Storage Walworth Privacy Policy
This Privacy Policy explains how Storage Walworth collects, uses, stores and protects personal data relating to individuals who use our self‑storage and associated services in the Walworth area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws, and how you can exercise those rights.
This Privacy Policy applies to all Storage Walworth customers, prospective customers, guarantors, emergency contacts, and any individuals whose personal data we process in connection with our storage facilities and services in the area.
Who we are as data controller
Storage Walworth acts as the data controller for the personal data described in this Privacy Policy. This means we decide why and how your personal data is collected and used in connection with our services in the Walworth area.
Personal data we collect
We only collect personal data that is relevant for providing and managing our storage services, running our business operations, and complying with legal obligations. The categories of data we may collect include:
Identity and contact details, such as your name, postal address, billing address, contact address, and any other address you provide, as well as your preferred contact details.
Account and contract information, such as unit numbers, start and end dates of contracts, payment terms, deposit information, and correspondence relating to your contract, including records of your communications with us.
Payment and transaction information, such as records of payments made, payment method details where required for processing, payment history, amounts owed, and credit or debit adjustments associated with your account.
Verification and security information, such as identity documents where required for verification, vehicle registration numbers used to access the facility, access card or code logs, CCTV recordings in and around our premises, and incident reports for security or safety reasons.
Marketing and communication preferences, such as your preference for receiving service updates or marketing messages, and records of your consent or opt‑out decisions.
Technical and usage information, where applicable, such as information relating to the use of any online account portals, including log‑in times and basic device or browser information that may be generated as part of providing the service.
How we collect your data
We may collect your personal data in the following ways:
Directly from you when you make an enquiry, visit our premises, sign a contract, access your storage unit, or contact us by any communication channel.
From your use of our facilities and services, including access control systems, CCTV, and our account management systems.
From third parties, such as payment service providers, credit reference agencies where lawful and relevant, or law enforcement bodies where we receive legally valid requests.
Lawful bases for processing
We process your personal data only when we have a lawful basis to do so. Depending on the specific purpose, the lawful basis will typically be one or more of the following:
Contract performance. We process personal data to take steps at your request before entering into a contract, and to perform our contract with you. This includes setting up your account, managing your storage unit, taking payments, and communicating with you about your contract.
Legal obligations. We process personal data to comply with our legal obligations, for example relating to taxation, accounting, record keeping, and cooperating with lawful requests from public and law enforcement authorities.
Legitimate interests. We process personal data as necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Legitimate interests include operating and improving our storage facilities, ensuring site security and safety, preventing fraud and misuse, handling customer service queries and complaints, and defending or establishing legal claims.
Consent. In some situations we rely on your consent, for example for certain marketing communications that are not covered by our legitimate interests. Where we rely on consent, you may withdraw your consent at any time, and we will stop the relevant processing from that point onward.
How we use your personal data
We use your personal data for the following purposes:
To provide, manage and administer storage services, including processing enquiries, preparing agreements, managing access to your unit, and providing customer support.
To process payments, issue invoices, manage deposits, and recover any sums owed, including engaging debt collection services where necessary and lawful.
To maintain safety and security on our premises, which includes monitoring access control systems, operating CCTV for crime prevention and detection, and managing incidents or emergencies.
To manage our business operations, including internal administration, accounting, auditing, and reporting, as well as planning and improving our services.
To send service communications, such as notices about changes to your contract, payment reminders, access changes, or important operational updates regarding the facility.
To send marketing communications about our services in the Walworth area where we are permitted to do so by law or where you have given your consent, and to manage your marketing preferences.
To comply with legal and regulatory requirements, respond to lawful requests, and establish, exercise, or defend our legal rights.
Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet any applicable legal, accounting, or reporting requirements.
In general, we will retain your core account, contract, and payment records for a period that allows us to respond to any queries or disputes following the end of your contract, and to meet legal and tax obligations. CCTV footage and access control logs are retained for shorter periods, unless they are needed for an ongoing investigation, security incident, or legal claim, in which case they may be kept for longer as required.
When personal data is no longer needed, we will either irreversibly anonymise it so that it can no longer be connected to an individual, or securely delete or destroy it.
Data processors and other recipients
In order to provide and manage our services, we may share personal data with selected third parties who act as data processors on our behalf. These may include:
IT and system service providers who host or support our business systems, access control systems, or customer databases.
Payment and billing service providers who process payments and assist in managing billing and account reconciliation.
Security and maintenance contractors who help operate and maintain our facilities and security systems under our instructions.
Professional advisers, such as accountants, auditors, or legal advisers, who are engaged under duties of confidentiality and use data only for the purposes of providing their services.
Debt collection agencies, where necessary and lawful, for recovering unpaid sums under a contract.
When we use processors, we ensure that they are bound by written contracts that require them to process personal data only on our documented instructions, apply appropriate security measures, and assist us in meeting our data protection obligations.
We may also share personal data with other third parties where required by law, such as with regulators, law enforcement agencies, courts, or other public authorities when we are legally obliged or permitted to do so.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection laws. This may include using approved standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Data security
We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, secure storage of physical and digital records, and regular review of our security arrangements.
Your data protection rights
Under data protection laws, you have a number of rights in relation to your personal data. Subject to certain conditions and lawful exceptions, you may have the right to:
Access your personal data and obtain a copy of the information we hold about you, together with certain details about how we use it.
Request correction of inaccurate or incomplete personal data that we hold about you.
Request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the purposes for which it was collected and we are not required to retain it.
Object to our processing of your personal data where we rely on legitimate interests, including for direct marketing, and we will consider your objection and stop processing unless we have compelling legitimate grounds to continue.
Request restriction of processing in certain circumstances, for example where you contest the accuracy of the data or you have objected to processing and we are considering your request.
Request portability of certain personal data you have provided to us in a structured, commonly used and machine‑readable format, and have it transmitted to another controller where technically feasible.
Withdraw consent where we rely on consent as the lawful basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.
Exercising your rights
If you wish to exercise any of your data protection rights in connection with services provided by Storage Walworth in the Walworth area, you can contact us using the usual communication methods available to you as a customer. We may need to verify your identity before responding to your request to protect your privacy and security.
We will respond to legitimate requests within the timeframes required by data protection law. In some cases, we may be unable to comply with a request if an exemption applies or if we are required to retain certain data. Where this occurs, we will explain the reasons to you.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or the way we process personal data. Any changes will apply to all Storage Walworth customers in the Walworth area from the date on which the updated Privacy Policy is published or otherwise communicated to you.
You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
