or records for investigation or legal purposes.
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
Data processors and sharing of personal data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to provide services such as payment processing, accounting support, secure data storage, IT and system administration, maintenance of security or access control systems, and professional advice and consultancy.
We require all processors to process your personal data only in accordance with our documented instructions, to implement appropriate security measures, and to keep your data confidential.
We may also share personal data with other third parties acting as independent controllers where necessary. This may include insurers, banks, legal and professional advisers, law enforcement and regulatory authorities, and other parties where disclosure is required by law, necessary to protect our rights or the rights of others, or necessary in connection with a business reorganisation.
We do not sell your personal data to third parties.
International data transfers
Where it is necessary to transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data. These safeguards may include using countries that have been recognised as providing an adequate level of data protection, or implementing appropriate contractual protections in line with data protection law.
Your data protection rights
Under data protection law, you have several rights in relation to the personal data we hold about you. These rights may be subject to certain conditions and exemptions. They include:
Right of access the right to obtain confirmation as to whether we process your personal data and, if so, to request a copy of your data and certain information about how we process it.
Right to rectification the right to have inaccurate or incomplete personal data corrected or updated.
Right to erasure the right to request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction the right to request that we restrict the processing of your personal data in certain circumstances, such as while we are verifying the accuracy of data or considering an objection you have raised.
Right to data portability the right, in certain circumstances, to receive personal data that you have provided to us in a structured, commonly used, and machine readable format and to request that we transfer it to another controller where technically feasible.
Right to object the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling on that basis. In such cases we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests. You also have an absolute right to object to direct marketing at any time.
Rights related to consent where we rely on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
If you wish to exercise any of your data protection rights, we may need to ask you for information to confirm your identity and to help us respond to your request efficiently and securely.
How we protect your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, secure storage, staff training, and procedures for handling and responding to security incidents.
Complaints and contact
If you are concerned about how we handle your personal data or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioners Office or the relevant supervisory authority. We encourage you to contact us first so that we can try to resolve any concerns directly and promptly.
This Privacy Policy applies to all Storage Abbey Wood customers and enquirers in the Abbey Wood area and is intended to provide clear information about how we collect, use, and protect your personal data in connection with our storage services.
