Storage Mitcham Privacy Policy
This Privacy Policy explains how Storage Mitcham collects, uses, stores, and protects your personal data when you use our self-storage and related services. It applies to all Storage Mitcham customers in the Mitcham area, including prospective, current, and former customers, and to anyone who makes an enquiry about our services.
Who We Are and Scope of This Policy
Storage Mitcham is a self-storage business providing storage units and related services to individuals and businesses in the Mitcham area. For the purposes of the UK General Data Protection Regulation and all applicable data protection laws, Storage Mitcham is the data controller for the personal data described in this Privacy Policy.
By using our services, visiting our premises, or communicating with us, you acknowledge that you have read and understood this Privacy Policy and that it applies to the processing of your personal data by Storage Mitcham.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identity and contact details, such as your name, residential or business address, billing address, and any other contact details you provide to us.
Account and contract details, such as customer reference numbers, unit numbers, storage agreements, correspondence relating to your account, and details of services you have requested or purchased.
Payment and transaction information, such as payment method, payment status, invoices, and records of fees, charges, and refunds. We do not store full card details where payments are processed through secure third-party processors.
Usage and communication data, such as records of your enquiries, complaints, feedback, call or visit logs, and your communication preferences.
Security and access data, such as CCTV footage in and around our premises, gate or door access logs, and records of entry to and exit from your storage unit or our site.
Business customer data, where you act on behalf of a company or organisation, such as your job title, role, and your relationship to the organisation you represent.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us, request a quote, visit our premises, sign a storage agreement, make a payment, or communicate with us in any way in connection with our services.
We may also collect data automatically through CCTV systems and access control technology installed at our site, which are used to monitor access and maintain security.
In some cases, we may receive personal data from third parties, such as payment processors, credit reference agencies, or business partners, where this is necessary to provide our services or to meet legal obligations.
Lawful Bases for Processing Your Data
We only process your personal data when we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Contract. We process your personal data to enter into a storage agreement with you and to perform our contract with you, for example to open and manage your account, to arrange access to your unit, to process payments, and to communicate with you about your contract.
Legal obligation. We process certain personal data to comply with legal and regulatory requirements, including record-keeping, tax obligations, crime prevention and detection, and responding to lawful requests from authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and these are not overridden by your rights and interests. This includes operating and improving our services, maintaining security and safety at our site, preventing and addressing misuse of our facilities, and handling customer queries or complaints.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of marketing communications where required by law. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before consent was withdrawn.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including handling enquiries, setting up your storage unit, managing your access rights, processing payments, and administering your account and contract.
To communicate with you about your use of our services, including service updates, payment reminders, contract renewals, changes to terms, and responses to your questions or complaints.
To maintain site security and safety, including monitoring and recording access to our premises, using CCTV to help prevent and investigate crime, unauthorised access, or damage to property.
To manage our business operations, including internal administration, accounting, auditing, and service improvement activities.
To comply with applicable law and cooperate with regulatory, law enforcement, or other public authorities where required.
To send you information about our services and related offers, where this is permitted by law and in line with your communication preferences. You can opt out of marketing communications at any time.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected and to meet our legal, accounting, or reporting requirements.
Customer account and contract records are generally kept for the duration of your agreement with us and for a period after it ends, in line with applicable limitation periods and regulatory requirements. This enables us to respond to any queries, disputes, or legal claims that may arise.
CCTV footage and access logs are retained for a limited period, which is usually determined by security needs and legal requirements. Unless required for an ongoing investigation or legal matter, these records are deleted or anonymised after the retention period expires.
Where we no longer need your personal data, we will securely delete it or irreversibly anonymise it so that it can no longer be associated with you.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your data with trusted third parties where necessary for the purposes described in this Privacy Policy and where we have a lawful basis to do so.
We may share personal data with service providers acting as data processors who support the operation of our business, such as payment processing providers, cloud storage or IT service providers, security and access control system providers, and professional advisers such as accountants or legal advisers. These processors act on our instructions, are bound by confidentiality obligations, and are required to implement appropriate technical and organisational measures to protect your data.
We may also share personal data with law enforcement agencies, regulators, courts, or other authorities when we are legally required or permitted to do so, or when this is necessary to protect our rights, property, or the safety of our customers and staff.
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data processed by Storage Mitcham. These rights apply to all Storage Mitcham customers in the Mitcham area, subject to certain conditions and legal exceptions.
Right of access. You have the right to request confirmation of whether we hold personal data about you and to request a copy of that data.
Right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restrict processing. You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or assess an objection you have raised.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis. You also have an absolute right to object to direct marketing.
Right to data portability. In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to request that we transfer that data to another organisation where this is technically feasible.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing that took place before consent was withdrawn.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any updated version will take effect as soon as it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use and protect your personal data.
