Storage Brompton Privacy Policy
This Privacy Policy explains how Storage Brompton collects, uses, stores and protects personal data relating to customers and prospective customers. It applies to all Storage Brompton customers in the area, as well as anyone who contacts us to enquire about our services or interacts with us in the course of our business.
We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy is intended to provide transparent information about what we do with personal data and the choices you have regarding your information.
Personal Data We Collect
Storage Brompton collects and processes different types of personal data depending on your relationship with us. The information we may collect includes:
Identification and contact details such as your name, postal address, billing address, contact address, and any other address you provide, as well as your preferred contact details for correspondence.
Account and contract information such as details of your storage unit or service, dates and terms of your agreement, payment status, invoices, and correspondence relating to your account.
Payment and transaction information such as payment records, amounts paid, payment dates, and the method of payment. Where required, we may also record partial payment card details in compliance with applicable payment security standards, but we do not store full card numbers or security codes.
Communication records such as records of enquiries, complaints, requests, feedback, and any communications you send to us or that we send to you, including the content and date of those communications.
Usage and operational data such as information relating to access to the storage facility, including dates and times of entry and exit where access control systems are in place. We may also collect information relating to your use of our services for security and operational purposes.
Security and CCTV data such as images captured on CCTV systems in and around our premises where these are in operation. CCTV is used for security, safety, and asset protection purposes in accordance with applicable laws.
Marketing preferences and interaction data such as your stated preferences about how we should contact you for marketing, records of consent where required, and information about your engagement with marketing communications that we send.
Lawful Basis for Processing
We only process personal data where we have a valid lawful basis. Depending on the context, we may rely on one or more of the following grounds:
Performance of a contract: We process personal data where it is necessary to enter into, manage, or perform a contract with you. This includes processing data to set up your storage agreement, manage your account, process payments, and provide customer support.
Compliance with legal obligations: We process personal data where necessary for compliance with legal and regulatory requirements. This may include record keeping obligations, tax and accounting requirements, and cooperation with law enforcement or regulatory authorities where required by law.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, provided that those interests are not overridden by your rights and freedoms. Our legitimate interests include ensuring the security of our premises and property, managing and improving our services, preventing fraud, and handling queries and disputes.
Consent: Where required by law, for example for certain types of marketing communications, we may rely on your consent to process your personal data. When we rely on consent, you are free to withdraw your consent at any time, and we will stop the relevant processing activity.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide and manage storage services: This includes managing customer accounts, setting up and administering contracts, processing payments, and providing customer service and support.
To operate and secure our premises: This includes operating access control and CCTV systems where used, monitoring access to our facilities, and protecting the safety of individuals and property.
To manage our relationship with you: This includes communicating with you about your account or contract, responding to your enquiries and complaints, notifying you about changes to our services or policies, and seeking feedback to improve our services.
To comply with legal and regulatory obligations: This includes maintaining necessary records for tax, accounting, and audit purposes, responding to lawful requests from public authorities, and fulfilling other legal obligations.
To conduct marketing and promotions: Where permitted, we may use your contact details to send you information about Storage Brompton services, offers, and updates that may be of interest to you. You can opt out of marketing at any time using the contact methods provided in our communications or by contacting us directly.
To protect our legal rights: This includes managing and resolving disputes, enforcing contracts, and establishing, exercising, or defending legal claims.
Data Retention
Storage Brompton keeps personal data only for as long as it is reasonably necessary for the purposes for which it was collected and to meet any legal, regulatory, tax, accounting, or reporting requirements.
In general, we will retain customer account and contract records for a defined period after the end of the contractual relationship, to manage any disputes, queries, or claims and to comply with record keeping obligations. Payment records and related financial information are retained for a period consistent with legal and tax requirements.
CCTV footage, where collected, is typically retained for a limited period necessary for security and incident investigation purposes, unless a longer retention period is required in connection with a specific investigation or legal claim.
When personal data is no longer required, we will delete it or anonymise it so that it can no longer be linked to an identifiable individual.
Data Processors and Sharing of Personal Data
Storage Brompton may share personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services that help us operate our business and deliver our services, such as payment processing, information technology and system support, customer service tools, document storage, and professional services such as accountants or legal advisers.
When we use processors, we remain responsible for your personal data and we ensure that appropriate contractual and technical safeguards are in place. Processors are only permitted to process personal data according to our documented instructions, and they must protect the data in line with applicable data protection laws.
We may also share personal data with other third parties in limited circumstances where we act as an independent controller, such as with insurers, banks or payment providers, and public authorities where we are legally required to do so. In these cases, we only share personal data to the extent necessary and in accordance with a valid legal basis.
We do not sell your personal data. Any sharing of personal data is carried out with appropriate safeguards in place and in compliance with data protection legislation.
International Data Transfers
Where we use service providers or systems that are located outside the United Kingdom or the European Economic Area, personal data may be transferred to countries that do not have the same level of data protection laws. In such cases, we ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent arrangements, to protect your data and ensure that it continues to be handled in accordance with applicable data protection requirements.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Brompton customers in the area, subject to certain legal conditions and exemptions.
Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, along with information about how we use it.
Right to rectification: You have the right to request that we correct or complete personal data that is inaccurate or incomplete.
Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data. This right is not absolute and may be subject to our need to retain data for legal or contractual reasons.
Right to restriction: You have the right to request that we restrict the processing of your personal data in certain situations, for example where you contest the accuracy of the data or you have objected to our processing and we are considering that objection.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have the right to object at any time to the use of your personal data for direct marketing.
Right to data portability: Where applicable, you may have the right to receive personal data you provided to us in a structured, commonly used and machine readable format, and to transmit that data to another controller.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Changes to This Privacy Policy
Storage Brompton may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will be effective from the date the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
