Storage Lampton Privacy Policy
This Privacy Policy explains how Storage Lampton collects, uses and protects your personal data when you use our storage services. It applies to all Storage Lampton customers in our service area, including anyone who makes an enquiry, visits our premises, uses our website, or signs a storage agreement with us.
We are committed to complying with the General Data Protection Regulation and all applicable data protection laws. This Privacy Policy is intended to provide you with clear and transparent information about our data processing activities and your rights.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Lampton customers and prospective customers in our area, including individual customers, business customers, authorised users of a storage unit and any person who contacts us with an enquiry. It also covers visitors to our premises whose personal data may be captured through access control or CCTV systems.
What personal data we collect
We may collect and process the following categories of personal data about you:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and identification documents where required for security or verification purposes.
Communication details such as email address, postal correspondence, and records of communications with you, including enquiries, complaints and service-related messages.
Contract and account information such as storage unit number, contract start and end dates, payment history, deposit details, access permissions and authorised persons listed on your account.
Payment-related information such as payment method, payment status and transaction records. We do not store full card details when payment is processed via secure payment providers.
Usage and technical information such as access control logs, date and time of entry to the site, CCTV images and, where relevant, basic device and browsing data collected through our website for security and service improvement purposes.
Any other information you voluntarily provide to us in connection with your use of our services, for example when requesting special assistance or making a complaint.
How we collect your personal data
We collect personal data directly from you when you contact us, request a quote, make a booking, sign a storage agreement, set up a payment method, or communicate with us by phone, in person, in writing or online.
We may also collect data automatically when you visit our premises, for example through CCTV and access control systems, or when you use our website, such as basic technical and usage information.
In some cases we may receive limited personal data from third parties, such as payment providers, credit reference agencies if checks are necessary, or business partners who you have authorised to share information with us.
Lawful bases for processing your data
We only process your personal data where we have a valid lawful basis under the GDPR. Depending on the circumstances, we rely on one or more of the following lawful bases:
Performance of a contract: to take steps at your request before entering into a contract and to perform our contract with you, for example to provide storage services, manage your account, process payments and communicate with you about your booking or contract.
Legal obligation: to comply with legal and regulatory requirements, such as obligations relating to taxation, accounting, record keeping, crime prevention and other applicable laws.
Legitimate interests: to pursue our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes managing our premises, preventing fraud, ensuring the security of our customers and property, improving our services, handling customer enquiries, and defending legal claims.
Consent: where required by law, we will obtain your consent before processing certain personal data, for example for some forms of marketing. You can withdraw your consent at any time by contacting us using the details set out in your contract documents or our website.
How we use your personal data
We use your personal data for the following purposes:
To provide, manage and improve our storage services, including setting up and administering your account, allocating storage units, handling access and security, and responding to your enquiries.
To process payments, manage billing and collect any outstanding amounts that may be owed to us under your contract.
To maintain the security and safety of our premises, customers and property, for example by operating CCTV, managing access control systems and investigating incidents.
To communicate with you about your contract, changes to our terms and policies, service updates and service-related notices.
To comply with legal obligations and cooperate with lawful requests from public authorities, including law enforcement and regulatory bodies.
To exercise and defend legal rights, including in connection with potential or actual disputes and claims.
To analyse and improve our services and internal processes, including training, quality assurance and service development.
Data retention and storage
We retain your personal data only for as long as necessary for the purposes for which it was collected, and in accordance with applicable laws and regulatory requirements.
In general, we keep customer account and contract information for a period after the end of your storage agreement to comply with legal, tax and accounting obligations, and to deal with any queries or disputes that may arise. CCTV footage and access logs are retained for a shorter period, unless a longer retention is required in connection with a specific incident, investigation or legal claim.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be linked to an identifiable individual.
Data processors and third parties
We may share your personal data with trusted third party service providers who act as data processors on our behalf. These processors assist us with services such as payment processing, IT and cloud services, security systems, document storage, accounting and professional advice.
Where we use data processors, we ensure that appropriate data protection agreements are in place, requiring them to process your personal data only in accordance with our instructions, to implement suitable technical and organisational measures, and to protect your data in accordance with applicable laws.
We may also share your personal data with other third parties where required by law, in connection with legal proceedings, to protect our rights, property or safety, or in the context of a business reorganisation or transfer, where permitted by law.
We do not sell your personal data to third parties.
International data transfers
Where your personal data is transferred outside the United Kingdom or the European Economic Area, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. This may include the use of standard contractual clauses or other recognised transfer mechanisms.
Your data protection rights
Under the GDPR and applicable data protection laws, you have a number of rights in relation to your personal data. These include:
Right of access: You have the right to request confirmation as to whether we process your personal data and to receive a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification: You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we consider a request to rectify your data.
Right to data portability: Where we process your personal data based on your consent or on a contract and by automated means, you may have the right to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns directly.
Security of your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, physical security, encryption, staff training and regular review of our security practices.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our processing activities or applicable laws. The most current version will always be made available to you. We recommend that you review this Privacy Policy periodically so that you stay informed about how we process your personal data.
