Storage Tooting Privacy Policy
This Privacy Policy explains how Storage Tooting collects, uses, stores, and protects personal data relating to customers and prospective customers within the Storage Tooting service area. It is intended to comply with the UK General Data Protection Regulation and all applicable data protection legislation. By using Storage Tooting services, visiting our premises, or interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of This Privacy Policy
This policy applies to all Storage Tooting customers and prospective customers in the local area, as well as visitors to our premises and individuals who contact us for information about our services. It covers personal data processed in connection with the provision, administration, and marketing of our storage services.
Categories of Personal Data We Collect
Storage Tooting collects and processes different types of personal data depending on how you interact with us and which services you use. This may include:
Identification data such as full name, date of birth, and proof of identity details taken from identification documents that you share with us when required for security and contractual purposes.
Contact details including home address, billing address, and any relevant correspondence address, as well as details needed to send invoices or service communications.
Account and contract data such as unit number, contract start and end dates, pricing, payment terms, and records of your communications with us about your storage agreement.
Payment and billing information such as payment method details and transaction records that are necessary to process payments, manage invoices, and handle any payment disputes.
Access and security information such as access codes, key or fob references, sign in and sign out records, and where applicable, closed circuit television footage from our premises for safety and security monitoring.
Marketing preferences including whether you wish to receive updates about our services, offers, or changes that may be relevant to your agreement with us.
Technical and usage information that may be generated when you visit any online platforms we operate, such as basic device and interaction data, to maintain and improve our services.
Lawful Bases for Processing Personal Data
Storage Tooting only processes personal data when there is a lawful basis to do so under data protection law. We rely on the following lawful bases:
Contract performance to take steps at your request before entering into a storage agreement and to fulfil our obligations under any contract we have with you. This includes managing your booking, processing payments, providing access to your storage unit, and administering your account.
Legal obligation to comply with legal and regulatory requirements, including record keeping, tax rules, prevention and detection of crime, and health and safety obligations. This may require us to retain certain identification or transaction records.
Legitimate interests where the processing is necessary for our legitimate business interests and does not override your fundamental rights and freedoms. Examples include maintaining site security and safety, monitoring the performance of our services, preventing fraud or misuse of our facilities, and communicating necessary service updates.
Consent where we rely on your explicit permission, for example, to send certain marketing communications by electronic means. You are free to withdraw consent at any time, and doing so will not affect the lawfulness of processing carried out before consent was withdrawn.
How We Use Your Personal Data
Storage Tooting uses personal data to provide and manage storage services, administer customer accounts, and maintain secure and efficient operations. In particular, we may use your data to set up and manage your storage agreement, process payments and invoices, handle questions or complaints, manage access control systems, improve our services, and send you relevant information about your existing agreement.
Where you have agreed to receive marketing communications, we may use your contact details and information about your use of our services to send you tailored offers or updates. You can opt out of marketing communications at any time.
Data Sharing and Processors
Storage Tooting may share personal data with selected third parties where this is necessary for the operation of our business and consistent with data protection law. These third parties generally act as data processors on our behalf, processing data only according to our instructions and subject to appropriate contractual safeguards.
Types of processors and recipients may include payment processing providers that handle card or electronic payments in a secure manner, insurers and insurance intermediaries involved in providing or administering any insurance products related to your use of our storage services, information technology and system support providers that host or maintain our booking, account, or access control systems, and professional advisers such as accountants or legal advisers where necessary for the management of our business or in connection with legal claims.
We may also share data with law enforcement agencies, courts, regulators, or other public authorities where we are legally required to do so or where this is necessary for the prevention or detection of crime or the protection of individuals.
Storage Tooting does not sell personal data to third parties.
International Transfers
Where we use service providers that store or access personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your information. These may include the use of recognised standard contractual clauses or other mechanisms approved by data protection authorities.
Data Retention
Storage Tooting retains personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting, or reporting requirements. In general, we will keep customer account and contract data for a period after the end of your storage agreement to deal with any queries, disputes, or claims, and to comply with legal obligations.
Access control records and security footage are retained for a shorter period, unless required for the investigation of an incident, suspected criminal activity, or legal proceedings. Payment and transaction records may be kept for longer periods in line with tax and financial reporting rules.
When data is no longer needed, we will securely delete, anonymise, or otherwise dispose of it in a way that ensures it cannot be reconstructed or used.
Security of Your Data
Storage Tooting takes appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These measures may include physical security at our premises, restricted access to systems and records, secure storage of identification documents, and regular review of our security arrangements. While no system can be completely secure, we are committed to maintaining appropriate levels of protection in line with industry standards and legal requirements.
Your Data Protection Rights
Under data protection law, individuals whose personal data we process have a number of rights in relation to their information. These rights apply to all Storage Tooting customers and prospective customers in the area, subject to certain legal conditions and exemptions.
Right of access you can request confirmation of whether we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification you can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure you can request that we delete your personal data in certain situations, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing you can ask us to restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
Right to data portability where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used, and machine readable format and, where technically feasible, transmit it to another controller.
Right to object you can object to processing based on our legitimate interests, including profiling, and to processing for direct marketing purposes. Where you object to direct marketing, we will stop processing your personal data for that purpose.
Right to withdraw consent where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have concerns about how Storage Tooting handles your personal data, you can contact us using the contact details made available through our usual communication channels or at our premises. We will respond to your request or concern in accordance with data protection law.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been breached. We would, however, welcome the opportunity to address your concerns directly in the first instance.
Changes to This Privacy Policy
Storage Tooting may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will be made available through our usual customer information channels and will take effect from the date of publication. You should review this Privacy Policy periodically to ensure that you remain informed about how we use and protect your personal data.
