Storage Morden Park Privacy Policy
This Privacy Policy describes how Storage Morden Park collects, uses, stores and protects personal data relating to its customers and prospective customers. It applies to all Storage Morden Park customers and enquirers in the service area and to all use of our storage services, website and customer communications.
We are committed to protecting your privacy and handling your personal data in a fair, transparent and lawful manner in accordance with the United Kingdom General Data Protection Regulation and applicable data protection laws.
Scope and Data Controller
This Privacy Policy applies to all individuals who use or enquire about Storage Morden Park services in the local area, including personal customers, business customers and their authorised representatives. It covers personal data collected online, by telephone, in person at our site and through any other communication channels we use.
For the purposes of data protection law, Storage Morden Park is the data controller for the personal data it processes about you. This means we determine why and how your personal data is processed.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and the services you use. This may include:
Identification and contact details such as full name, postal address, billing address, date of birth, and contact preferences.
Communication information such as records of enquiries, complaints, feedback, and other correspondence with you.
Contract and account data such as unit number, contract start and end dates, storage plan details, payment history and account status.
Payment and billing information such as payment method details and information needed to process payments and manage invoices. We do not store full card details where this is handled securely by our payment service provider.
Usage and access information such as visit logs, access control records, CCTV images on and around our premises, and records of security incidents.
Technical data such as IP address and basic device and browser information when you visit our website, to help us secure and improve our online services.
In some cases, we may also collect emergency contact details if you provide them to us to assist with account management and urgent communications.
How We Collect Your Data
We may collect personal data directly from you when you complete a booking or enquiry form, sign a storage agreement, update your details, make a payment, contact us by phone or in person, or use our website.
We may also obtain data from third parties where this is necessary and lawful, for example from payment processors, fraud prevention services or authorised individuals acting on your behalf.
Lawful Basis for Processing
We process your personal data only where we have a valid lawful basis under data protection law. Depending on the context, this may include:
Performance of a contract. We need to process your data to take steps at your request before entering into a contract and to provide and manage your storage service, including handling bookings, payments, access control and customer service.
Compliance with legal obligations. We may process personal data to meet our legal and regulatory obligations, such as accounting, tax, health and safety, and crime prevention requirements.
Legitimate interests. We may process data where it is necessary for our legitimate business interests or those of a third party, provided your rights and interests do not override those interests. This may include ensuring the security of our premises and customers, maintaining and improving our services, managing disputes and protecting our property.
Consent. In some limited circumstances we may rely on your consent, for example for certain types of marketing communications where required by law. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, manage and administer your storage contract and account, including verifying your identity, processing bookings and managing payments.
To communicate with you about your storage unit, account status, renewals, changes to terms and conditions and important service updates.
To maintain the security of our site, customers and staff, including the use of access control systems, visitor logs and CCTV monitoring in and around our premises.
To respond to your enquiries, requests, complaints and feedback and to provide customer support.
To manage fees, charges, debt recovery and the resolution of disputes or claims.
To meet our legal, regulatory and compliance obligations and to cooperate with law enforcement and regulatory authorities where required.
To monitor and improve our services, premises and customer experience, including using aggregated or anonymised information where appropriate.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary and lawful. These third parties act as independent controllers or as processors on our behalf.
We may share data with payment service providers to process payments securely and manage billing, with professional advisers such as accountants or legal advisers, and with insurers in connection with insurance cover or claims.
We may also use external service providers as data processors to support the operation of our business. These may include providers of IT systems, data hosting, access control and security services, CCTV maintenance, document management, customer relationship management tools and communication platforms.
Where we use processors, they are engaged under written contracts that require them to act only on our instructions, implement appropriate security measures and comply with data protection requirements.
We may disclose personal data to law enforcement agencies, courts, regulators or other public authorities if required to do so by law or where it is necessary to protect our rights, property or the safety of others.
We do not sell your personal data to third parties.
International Data Transfers
Where any of our service providers or their systems are located outside the United Kingdom or the European Economic Area, we will ensure that an adequate level of protection is in place for your personal data. This may include using countries recognised as providing an adequate level of protection or using appropriate safeguards such as standard contractual clauses approved by relevant data protection authorities.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.
In general, we retain customer account and contract information for a period after your contract ends to deal with any queries, disputes or legal issues and to comply with statutory retention periods. Payment records and invoices may be retained for longer periods as required by tax and accounting laws.
CCTV recordings and access logs are typically retained for a limited period necessary for security monitoring and incident investigation, unless a longer retention period is required in connection with a specific investigation or legal proceedings.
When personal data is no longer required, we will securely delete or anonymise it.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, staff training, secure storage and regular review of our security practices and procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exceptions. Your rights include:
Right of access. You have the right to request confirmation of whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification. You have the right to request that inaccurate or incomplete personal data be corrected or updated.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the original purpose and we have no other lawful basis for retaining it.
Right to restriction. You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection.
Right to object. You may object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine readable format and that we transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any changes will take effect when the updated policy is made available, and we will indicate the date of the latest revision. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
