Storage Chessington Privacy Policy
This Privacy Policy explains how Storage Chessington collects, uses, stores and protects personal data relating to individuals who use our storage services in the Chessington area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws, and how you can exercise those rights.
This Privacy Policy applies to all Storage Chessington customers in the Chessington area, including prospective customers who make enquiries, current customers with active storage contracts and former customers whose data we continue to hold for legitimate purposes.
Who we are and scope of this policy
Storage Chessington is the controller of the personal data described in this Privacy Policy. As controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
This Privacy Policy covers personal data collected through our premises, our online forms and any other communication channels we use to interact with you in connection with our storage services.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and the services you use. The main categories of personal data we collect include the following.
Identification details, such as your full name, date of birth and an identification document reference where required for verification and security purposes.
Contact details, such as your home or billing address, service address, and any other address you provide, as well as information you provide about an alternative contact person or emergency contact if you choose to nominate one.
Account and contract information, such as your customer reference number, storage unit details, contract start and end dates, pricing information, communications relating to contract negotiations, and records of any changes to your agreement.
Payment and billing information, such as records of payments made, payment method type and billing history. Where card payments are taken, card details are processed by our payment service provider and are not retained by us beyond what is strictly necessary for transaction processing and compliance.
Communication records, such as enquiries, complaints and any correspondence you send to us, as well as internal notes documenting how we respond to your requests.
Security and access data, such as CCTV footage captured on and around our premises, access log data for entry systems, visitor logs and incident reports where relevant for the protection of property and safety.
Website usage data, such as technical and usage information collected when you visit or interact with our online information pages, including information that helps us understand how visitors find and use our site. This may involve the use of cookies or similar technologies, subject to applicable law and your preferences.
Lawful bases for processing your data
We process your personal data only when we have a lawful basis to do so under data protection law. Depending on the specific processing activity, one or more of the following lawful bases will apply.
Contract performance. We process personal data to enter into and perform our contract with you, including setting up your customer account, providing storage services, processing payments, managing renewals and responding to service requests.
Legal obligations. We process personal data where this is necessary to comply with our legal obligations, for example to keep accurate financial records, cooperate with lawful requests from authorities and comply with health and safety and security requirements.
Legitimate interests. We process personal data where we have a legitimate interest in doing so and where this is not overridden by your rights and interests. This includes using CCTV and access logs to maintain security, improving and managing our services and facilities, recovering unpaid fees and defending our legal rights.
Consent. In some limited cases we may rely on your consent, for example for certain optional marketing communications or optional cookies. Where we rely on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
How we use your personal data
We use the personal data we collect about you for the following purposes.
To create and manage your customer account and storage contract, including verifying your identity when required, confirming bookings and managing access arrangements to your storage unit.
To process payments, manage billing and handle any queries relating to invoices, charges or account balances.
To communicate with you about your contract, including sending important information about your storage unit, contract terms, price changes or operational updates affecting your use of our facilities.
To maintain the security and safety of our premises, customers, staff and stored property, including the operation of CCTV systems, access control measures and incident reporting and investigation.
To manage our relationship with you, including responding to your enquiries, handling complaints and collecting feedback to help improve our services.
To comply with legal and regulatory requirements, including accounting, taxation, health and safety and obligations to cooperate with competent authorities where required by law.
To protect our rights and interests, including the prevention and detection of fraud or other unlawful activities and the establishment, exercise or defence of legal claims.
Data processors and sharing of personal data
We may engage carefully selected third party service providers to act as data processors on our behalf. These processors are only permitted to process your personal data in accordance with our documented instructions and must implement appropriate technical and organisational measures to protect your data.
Types of processors we may use include payment service providers to process card payments, IT and cloud storage providers to host and maintain our systems and data, security service providers to support the operation and maintenance of CCTV and access control systems, and professional advisers such as accountants or legal advisers where they provide services to us.
We may share personal data with other third parties acting as independent controllers when this is necessary to comply with a legal obligation, respond to lawful requests from public authorities, prevent or investigate suspected criminal activity or protect our rights, property or the safety of others.
Where personal data is transferred outside the United Kingdom or European Economic Area, we will only do so where appropriate safeguards are in place in accordance with data protection law, such as adequacy regulations or standard contractual clauses.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting or reporting requirements.
In general, we retain customer account and contract information for a period after your contract ends in order to manage any queries, potential disputes or legal claims. Financial and billing records are retained for the period required by applicable tax and accounting laws. CCTV recordings and access logs are retained for shorter periods, typically only for as long as is necessary for security and incident investigation, unless a longer retention period is required in connection with a specific incident or legal claim.
When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions.
Right of access. You have the right to obtain confirmation as to whether we process your personal data and, where we do, to request a copy of that data together with certain related information.
Right to rectification. You have the right to request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request the deletion of your personal data, for example where the data is no longer necessary for the purposes for which it was collected or where processing is based on consent that you have withdrawn.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to object. You have the right to object to processing carried out on the basis of our legitimate interests, on grounds relating to your particular situation. We will stop the processing unless we have compelling legitimate grounds to continue or the processing is for the establishment, exercise or defence of legal claims.
Right to data portability. In certain cases, you have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit that data to another controller, where this is technically feasible.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is the Information Commissioner.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our data processing practices or applicable legal requirements. We will make the updated version available at our premises or through our online information pages and indicate the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
