Storage Bermondsey Privacy Policy
This Privacy Policy explains how Storage Bermondsey collects, uses, stores and protects personal data relating to customers in the Bermondsey area. It is intended to provide clear information about your rights under the UK General Data Protection Regulation and the Data Protection Act 2018, and how you can exercise those rights.
This Privacy Policy applies to all Storage Bermondsey customers in the Bermondsey area, including prospective customers who make enquiries, current customers with active storage arrangements and former customers whose data we may retain for legal or administrative purposes.
Data Controller
For the purposes of data protection legislation, Storage Bermondsey is the data controller in respect of the personal data we collect and process about you. As data controller we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process personal data that is necessary to provide storage and related services to customers in the Bermondsey area and to meet our legal and contractual obligations. The categories of data we may collect include:
Identification details such as name, title and date of birth. Contact details such as billing address, storage unit address if different, and any other address you provide to us, as well as information you provide to us when you contact us by post or in person. We may also collect details of your interactions with us, such as records of communications and customer service queries.
Contract and account information such as details of the storage unit you rent, contract start and end dates, storage terms, payment history, invoicing information and related notes that help us administer your account.
Payment related information such as payment method and transaction details. We do not store full payment card details when payment is processed through a secure payment processor, but we may retain partial information such as the last digits of a card number and expiry date where this is necessary for reference or verification.
Security and access information such as vehicle registration numbers where provided for site access control, access logs relating to entry to and exit from our facilities, and any incident reports created for safety, insurance or security reasons.
Technical information such as basic device and usage information collected when you visit our website, including IP address, browser type, pages visited and the date and time of visits. This information may be collected through the use of cookies or similar technologies where legally permitted.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so. Depending on the circumstances, the lawful basis may be one or more of the following:
Contract performance. We process your data where it is necessary to enter into or perform a contract with you. This includes setting up your storage account, managing your booking, processing payments, communicating with you about your contract, and providing customer service.
Legal obligations. We process data where necessary to comply with our legal and regulatory obligations. This may include record keeping, accounting, prevention of fraud, and responding to lawful requests from authorities.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. Examples include maintaining site security and safety, improving our services, managing business operations and handling customer enquiries and complaints.
Consent. In limited circumstances we may rely on your consent, for example for specific types of marketing communications where consent is required by law. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To create and manage your customer account and storage contract. This includes processing your application, confirming bookings, managing access to your unit and handling contract renewals or terminations.
To process payments, issue invoices, manage debt recovery where necessary and maintain accurate financial records in line with legal and accounting requirements.
To maintain safety and security at our storage facilities in the Bermondsey area. This includes controlling access to the premises, monitoring for unauthorised access, and investigating any incidents or complaints.
To provide customer support and communicate with you about your contract, including sending important notices relating to safety, access, changes to terms or policies and service updates.
To manage and improve our business operations, including monitoring service usage, improving our services, and planning capacity and resources in the Bermondsey area.
Where permitted, to send you information about products or services that may be relevant to you as an existing or former customer, and to manage your preferences and objections to marketing communications.
Data Sharing and Processors
We do not sell your personal data. We may share your data with selected third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law.
Service providers acting as data processors may process personal data on our behalf and under our instructions. These may include payment processing providers, accounting and billing platforms, IT hosting and support providers, customer relationship systems and security or access control service providers. We only engage processors that provide guarantees of appropriate technical and organisational measures to protect your data.
We may share personal data with professional advisers such as auditors, accountants, insurers and legal advisers where this is necessary to obtain professional advice or manage legal claims.
We may disclose personal data to law enforcement agencies, regulators, courts or other authorities where required by law or where necessary to protect our rights, the rights of our customers or the safety and security of our premises.
Where any processing by third parties involves personal data being transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision, in accordance with data protection legislation.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting or reporting requirements.
Contract and billing records relating to your storage in the Bermondsey area are typically retained for a period required by tax and accounting laws after the end of your contract. Access control and security related information may be kept for shorter periods, unless an incident or dispute requires longer retention.
When determining the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, as well as applicable legal requirements.
Once the relevant retention period has expired, personal data is either securely deleted or irreversibly anonymised so that you can no longer be identified from it.
Your Data Protection Rights
Under data protection laws you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Bermondsey customers in the Bermondsey area, subject to certain legal limitations and exemptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and to receive a copy of that data, along with certain information about how and why we process it.
Right to rectification. You have the right to request that we correct any inaccurate personal data about you and to complete any incomplete data, taking into account the purposes of the processing.
Right to erasure. In certain circumstances you have the right to request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and we have no other lawful basis for processing.
Right to restriction of processing. You may have the right to request that we restrict the processing of your data in certain situations, such as while we verify the accuracy of the data or consider an objection you have raised.
Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing unless we can demonstrate compelling legitimate grounds to continue. You also have an absolute right to object to processing for direct marketing purposes at any time.
Right to data portability. Where our processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to transmit that data to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before consent was withdrawn.
If you wish to exercise any of these rights or have questions about how we handle your personal data, you can contact us using the contact methods set out on our main customer documentation or website.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or changes in applicable laws. When we make substantial changes we will take reasonable steps to inform customers, for example by updating notices at our Bermondsey facilities or on our website. The date of the most recent version will be indicated in the policy text or associated documentation.
By continuing to use our storage services in the Bermondsey area after any changes to this Privacy Policy take effect, you acknowledge that you have been informed of the updated terms relating to our processing of your personal data.
