Self Storage Marylebone Privacy Policy
This Privacy Policy explains how Self Storage Marylebone collects, uses, stores, and protects personal data relating to its customers and prospective customers. It applies to all Self Storage Marylebone customers and enquirers in the Marylebone area and surrounding locations, whether you contact us online, by post, or in person at our facilities.
Data Controller
Self Storage Marylebone is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us. This may include:
Identity and contact details, such as your full name, postal address, billing address, contact address, and any other address you give to us. We may also collect your preferred contact method.
Account and contract information, such as customer reference numbers, storage unit details, contract start and end dates, payment terms, and correspondence relating to your storage agreement.
Payment and billing information, such as partial card details, bank information provided for payment, payment history, and invoices. We do not store full card details where this is not necessary.
Verification and security information, which may include copies or details of identification documents you choose to provide, such as a driving licence or passport details, and information required to meet fraud prevention and anti money laundering requirements where applicable.
Communication data, such as email correspondence, letters, call notes, and records of enquiries, feedback, or complaints.
Usage and facility data, such as dates and times of access to our premises, access control logs, and information about the storage unit you occupy.
CCTV images, where you visit our premises, as part of our site security and crime prevention measures.
How We Collect Your Data
We collect personal data directly from you when you enquire about our services, request a quote, sign up for a storage agreement, make a payment, or contact us with a query. We may also receive data from third parties who act on your behalf, such as authorised representatives or comparison sites, where you have provided your information to them.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the situation, we rely on the following lawful bases:
Contract. We process your data when it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, issuing invoices, and handling payments.
Legal obligation. We process your data when required to comply with legal and regulatory obligations, including tax and accounting rules, fraud prevention requirements, and obligations to law enforcement or regulatory authorities.
Legitimate interests. We process data when it is necessary for our legitimate business interests and these are not overridden by your rights. This includes securing our premises, improving our services, handling customer enquiries, recovering debts, and protecting our property and staff.
Consent. On some occasions we may rely on your consent, for example for certain marketing communications where consent is required by law. When we rely on consent, you can withdraw it at any time.
Purposes for Which We Use Your Data
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your storage contract, operating access control systems, and providing customer support.
To manage billing and payments, including issuing invoices, processing payments, managing arrears, and carrying out debt collection activities where necessary.
To maintain security and prevent crime, including the use of access control systems, CCTV, and incident investigation.
To respond to enquiries and customer service requests, including requests relating to availability, prices, unit sizes, and changes to your account.
To meet legal and regulatory obligations, including record keeping, tax and audit requirements, and responding to lawful requests from public authorities.
To improve and manage our business, including monitoring usage of our facilities, planning capacity, and enhancing customer experience.
To send service communications, such as changes to your contract, important safety notices, facility updates, and changes to this Privacy Policy.
To send marketing communications, where permitted, about our storage services, promotions, and related offerings. You can opt out at any time.
Data Sharing and Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors may provide services such as payment processing, billing systems, customer relationship management tools, IT hosting and support, CCTV maintenance, and secure document disposal.
We ensure that all processors act only on our written instructions, provide appropriate security measures, and are bound by confidentiality obligations and data processing agreements required by data protection law.
In some circumstances we may share data with other data controllers, including banks and financial institutions for payment processing, insurers in relation to cover for stored goods if applicable, debt collection agencies for the recovery of unpaid fees, professional advisers such as accountants and lawyers, and law enforcement or regulatory bodies where required by law or to protect our rights and the rights of others.
We do not sell your personal data.
International Transfers
Where we use service providers located outside the United Kingdom or where data is stored on servers in other countries, we take steps to ensure an adequate level of protection for your personal data. This may include using countries that have been recognised as providing an adequate level of protection, or entering into contracts containing standard data protection clauses approved by relevant regulators.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
In general, we retain customer and contract records for a period required by applicable law after the end of your agreement, usually several years, to enable us to answer queries, resolve disputes, and meet our legal obligations. CCTV images are retained for a limited period necessary for security and investigation purposes, unless a longer retention is required because of a specific incident. Marketing contact data is retained until you unsubscribe or until we determine that it is no longer appropriate to contact you.
When data is no longer required, we securely delete or anonymise it.
Your Data Protection Rights
You have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions and exemptions. Your rights include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data together with information about how it is used.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to retain it.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to data portability. Where we process your data on the basis of consent or contract by automated means, you may request a copy in a commonly used, machine readable format and ask us to transfer it to another controller where technically feasible.
Right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds. You always have the right to object to direct marketing.
Rights relating to automated decision making. You have rights in respect of decisions based solely on automated processing that have legal or similarly significant effects. Self Storage Marylebone does not typically carry out such automated decision making.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions about how we handle your personal data, you can contact us using the details available on our official customer communications and documentation.
You also have the right to lodge a complaint with the UK supervisory authority for data protection if you are unhappy with how we have handled your personal data. We encourage you to contact us first so that we have the opportunity to address your concerns.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updates will be made available through our usual customer information channels, and the revised version will apply from the date it is published. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
Scope of This Policy
This Privacy Policy applies to all Self Storage Marylebone customers and prospective customers in the Marylebone area and surrounding locations who use or enquire about our self storage services. By engaging with us, you acknowledge that you have read and understood this Privacy Policy.
