Storage Millwall Privacy Policy
This Privacy Policy explains how Storage Millwall collects, uses, stores and protects personal data relating to all Storage Millwall customers in the area, as well as prospective customers and visitors to our premises or services. We are committed to processing your personal data in accordance with the UK General Data Protection Regulation and other applicable data protection laws.
By using our storage services, visiting our premises, or otherwise interacting with Storage Millwall, you acknowledge that you have read and understood this Privacy Policy.
Who this Privacy Policy applies to
This Privacy Policy applies to all individuals who use, have used, or have expressed an interest in using Storage Millwall services in the area. This includes individual customers, business customers, authorised representatives, guarantors, emergency contacts and any person whose personal data we process in connection with providing our storage services.
Personal data we collect
We collect and process different types of personal data depending on your relationship with us and how you choose to interact with Storage Millwall. The categories of data we may collect include:
Identification and contact details such as name, postal address, identification document details, and other information necessary to verify your identity and manage your account.
Contract and account information such as storage unit number, rental terms, payment history, communication records, and preferences relating to your use of our services.
Payment and billing information such as details of payments made, billing address, and records of invoices and receipts. We do not store full payment card details. Where card payments are taken, these are processed securely by a payment processor acting on our behalf.
Security and access information such as CCTV footage from our premises, access logs, entry and exit records, and details of authorised persons permitted to access your storage unit.
Communication data such as records of correspondence and enquiries, including information provided when requesting a quote, making a complaint, or asking us for support.
Technical and usage information such as information about your interactions with our online services, including log data and basic device information where relevant for providing and securing those services.
How we collect your data
We collect personal data directly from you when you contact us, request a quote, enter into a storage agreement, visit our premises, or otherwise communicate with us. We may also receive personal data about you from third parties, for example where you have been referred to us by a business partner or have authorised another person to act on your behalf.
In addition, some data is collected automatically when you access our premises through security systems such as CCTV and access control, or when you use our online services.
Lawful bases for processing
We only process your personal data when we have a lawful basis under data protection law. Depending on the circumstances, we rely on one or more of the following lawful bases:
Contractual necessity. We process personal data where it is necessary to enter into or perform a contract with you, including to manage your storage agreement, process payments, provide customer service, maintain your account, and manage access to your storage unit.
Legal obligation. We process personal data where this is required for us to comply with legal and regulatory obligations, such as tax and accounting requirements, identity checks, record keeping, responding to lawful requests from public authorities, and health and safety obligations on our premises.
Legitimate interests. We process personal data where it is necessary for our legitimate interests or those of a third party, and where these interests are not overridden by your rights and freedoms. These interests include safeguarding our premises and property through CCTV and access controls, preventing and detecting fraud or misuse of services, managing and improving our services, handling complaints and disputes, and promoting and developing our business in a proportionate manner.
Consent. In specific situations, we may rely on your consent, for example for certain types of marketing communications where consent is required. Where we rely on consent, you are free to withdraw it at any time and we will stop processing your data for that purpose.
How we use your personal data
We use your personal data for the following purposes:
To provide, manage and administer storage services, including setting up your account, handling bookings, managing access, and providing customer support throughout your stay.
To process payments, issue invoices, manage billing queries, and maintain accounting records.
To communicate with you about your contract, including changes to terms, notices about your unit, renewals, and important information relating to security or service interruptions.
To protect our premises, staff, customers and property through security measures such as CCTV monitoring and access control systems, and to investigate incidents, accidents or suspected illegal activities.
To handle complaints, resolve disputes, and enforce our contractual rights.
To conduct internal training, quality assurance and service improvement activities, in a way that respects your privacy.
To send you information about our services and offers where permitted by law and in line with your marketing preferences.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. The specific retention period depends on the type of data and the context in which it was provided.
Customer contract records, billing information, and key correspondence are generally kept for a period required by applicable legislation after the end of your contract, to comply with our legal obligations and to protect our legal position.
CCTV recordings and access logs are retained for limited periods, which are determined by our security needs and legal obligations. These periods are kept under review and are no longer than is necessary for the purposes for which the data is processed.
Where data is no longer required, it will be securely deleted, anonymised or otherwise removed from our systems.
Data processors and sharing
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services such as payment processing, secure data storage, customer relationship management, IT support, security monitoring and other operational services necessary to run Storage Millwall.
When we use data processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only in accordance with our instructions, in compliance with GDPR, and with suitable security measures.
We may also share data with professional advisers, insurers, law enforcement agencies, courts, regulatory bodies or other third parties where this is necessary to comply with legal obligations, to protect our rights or property, or to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International transfers
If it becomes necessary to transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other recognised mechanisms, so that your data remains adequately protected.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how we use it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other legal basis to retain it.
Right to restriction. You have the right to request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our use of it.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis. We will then stop processing unless we have compelling legitimate grounds which override your interests, rights and freedoms or where processing is necessary for legal claims. You also have an absolute right to object to direct marketing at any time.
Right to data portability. Where our processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine readable format and to have that data transmitted to another controller where technically feasible.
If you wish to exercise any of your rights, please contact us using our usual contact channels. We may need to verify your identity before responding to your request.
Security of your data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, access controls, staff training and regular review of our procedures. While we take reasonable steps to safeguard your data, no system can be guaranteed as completely secure.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service offerings. The latest version will always apply to our processing of your personal data. You are encouraged to review this Privacy Policy periodically so that you remain informed about how we collect and use personal data.
