Storage Shepherds Bush Privacy Policy
This Privacy Policy explains how Storage Shepherds Bush collects, uses, discloses and protects personal data for all customers and prospective customers in the Shepherds Bush area. We are committed to processing your personal data in compliance with the UK General Data Protection Regulation and all applicable data protection laws.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Shepherds Bush customers, former customers and individuals who make enquiries or bookings for storage services in the Shepherds Bush area. It covers personal data collected through our premises, our website, written correspondence and any other communication channels we use to provide or promote our services.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you use our storage services or contact us:
Identification and contact details, such as your full name, postal address, billing address, and any other contact details you provide to us.
Account and contract information, such as storage unit details, contract start and end dates, payment status, chosen services, and communication preferences.
Payment related information, such as payment history and transaction records. Card or bank details are processed only through secure payment systems operated by our payment processors and are not stored by us in full.
Communication data, such as records of enquiries, complaints, feedback, and any correspondence you have with us in person, by post, by telephone or online.
Usage and operational data, such as access logs, visit records, and information relating to your use of our storage facilities required for security and operational purposes.
Security and CCTV data, such as CCTV images, recordings and access control records captured on or around our premises, where in use, to help ensure the safety and security of people and property.
How We Collect Your Data
We collect personal data directly from you when you:
Request information or a quote about our storage services.
Enter into a storage agreement with us or update your contract details.
Make a payment or set up a recurring payment arrangement through our payment processors.
Visit our premises and are captured by security or CCTV systems where these are in place.
Communicate with us by post, telephone or online for customer service or operational reasons.
We may also receive limited personal data from third parties where necessary for the performance of our services or to comply with legal obligations, such as payment service providers, insurers or professional advisers.
Lawful Basis for Processing
We will only process your personal data when we have a lawful basis to do so under data protection laws. The main lawful bases we rely on are:
Contract: We process personal data where it is necessary to enter into, manage or perform a storage agreement with you, including setting up your account, providing access to your unit, processing payments and handling enquiries related to the contract.
Legal obligation: We process personal data where we are required to do so by law, such as for tax, accounting or regulatory reporting, or to respond to requests from public authorities where we are legally obliged to cooperate.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This includes managing and improving our services, safeguarding our premises, preventing fraud, collecting unpaid fees, and maintaining security through access controls and CCTV where in place.
Consent: In limited cases, we may rely on your consent, for example where required for specific forms of marketing or optional communications. Where processing is based on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, manage and administer storage services, including creating and maintaining your account, operating your storage agreement and facilitating access to our facilities.
To process payments, manage invoices, handle payment queries and maintain accurate financial records.
To communicate with you about your storage agreement, service updates, access arrangements, renewals, and any queries you raise.
To monitor and enhance security at our premises through access controls and CCTV where in use, to help prevent crime and protect customers, staff and property.
To manage and improve our operations, including service quality, customer experience and facility management.
To comply with our legal and regulatory obligations and to respond to lawful requests from authorities.
To pursue or defend legal claims, including the recovery of unpaid fees or resolving disputes.
Data Retention
We will retain your personal data only for as long as necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
Customer account and contract records are typically retained for a period after your storage agreement ends to respond to any follow up queries, manage potential disputes and satisfy statutory retention requirements.
Payment and financial transaction records are retained in line with applicable legal and tax requirements.
CCTV and access control records, where used, are stored for a limited period that is appropriate for security and investigative purposes, unless a longer retention period is required in connection with an incident, investigation or legal proceedings.
When personal data is no longer required, we will safely delete, anonymise or securely destroy it in accordance with our data retention procedures.
Data Processors and Sharing
We may share your personal data with trusted third party service providers who act as data processors on our behalf. These processors are engaged to perform specific services for us, such as payment processing, secure data hosting, customer management systems or professional advisory services.
Where we use processors, we require them to process your data only on our instructions, to keep it secure and to comply with applicable data protection laws.
We may also share personal data with third parties acting as separate controllers where necessary to comply with legal obligations, to respond to lawful requests from authorities, to protect our rights or to assist in the prevention and detection of crime. Where appropriate, we will take steps to ensure that only the minimum necessary information is shared for these purposes.
We do not sell your personal data to third parties.
International Transfers
Where any of our service providers process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws. This may include using standard contractual clauses or other approved transfer mechanisms, together with additional technical and organisational measures where required.
Security of Your Data
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, controlled access to systems and data, staff training and procedures designed to maintain the confidentiality and integrity of personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these rights may include:
The right of access, meaning you can request a copy of the personal data we hold about you and information about how it is processed.
The right to rectification, meaning you can request that inaccurate or incomplete personal data is corrected or updated.
The right to erasure, meaning you can ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
The right to restrict processing, meaning you can request that we limit the processing of your personal data where you contest its accuracy, object to its processing or where processing is unlawful.
The right to data portability, meaning you can request that certain personal data is provided to you or to another controller in a structured, commonly used and machine readable format, where this is technically feasible and where the processing is based on consent or contract and carried out by automated means.
The right to object, meaning you can object to the processing of your personal data based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds which override your interests and rights or where processing is required for legal claims.
Where we rely on consent as a lawful basis, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact methods published on our official materials. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been violated. We would encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operational needs or legal requirements. Any updated version will apply to all personal data held by Storage Shepherds Bush at the time of the update. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
