Privacy Policy - Lampton Storage

Effective date: This Privacy Policy applies to all Lampton Storage customers in area and explains how personal data is collected, used, stored, shared, and protected when you use our storage services.

1. Introduction

Lampton Storage is committed to handling personal data in a lawful, fair, and transparent manner. We respect the privacy of our customers, visitors, tenants, account holders, and any other individuals whose information we process in connection with our storage services. This Privacy Policy sets out what data we collect, why we collect it, the lawful basis for processing, how long we keep it, who may process it on our behalf, and the rights individuals have under applicable data protection law, including the UK GDPR and the Data Protection Act 2018.

By using our services, entering into a storage agreement, making an enquiry, or otherwise interacting with Lampton Storage, you acknowledge the practices described in this Policy. We only process personal data where there is a valid legal reason to do so.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, date of birth, and identification details where needed for security, contract, or verification purposes.
Contact information: postal address, email address, telephone number, and other communication details.
Account and contract information: tenancy records, unit number, agreement dates, payment status, billing details, and service preferences.
Payment information: bank account details, payment card information, invoicing records, and transaction history, where applicable.
Security information: access logs, entry records, CCTV images, alarm-related records, incident reports, and key or access device information.
Communications: enquiries, complaints, notices, claims, correspondence, and records of conversations.
Technical data: device, browser, and usage information if collected through digital systems used to manage services or security.

We may also receive personal data from third parties such as payment providers, identity verification services, contractors, insurers, or public authorities where lawful and appropriate.

3. How We Use Personal Data

We use personal data for the following purposes:

to enter into and manage storage agreements;
to verify identity and protect against fraud, misuse, or unlawful access;
to process payments, deposits, refunds, and invoices;
to operate secure access controls and site security systems;
to communicate with customers about their accounts, units, notices, or service matters;
to respond to enquiries, complaints, claims, and legal requests;
to maintain records, audits, and internal administration;
to comply with legal, regulatory, accounting, and tax obligations;
to defend or establish legal rights and manage disputes;
to improve service quality, safety, and operational efficiency.

Where we use CCTV or access records, this is primarily for the security of people, property, and premises.

4. Lawful Basis for Processing

We will only process personal data when we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a storage agreement, manage customer accounts, provide access to units, and deliver agreed services.

Legal Obligation

We process data where necessary to comply with legal duties, including tax, accounting, fraud prevention, safety, and regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include site security, managing disputes, preventing fraud, improving operations, and protecting property. We consider and balance these interests carefully.

Consent

In limited circumstances, we may rely on your consent, for example for certain optional communications or processing activities. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, and for any additional period required by law or for legitimate business reasons such as resolving disputes or enforcing agreements.

Retention periods vary depending on the type of data and the purpose of processing. In general:

contract and account records are retained for the duration of the agreement and for a period after it ends;
financial and tax records are retained for the period required by applicable law;
security records, including access logs and CCTV, are retained for a limited period unless needed for an investigation, claim, or legal obligation;
correspondence and complaints are retained for as long as needed to handle the matter and to evidence outcomes;
where data is no longer required, it is securely deleted, anonymised, or destroyed.

We regularly review retained records to ensure they are not kept longer than necessary. Retention is always based on necessity and legal compliance, not convenience.

6. Processors and Third Parties

We may share personal data with trusted processors and third parties who support our operations. These parties are required to handle personal data securely and only in accordance with our instructions or their own legal obligations.

Examples may include:

IT and hosting providers that support our systems, backups, and data storage;
payment processors that handle card or bank transactions;
identity verification providers used to confirm identity or reduce fraud risk;
security providers involved in alarms, access control, monitoring, or CCTV management;
accountants, auditors, and professional advisers supporting compliance and financial administration;
debt recovery or legal professionals where necessary to manage unpaid balances or disputes;
public authorities, insurers, and regulators where disclosure is required or permitted by law.

We do not sell personal data. Where a processor acts on our behalf, we put in place appropriate contractual and security safeguards. If data is transferred outside the UK, we will ensure suitable protection is in place in accordance with applicable law.

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access restrictions, password protection, secure storage, staff training, data minimisation, and controlled permissions. No system can be guaranteed completely secure, but we aim to protect data to a standard appropriate to the risk.

8. Your Rights

Depending on the circumstances and applicable law, you may have the following rights regarding your personal data:

Right of access: to request a copy of your personal data and information about how it is used;
Right to rectification: to ask us to correct inaccurate or incomplete data;
Right to erasure: to request deletion of personal data in certain circumstances;
Right to restriction: to request that processing be limited in certain cases;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain data in a structured, commonly used format where applicable;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

You may also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage individuals to raise concerns with us first so that we can try to resolve them promptly and fairly.

9. Cookies and Similar Technologies

If we use online systems or digital tools that place cookies or similar technologies, they may be used for essential functionality, security, and service improvement. Any such use will be limited to what is necessary and lawful. Where consent is required, it will be requested before non-essential cookies are used.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. The updated version will apply from its effective date. We recommend reviewing this Policy periodically to stay informed about how we protect personal data.

11. Summary of Key Points

We collect only the personal data needed to operate Lampton Storage services safely and lawfully.
We process data on the basis of contract, legal obligation, legitimate interests, and sometimes consent.
We keep data only as long as necessary and securely dispose of it when no longer needed.
We may share data with vetted processors and third parties under strict safeguards.
You have rights over your personal data, including access, correction, deletion, and objection.

This Privacy Policy is intended to provide clear information about our data practices and to reflect our commitment to lawful and responsible processing. Lampton Storage treats privacy as an essential part of customer trust and operational security.