Self Storage Wimbledon Privacy Policy

This Privacy Policy explains how Self Storage Wimbledon collects, uses, stores, and protects your personal data. It applies to all current and former customers, prospective customers, and website visitors of Self Storage Wimbledon in the local area, including anyone who makes an enquiry, requests a quote, or uses our storage services.

Who We Are and Scope of This Policy

Self Storage Wimbledon is a self-storage service provider operating in the Wimbledon area. For the purposes of the UK General Data Protection Regulation and other applicable data protection laws, Self Storage Wimbledon is the data controller of the personal data described in this Privacy Policy.

This Privacy Policy applies to all services we provide in the area and to all personal data we handle in connection with those services, whether collected online, by telephone, in writing, or in person at our premises.

Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification data, such as your full name, date of birth, and proof of identity and address where required for security and contractual purposes.

Contact data, such as your postal address, billing address, and other contact details you choose to provide.

Account and contract data, such as unit number, length of stay, access codes, rental agreements, and records of services you have purchased or enquired about.

Payment data, such as payment card details or bank details processed through secure payment providers, payment history, invoices, and records of any arrears.

Communication data, such as records of correspondence with us by email, contact forms, or through other communication channels, as well as notes of telephone conversations where relevant to your account.

Technical and usage data, such as information collected when you visit our website, including IP address, browser type, device identifiers, and basic analytics on how you use our website.

Security and access data, such as CCTV images on our premises, access logs, and alarm records relating to entry into and use of storage units and communal areas.

How We Collect Your Data

We collect personal data directly from you when you request a quote, make a booking, sign a rental agreement, contact us with a query, enter our premises, or interact with our website.

We may also receive certain information from third parties, such as payment service providers, credit reference agencies where relevant for fraud prevention or credit control, and marketing platforms that help us manage enquiries you submit through online forms.

Lawful Bases for Processing

We process your personal data only where we have a valid lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:

Contract: To take steps at your request before entering into a contract and to perform our contract with you, for example to set up and administer your storage unit and process payments.

Legal obligation: To comply with legal and regulatory requirements, including tax and accounting laws, anti-fraud obligations, and safety and security regulations.

Legitimate interests: To pursue our legitimate business interests, provided your interests and fundamental rights do not override those interests. These may include managing and improving our services, protecting our premises and assets, preventing crime, handling queries and complaints, and maintaining accurate records of our interactions.

Consent: In limited cases, we may rely on your consent, for example for certain types of direct marketing communications where consent is required by law. Where processing is based on consent, you may withdraw that consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide, manage, and administer your self-storage services, including creating accounts, managing bookings, processing payments, and handling access to storage units.

To respond to enquiries, provide quotes, and communicate with you about your account, bookings, or any changes to our services or terms.

To maintain the security and integrity of our premises, including through the use of CCTV, access control systems, and visitor logs.

To manage billing, accounting, debt recovery, and internal record-keeping.

To improve our services, monitor usage patterns, and carry out internal reporting and analysis.

To send you service-related communications and, where permitted, selected marketing information about similar services. You can opt out of marketing communications at any time.

To comply with applicable laws and respond to lawful requests from regulatory or law enforcement bodies.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf. These processors help us deliver our services and operate our business and may include:

IT and cloud service providers who host our systems, manage data storage, or provide business software solutions.

Payment service providers who process card or bank transactions securely on our behalf.

Security service providers who support our CCTV systems, access control, and on-site security arrangements.

Professional advisers such as accountants or legal advisers where this is necessary for legitimate business purposes or to comply with legal obligations.

Debt recovery agencies or credit control providers, where needed to recover unpaid fees under our contract with you.

All processors are required to act only on our instructions, to implement appropriate technical and organisational measures to protect your data, and to comply with data protection law.

We may also share personal data with public authorities, regulators, or law enforcement where we are legally required or permitted to do so.

International Transfers

Where we use service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as approved standard contractual clauses or other mechanisms recognised by data protection law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory, accounting, or reporting requirements.

Generally, we keep account and contract data for a defined period after your contract ends, to address any queries, disputes, or legal claims. Payment and invoicing records are kept for the duration required by tax and accounting laws. CCTV footage and access logs are retained for a shorter period, unless an incident requires us to keep specific records for longer in connection with an investigation or legal claim.

When personal data is no longer required, we will securely delete or anonymise it in line with our data retention practices.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include the right to:

Access your personal data and obtain a copy of the information we hold about you.

Request correction of inaccurate or incomplete personal data.

Request erasure of your personal data where there is no good reason for us to continue processing it, or where you have successfully exercised your right to object.

Object to processing of your personal data where we are relying on legitimate interests and there is something about your situation which makes you want to object on this ground.

Request restriction of processing of your personal data while we consider a request you have made, such as a request for rectification or objection.

Request the transfer of your personal data to you or to another service provider in a structured, commonly used, and machine-readable format, where technically feasible.

Withdraw consent at any time where we are relying on your consent to process your personal data, without affecting the lawfulness of processing before consent was withdrawn.

How to Exercise Your Rights

If you wish to exercise any of your rights, or if you have questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our website or at our premises. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any other rights.

We aim to respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex or you have made a number of requests.

You also have the right to lodge a complaint with the UK data protection supervisory authority if you are unhappy with how we have handled your personal data. We encourage you to contact us first so we can try to resolve any concerns directly.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, secure storage, staff training, and regular review of our security practices and policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory developments, or best practice. The updated version will be published on our website and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.