Privacy Policy - Walworth Storage

This Privacy Policy explains how Walworth Storage collects, uses, stores, shares, and protects personal data in connection with our storage services. It applies to all Walworth Storage customers in the area, including prospective customers, current customers, former customers, account holders, authorized users, visitors, and anyone who interacts with us in relation to our services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Walworth Storage provides storage-related services to individuals and businesses. In the context of this Privacy Policy, we act as the data controller for the personal data we collect and determine how and why it is used. This means we are responsible for ensuring that your personal information is processed lawfully, fairly, and transparently.

2. Personal Data We Collect

We collect only the personal data necessary to provide and manage our services. Depending on your relationship with us, this may include:

Identity information such as your name, title, date of birth, and identification details.
Contact information such as your postal address, email address, and phone number.
Account and contract information such as booking details, storage unit records, service preferences, and payment arrangements.
Financial information such as billing details, payment status, and transaction records.
Access and security information such as entry logs, CCTV images where applicable, and records of site access.
Communication data such as enquiries, complaints, service requests, and correspondence.
Technical data if you interact with our digital systems, including IP address, browser details, and usage information.

We do not intentionally collect special category data unless it is necessary for a specific lawful purpose, such as complying with legal obligations or protecting vital interests. Where such data is involved, we apply additional safeguards.

3. How We Use Your Personal Data

We use personal data for legitimate storage, administrative, and legal purposes. This includes:

providing storage services and managing customer accounts;
verifying identity and preventing fraud;
processing bookings, payments, and renewals;
communicating service updates, account notices, and operational information;
maintaining security of our premises, property, staff, and customers;
handling complaints, disputes, and claims;
complying with legal and regulatory requirements;
improving our services, processes, and customer experience.

We always aim to use data in a way that is relevant, proportionate, and limited to what is necessary for the purpose at hand.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under the UK GDPR. Depending on the activity, our lawful bases may include:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes setting up accounts, providing access to storage units, managing billing, and delivering requested services.

Legal Obligation

We may process data where necessary to comply with laws and regulations, including tax, accounting, fraud prevention, health and safety, and other statutory obligations.

Legitimate Interests

We may process data for our legitimate interests or those of a third party, provided your rights and freedoms do not override those interests. Examples include securing our premises, maintaining service records, preventing misuse, and improving operations. Where we rely on legitimate interests, we assess the balance between our interests and your privacy rights.

Consent

In limited situations, we may rely on your consent, for example where it is specifically required for a particular optional activity. If we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These parties act as processors when they process data on our behalf under contract and in accordance with our instructions. Examples may include:

payment service providers;
IT and cloud hosting providers;
security and surveillance service providers;
accounting, audit, and administrative service providers;
professional advisers such as legal or insurance advisers;
delivery, maintenance, or facility management providers where necessary.

We only permit processors to process personal data to the extent necessary for the services they provide. They must keep data secure, use it only for authorised purposes, and comply with data protection law.

We may also disclose data to regulators, law enforcement authorities, courts, insurers, or other organisations where required by law or where it is necessary to establish, exercise, or defend legal claims.

6. International Transfers

If any personal data is transferred outside the UK, we take steps to ensure it remains protected. This may include using countries recognised as providing adequate protection or applying approved safeguards such as standard contractual clauses or equivalent measures. We take reasonable steps to ensure that overseas processing is consistent with this Privacy Policy and applicable law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. Retention periods depend on the type of data and the reason for processing. In general:

Customer and contract records are retained for the duration of the relationship and for a reasonable period afterwards.
Financial and transaction records are retained for the period required by tax and accounting law.
Security records, such as access logs or CCTV images, are kept only for as long as needed for security, incident handling, or legal purposes.
Correspondence and complaints are retained for as long as necessary to resolve the matter and comply with record-keeping obligations.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it. Retention is never unlimited; we review stored data regularly to ensure it is not kept longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, confidentiality obligations, and monitoring procedures. While no system can be guaranteed to be completely secure, we work to reduce risk and maintain a proportionate level of protection.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to conditions and exemptions:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you may ask us to delete your data.
Right to restrict processing – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – you may request certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner's Office if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

10. Automated Decision-Making

We do not normally use automated decision-making that produces legal or similarly significant effects. If this changes, we will provide clear information about the logic involved, the significance of the processing, and the rights available to you.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitment

Walworth Storage is committed to processing personal data responsibly, securely, and transparently. We collect only what is needed, use it for clear and lawful purposes, share it only with trusted processors or where required by law, and keep it only for as long as necessary. We respect your rights and aim to ensure that all customer information is handled with care and in accordance with data protection law.