Storage Maida Vale Privacy Policy
This Privacy Policy explains how Storage Maida Vale collects, uses, stores and protects personal data relating to customers and prospective customers in the Maida Vale area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Maida Vale customers and users of our services in the Maida Vale area, whether you contact us online, by phone, or visit our premises in person.
Data Controller
For the purposes of data protection law, Storage Maida Vale is the data controller responsible for deciding how and why your personal data is processed in connection with our storage services, enquiries and related activities.
Personal Data We Collect
We collect and process a range of personal data about you in order to provide our services, manage our relationship with you and comply with legal obligations. The types of data we may collect include:
Identification and contact information such as your full name, postal address, billing address, contact preferences and any identification details you provide to verify your identity.
Customer and contract information such as storage unit number, rental term, pricing, payment history, correspondence relating to your booking, and records of any service issues, complaints or enquiries.
Payment and transaction information such as payment method details, billing records, invoices, and confirmation of payments. Card or banking details are handled in accordance with applicable payment security standards and may be processed by secure third party payment providers.
Usage and interaction data such as records of when you accessed our premises, time and date of visits, and communications sent to or received from you regarding your storage unit or any related service.
Security and safety information such as CCTV footage recorded for security and crime prevention purposes on and around our premises, and incident reports if any safety or security issues occur.
Marketing and communication preferences such as whether you have consented to receive marketing communications and your preferred communication channels.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, make a payment, communicate with us by any channel, or visit our premises. We also collect data automatically through our security systems, such as access control systems and CCTV.
In some cases, we may receive limited personal data about you from third parties, such as comparison websites, referral partners or payment processors, but only where they are permitted to share that information and where it is necessary for us to provide our services.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis under data protection law. Depending on the circumstances, this may include:
Performance of a contract: We process your personal data to provide storage services, manage your account, take payment, and fulfil our obligations under any agreement we have with you.
Legal obligation: We process certain data to meet legal and regulatory requirements, such as record keeping, taxation, prevention of fraud, and health and safety obligations.
Legitimate interests: We process personal data to pursue our legitimate business interests, such as ensuring the security of our premises and customers, improving our services, managing business operations, responding to enquiries, and maintaining appropriate records. When relying on legitimate interests, we balance our interests against your rights and freedoms.
Consent: In some situations, we rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you can withdraw it at any time, and this will not affect the lawfulness of processing carried out before you withdrew consent.
How We Use Your Personal Data
We use your personal data for the following purposes:
To respond to enquiries, provide quotes, and help you select the most appropriate storage solution.
To set up and manage your customer account, prepare and administer contracts, and deliver storage services in accordance with your agreement.
To process payments, issue invoices, manage debt recovery, and maintain accurate financial records.
To maintain the safety and security of our premises, customers and staff, including through access control systems and CCTV monitoring.
To communicate with you about your contract, service updates, access arrangements, and any changes to our terms or policies.
To handle feedback, complaints and disputes, and to improve our services based on customer interactions.
To send marketing communications about our services where you have consented or where we are otherwise permitted by law, and to respect your choices regarding such communications.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting or reporting obligations and to resolve disputes. The specific retention period may vary depending on the type of data and the context in which it was collected.
In general, we retain customer contract and billing records for a number of years after the end of your contract, in line with legal and regulatory requirements. CCTV footage is retained for a shorter period, unless required for the investigation of an incident, in which case it may be kept for a longer period as necessary. When personal data is no longer required, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with carefully selected third party service providers who act as data processors on our behalf. These processors are engaged to provide services such as payment processing, accounting support, customer relationship management systems, IT hosting, security systems, and document storage. We require all processors to process your personal data only in accordance with our instructions, to keep it secure, and to comply with data protection law.
We may also share personal data with professional advisers such as lawyers, accountants and insurers where necessary for the establishment, exercise or defence of legal claims or for regulatory or compliance purposes.
Where legally required or permitted, we may disclose personal data to law enforcement agencies, regulatory bodies, courts or other public authorities, for example in connection with crime prevention or the enforcement of legal rights.
We do not sell your personal data to third parties.
International Transfers
If any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses or other lawful transfer mechanisms. Further information about such safeguards can be provided on request where applicable.
Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, encryption where appropriate, and regular review of our security procedures. While we take reasonable steps to protect your data, no system can be completely secure and we cannot guarantee absolute security.
Your Rights Under GDPR
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Maida Vale customers in the Maida Vale area, subject to certain limitations and exemptions. Your rights include:
Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the personal data we hold about you, together with certain information about how it is used.
Right to rectification: You can ask us to correct inaccurate personal data or complete any incomplete information held about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis for processing.
Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, for example while we investigate a concern you have raised about accuracy or our use of your data.
Right to data portability: In some cases, you can request that we provide you or a third party with a copy of certain personal data in a structured, commonly used and machine readable format.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will then stop processing your data unless we have compelling legitimate grounds or the processing is for the establishment, exercise or defence of legal claims.
Right to object to marketing: You have an absolute right to object at any time to your personal data being processed for direct marketing purposes. If you do so, we will stop using your data for marketing.
Right to withdraw consent: Where we process your data based on your consent, you can withdraw your consent at any time. This will not affect any processing carried out before you withdrew consent.
Exercising Your Rights and Complaints
If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact us using the contact methods made available on our website or at our premises. We will respond to your request as soon as reasonably possible and within the time limits set by data protection law.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we use your personal data. We would however appreciate the chance to address your concerns directly in the first instance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any updates will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
