Self Storage Maida Vale Privacy Policy

This Privacy Policy explains how Self Storage Maida Vale collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Maida Vale area. It also sets out your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Self Storage Maida Vale customers and users of our services in the local area, whether you are an individual, sole trader, or acting on behalf of a business.

1. Who we are and scope of this policy

Self Storage Maida Vale provides self storage and related services to customers in and around Maida Vale. In doing so, we act as a data controller for the personal data we collect and process about you. This Privacy Policy covers all personal data processed in connection with enquiries, bookings, contracts for storage, website interactions, and on-site facility use.

By using our services, making an enquiry, visiting our premises, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Personal data we collect

We only collect personal data that is necessary for clearly defined purposes. The types of personal data we may collect include:

Identification and contact details such as full name, postal address, billing address, contact addresses, and information relating to your identity documentation where required for security, including ID document numbers, nationality, and date of birth.

Contact details such as email address and contact preferences.

Contract and account information such as unit number, move-in and move-out dates, rental fees, payment history, invoices, deposit details, and records of communications relating to your contract.

Payment information such as card payment confirmations or bank transaction references. Card data is processed via secure payment processors and is not fully stored by us.

Security and access information such as CCTV footage within and around our facility, access control logs, entry and exit times, and records of security incidents or health and safety events.

Communication data such as enquiry details, complaints, feedback, and any correspondence we have with you, whether by phone, post, or other channels.

Website and usage data where relevant, such as pages visited, enquiry form submissions, and basic technical information collected through standard logging for security and performance.

3. How we collect your data

We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, make a payment, contact us with questions, or visit our premises. We may also receive personal data from third parties where it is lawful to do so, for example, from agents acting on your behalf or from payment service providers confirming that a transaction has been successfully processed.

4. Lawful bases for processing

We process your personal data only where we have a valid lawful basis under data protection law. These lawful bases may include:

Contract: We process your data when it is necessary to enter into or perform a contract with you, such as when providing you with a storage unit, managing your account, arranging payments, and communicating service-related information.

Legal obligation: We may process your data to comply with legal and regulatory requirements, such as tax and accounting rules, health and safety obligations, crime prevention, and cooperating with law enforcement where required.

Legitimate interests: We may process data where it is necessary for our legitimate business interests or those of a third party, and where your rights and freedoms are not overridden. This includes ensuring site security, preventing fraud, managing and improving our services, dealing with customer enquiries, and maintaining accurate records.

Consent: In limited cases, we may rely on your consent, for example for certain types of optional marketing. Where consent is used, you can withdraw it at any time.

5. How we use your personal data

We use your personal data for the following purposes:

To provide and manage storage services, including processing bookings, allocating storage units, managing access, and handling renewals or terminations.

To manage billing and payments, issue invoices, process refunds where applicable, and maintain accurate financial records.

To maintain the security and safety of our premises through access control records, visitor information, and CCTV monitoring, helping to prevent crime and protect people and property.

To communicate with you about your contract, account status, service updates, changes to terms and conditions, and any issues that may affect your use of our facilities.

To handle enquiries, complaints, and feedback, and to improve our services and customer experience.

To comply with legal and regulatory obligations, respond to lawful requests from authorities, and establish or defend legal claims.

To send you marketing communications about our services only where permitted by law and in line with your preferences. You can opt out of such communications at any time.

6. Data retention

We keep your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. This typically means:

Customer contract data and billing records are retained for a period required by applicable tax and accounting regulations following the end of your contract.

CCTV footage is stored for a limited period, usually only long enough to investigate security incidents, unless it is required to be kept longer in connection with an ongoing matter such as a claim or investigation.

Enquiry and communication records are kept for a reasonable time to respond to queries and keep a record of our interactions, after which they are securely deleted or anonymised.

Where data is no longer needed, it will be securely deleted or anonymised so that it can no longer identify you.

7. Data processors and sharing of your information

We sometimes use trusted third-party service providers to process personal data on our behalf. These data processors act only under our instructions and are contractually required to keep your data secure and confidential. Examples include:

Payment processing providers that securely handle card and bank transactions.

IT and cloud service providers that host our systems or store data for back-up and security purposes.

Security service providers assisting with CCTV systems, alarm monitoring, or access control technology.

Professional advisers such as accountants or legal advisers where necessary for our business operations and compliance.

We may also share personal data with other third parties where required by law or where it is necessary to protect our rights, property, or the safety of our customers and staff, for example with law enforcement agencies or regulatory authorities.

We do not sell your personal data. If any transfer of data outside the UK or European Economic Area is required, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable law.

8. Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, staff training, secure storage systems, regular review of procedures, and the use of reputable service providers who meet recognised security standards.

While we take reasonable steps to safeguard your data, no system can be completely secure. We continually review our practices to enhance the security and confidentiality of the information we hold.

9. Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access: You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data, together with certain additional information.

Right to rectification: You can request that inaccurate or incomplete personal data we hold about you is corrected or updated.

Right to erasure: In certain circumstances, you may ask us to delete your personal data, for example where it is no longer needed for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: You have the right in some situations to request that we suspend processing of your data, for example while its accuracy is being checked.

Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format or transmit it to another controller where technically feasible.

Right to object: You may object to processing that is based on our legitimate interests, including profiling, and you always have the right to object to direct marketing.

Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects, unless certain safeguards apply.

To exercise any of these rights, you can contact us using the details provided in your customer documentation or by using the usual channels through which you communicate with Self Storage Maida Vale. We may need to verify your identity before responding to your request.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any updates will take effect when the revised policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

If you continue to use our services after changes to this Privacy Policy have been published, this will indicate that you have read and understood the updated terms.