Storage Fitzrovia Privacy Policy
This Privacy Policy explains how Storage Fitzrovia collects, uses, stores and protects personal data. It applies to all Storage Fitzrovia customers in our local operating area, including prospective customers, current customers and former customers who have used our storage services.
We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy describes what information we collect, the lawful basis on which we process it, how long we keep it, which third parties we may share it with, and the rights you have over your personal data.
Scope and Data Controller
This Privacy Policy applies to all personal data processed by Storage Fitzrovia in connection with enquiries, reservations, contracts and the use of our storage facilities and related services within our service area.
Storage Fitzrovia acts as the data controller for the personal data described in this policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in a lawful, fair and transparent manner.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and how you use our services. This may include:
Identification and contact details such as full name, postal address, billing address, contact address, and preferred contact method.
Account and contract information such as unit number, contract start and end dates, services selected, payment history, and communications related to your account.
Payment and billing data such as partial card details as made available by payment processors, billing history and amounts paid. We do not store full card details on our own systems.
Verification data such as copies or details of identity documents where required to verify your identity, prevent fraud, or comply with legal obligations.
Access and security information such as entry logs, key fob or code usage data, and records of access to the premises where this is necessary to maintain site security and safety.
Video surveillance data from CCTV cameras in and around our premises for safety, security and crime prevention purposes. Images may capture customers, visitors, vehicles and activities on or near our site.
Communication records including emails, written correspondence, call notes and other messages between you and Storage Fitzrovia relating to enquiries, bookings, service issues or feedback.
Technical data such as basic information about how you accessed our website or online services, including date and time of access, pages visited and general device information, where this is necessary for security, maintenance and improvement of our services.
Purposes and Lawful Basis for Processing
We process your personal data only when we have a lawful basis to do so. Depending on the context, we may rely on one or more of the following lawful bases:
Performance of a contract. We process data that is necessary to enter into and fulfill our contract with you, including setting up your account, managing your storage unit, processing payments, providing customer service and handling any queries or disputes.
Compliance with legal obligations. We process certain data to meet our legal and regulatory obligations, for example maintaining financial and tax records, assisting law enforcement where required, complying with anti fraud and anti money laundering rules, and ensuring health and safety on our premises.
Legitimate interests. We process data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Examples include using CCTV for security, maintaining access logs, preventing and detecting fraud, improving our services, managing debt recovery, and keeping basic records of past customers for reference and risk management.
Consent. In some cases we may rely on your consent, for example for certain types of marketing communications where consent is required by law. Where we rely on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Contract and account data is generally kept for the duration of your contract and for a reasonable period afterwards to deal with queries, resolve disputes, enforce our terms and meet our legal obligations. This period may vary depending on the type of data and applicable laws.
Financial and transaction records are typically retained for the period required by tax and accounting regulations and then securely deleted or anonymised.
CCTV and access logs are kept for a limited period that is appropriate for security and incident investigation purposes, unless a specific recording or record needs to be kept longer in connection with an investigation or legal claim.
Where data is no longer needed for any lawful purpose, it will be securely deleted, anonymised, or removed from our systems in a controlled manner.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with third parties in the following circumstances and only to the extent necessary for the relevant purpose.
Service providers and processors. We may engage third party companies as data processors to support the operation of our business, for example providers of payment processing services, customer management systems, secure data hosting, accounting and professional services, security and maintenance services, and communication tools. These providers are contractually required to handle your data securely, use it only according to our instructions, and comply with applicable data protection laws.
Professional advisers. We may share data with our legal, financial or risk management advisers where required for advice, audits, or the management of potential or actual legal claims.
Authorities and law enforcement. We may disclose personal data where we are required to do so by law, regulation, or court order, or when we believe it is necessary to protect our rights, the safety of individuals, or to assist in the prevention and detection of crime, including providing CCTV footage or access logs where lawfully requested.
Business transfers. In the event that we sell, transfer or merge parts of our business or assets, your data may be transferred to the new owner or operator as part of that transaction, subject to appropriate confidentiality and data protection safeguards.
International Data Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is stored or accessed from such locations, we take steps to ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses or other approved mechanisms to ensure that your personal data receives a level of protection essentially equivalent to that provided by applicable data protection laws.
Data Security
We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include secure access controls, restricted access to personal data, appropriate physical security at our premises, and regular review of our procedures and security practices.
While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. We maintain incident response procedures to deal with any suspected personal data breaches, and where required by law, we will notify you and the relevant supervisory authorities of such breaches.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification. You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and there is no legal reason for us to continue processing it.
Right to restriction of processing. You may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or where you have objected to our use of it.
Right to object. You may have the right to object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. You also have the right to object at any time to processing of your personal data for direct marketing.
Right to data portability. In certain circumstances, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transmit that data to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, please contact us using the contact details provided on our website or at our premises so that we can verify your identity and respond to your request in accordance with applicable law.
Complaints and Supervisory Authority
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the country where you live, work, or where you believe a breach of data protection law has occurred.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any changes will take effect from the date the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.
The continued use of Storage Fitzrovia services within our operating area after any changes to this Privacy Policy will be taken as acceptance of those changes to the extent permitted by law.
