Storage Woolwich Privacy Policy
This Privacy Policy explains how Storage Woolwich collects, uses, stores and protects your personal data. It applies to all Storage Woolwich customers and prospective customers located in the Woolwich area and any individual who contacts or interacts with us in relation to our storage services. We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018.
Who We Are and Scope of This Policy
Storage Woolwich is a storage service provider operating in the Woolwich area. For the purposes of data protection law, we act as the data controller in respect of the personal data we collect and process about you in connection with our services. This Privacy Policy covers all data processing activities carried out by Storage Woolwich relating to individuals using, or enquiring about, our storage facilities and related services.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on your interaction with us. These may include:
Identification data such as full name, date of birth, and copies or details of identity documents where required for verification and security purposes.
Contact details such as residential address, billing address, and any alternate contact address you provide, as well as your preferred communication methods.
Account and contract information such as storage unit number, contract start and end dates, payment history, and records of services you have requested or used.
Payment and billing information such as partial card details, billing references, and transaction records. We do not store full card details when payments are processed by third party payment providers.
Security and access information such as CCTV footage in and around our storage facilities, access logs, unit entry records, and vehicle registration numbers where relevant for access control and security.
Communication records such as enquiries, complaints, and any correspondence exchanged with us by post or other communication channels.
Technical data where you access our online services, such as anonymised usage data, device type, or basic diagnostic information, to help maintain and improve our digital services.
How We Collect Your Data
We collect personal data directly from you when you:
Request a quote or information about our storage services.
Enter into a storage agreement or other contract with us.
Visit our premises and use our facilities, including car parks and reception areas.
Communicate with us by any channel in relation to our services or your account.
We may also obtain personal data from third parties where permitted by law, for example from credit reference agencies or fraud prevention services, limited to what is necessary for our legitimate purposes.
Lawful Basis for Processing Your Data
We only process your personal data where we have a lawful basis under data protection law. Depending on the situation, this may include:
Contractual necessity. We process your data to take steps at your request before entering into a contract and to perform our contract with you. This includes processing required to set up and manage your storage unit, process payments, communicate with you about your contract, and provide customer support.
Legal obligations. We may process your data where necessary to comply with legal and regulatory requirements, such as tax, accounting, prevention of fraud, and obligations to assist law enforcement where we are legally required to do so.
Legitimate interests. We may process your data where it is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. Examples include securing our premises through CCTV and access controls, improving our services, managing and protecting our business, and handling queries and complaints.
Consent. In limited cases, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you are free to withdraw it at any time and this will not affect the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your account, allocating a storage unit, and managing access to our facilities.
To process payments, manage billing arrangements, and maintain accurate financial records.
To verify your identity, prevent fraud, and ensure the security of our premises, assets, staff, and other customers.
To respond to your enquiries, provide customer support, and handle complaints or disputes.
To send you important information about your contract, such as renewal reminders, payment notices, or changes to our terms.
To comply with applicable laws, regulations, and lawful requests from public authorities.
To analyse and improve our services, premises security, and customer experience, using aggregated and anonymised data wherever possible.
Sharing Your Personal Data and Use of Processors
We do not sell your personal data. We may share your data with third parties where this is necessary and lawful, including:
Service providers acting as data processors, who provide services such as payment processing, secure data storage, customer management systems, CCTV maintenance, or professional advice. These processors act on our instructions and are contractually required to protect your data and only use it for the services they provide to us.
Professional advisers such as accountants, auditors, or legal advisors where this is necessary to obtain professional services or to exercise or defend legal claims.
Public authorities, law enforcement, or regulators where we are under a legal or regulatory obligation to share personal data, or where this is necessary to protect the rights, property, or safety of Storage Woolwich, our customers, or others.
We take steps to ensure that any third party with whom we share personal data maintains appropriate security and confidentiality measures.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for a period following the end of your storage agreement, to enable us to respond to questions, manage any disputes, and comply with legal obligations. CCTV footage and access logs are retained for a shorter period, unless they are required for the investigation of an incident, in which case they may be kept for longer as necessary.
When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.
International Transfers
Where we use third party service providers that store or process data outside the United Kingdom or European Economic Area, we take appropriate steps to ensure that your personal data is afforded an adequate level of protection. This may include the use of standard contractual clauses or other safeguards permitted by data protection law.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include access controls, secure storage systems, staff training, and regular review of our security practices. While we take reasonable steps to protect your information, no system can be guaranteed as completely secure.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
The right of access. You have the right to request confirmation that we process your personal data and to receive a copy of the personal data we hold about you, together with certain information about how we use it.
The right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
The right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data you believe is incorrect.
The right to data portability. In limited circumstances, you have the right to receive personal data that you have provided to us in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
The right to object. You have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to the use of your data for direct marketing purposes.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
Children's Data
Our services are not intended for children and we do not knowingly collect personal data relating to individuals under the age of 18 for the purposes of entering into storage agreements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any changes will be made available under the latest version of this Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.
