Self Storage Brixton Privacy Policy

This Privacy Policy explains how Self Storage Brixton collects, uses, stores and protects personal data relating to our customers and prospective customers in the Brixton area. It is intended to meet the requirements of the UK General Data Protection Regulation and all applicable data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Self Storage Brixton customers, former customers and prospective customers in the Brixton area who enquire about, book, use or have used our storage and related services. It covers personal data collected in person at our facility, over the phone, by post, and through any online forms or digital tools that we operate for managing enquiries, reservations, payments and account administration.

What Personal Data We Collect

We collect only the personal data that is necessary for the operation of our storage business and the provision of our services. The categories of personal data we may collect include the following.

Identification and contact details, such as your full name, postal address, billing address, and preferred contact details. Account and contract information, such as customer reference numbers, unit numbers, rental agreements, move in and move out dates, and records of communications relating to your contract. Payment and billing information, such as payment method details, billing history, invoices, receipts and records of any missed or late payments. Security and access information, such as CCTV images captured at our facility, access control records for entry and exit, and records of keys or access codes issued. Communication records, such as enquiries, complaints, feedback and any correspondence you send to us or that we send to you. Technical and usage information, where applicable, such as basic device or browser information and usage logs for any customer portal or online booking system we operate.

How We Collect Personal Data

We collect personal data directly from you when you request information, obtain a quote, sign a storage agreement, make a payment, communicate with us, visit our facility or use any online tools we provide. We may also receive personal data from third parties where this is necessary for credit checking, debt recovery or verifying your identity, subject to applicable laws. In addition, CCTV systems at our facility collect images and video footage for security and safety purposes.

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so under data protection law. The lawful bases that may apply are as follows.

Contractual necessity, where processing is required to enter into or perform a contract with you, such as setting up your storage unit, managing your account and accepting payments. Legal obligation, where we must process personal data to comply with legal or regulatory requirements, such as tax and accounting rules, record keeping obligations, and responding to valid law enforcement requests. Legitimate interests, where we process data for our legitimate business purposes, including maintaining security at our facility, managing risks, improving our services, preventing fraud and recovering unpaid fees, provided that such interests are not overridden by your rights and freedoms. Consent, where you have given us clear consent for a specific purpose, such as receiving certain forms of marketing communications. Where consent is used, you may withdraw it at any time.

How We Use Your Personal Data

We use your personal data to provide and manage our storage services, communicate with you, and operate our business effectively and securely. This includes negotiating and entering into storage agreements, managing reservations, processing payments and providing customer support. We also use personal data to protect the safety and security of our customers, staff, premises and assets through access control, CCTV monitoring and investigation of incidents. In addition, we may use personal data to maintain business and financial records, manage risks, handle complaints, and comply with applicable laws.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting or reporting requirements. In general, we keep basic customer and contract information for a number of years after your relationship with us ends, to deal with any queries, disputes or legal claims. CCTV footage is kept for a shorter period, typically only as long as required for security monitoring and incident investigation, unless a longer retention period is necessary in connection with a specific incident. When personal data is no longer required, we securely delete or anonymise it in line with our data retention and destruction procedures.

Use of Data Processors and Third Parties

In operating our business, we may engage carefully selected third party service providers to process personal data on our behalf. These data processors may provide services such as secure data hosting, payment processing, accounting support, customer relationship management tools, security and CCTV system maintenance, and document storage. Where we use such providers, we ensure that appropriate data processing agreements are in place to require them to protect your personal data, use it only for our specified purposes, and act only on our documented instructions. We may also share personal data with professional advisers and authorised bodies where necessary to comply with legal obligations or to protect our rights and the rights of others, such as law enforcement agencies, courts, regulatory authorities and debt recovery organisations, in accordance with the law.

International Data Transfers

Where personal data is transferred outside the United Kingdom by us or our service providers, we take steps to ensure that an adequate level of protection is in place in accordance with data protection law. This may include using countries that have been recognised as providing adequate protection, relying on approved contractual clauses or implementing other safeguards required by law. Further information about any such transfers can be provided upon request.

Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised or unlawful access, accidental loss, destruction or damage. These measures may include access controls, secure storage systems, password protection, encryption where appropriate, staff training, and regular review of our security arrangements. While we aim to protect all personal data, no system can be completely secure, and you should take care when sharing information with us, particularly over unsecured channels.

Your Data Protection Rights

Under data protection laws, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions. You have the right to request access to the personal data we hold about you and to receive information about how it is processed. You have the right to request that we correct any inaccurate or incomplete personal data. In some circumstances, you may have the right to request that we erase your personal data, for example where it is no longer needed for the purposes for which it was collected, and there is no legal reason for us to continue processing it. You may request that we restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing. Where processing is based on our legitimate interests, you have the right to object to such processing, particularly in relation to direct marketing. Where we process data based on your consent, you have the right to withdraw that consent at any time, although this will not affect the lawfulness of processing before consent was withdrawn. You may also have the right to request the transfer of certain personal data to you or another organisation in a structured, commonly used and machine readable format.

Exercising Your Rights and Complaints

If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact us using the contact details provided on our website or in your contract documentation. We will respond to your request as required by law and may ask for proof of identity to ensure that we are dealing with the correct individual. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection supervisory authority. Details of how to contact the authority can be found on its official website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any changes will be posted on our website or made available at our facility, and the updated version will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.