Self Storage Soho Privacy Policy
This Privacy Policy explains how Self Storage Soho collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Self Storage Soho customers and users of our services in the local area, whether you rent a storage unit, make an enquiry, visit our premises or interact with us online or offline.
We are committed to complying with the UK General Data Protection Regulation and other applicable data protection laws. This Policy describes the types of personal data we collect, the purposes for which we process it, the lawful bases we rely on, how long we keep it, who we share it with, and the rights you have in relation to your personal data.
Data Controller
Self Storage Soho is the controller of the personal data described in this Privacy Policy. As controller, we are responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out in compliance with applicable data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you interact with Self Storage Soho or use our storage services:
Identification and contact details, such as name, postal address, billing address, proof of identity details, nationality, and preferred contact methods. Account and contract information, such as customer account number, contract details, storage unit number, start and end dates of your rental agreement, and communication history relating to your contract. Payment and billing information, such as payment method, billing history, invoice details and records of payments made. Usage and interaction data, such as details of your communications with us, your enquiries about our services, and records of any feedback or complaints. Security and access data, such as CCTV footage recorded at our premises, access logs for entry to the facility, and records of incidents or accidents on site. Technical data, such as basic device and browser information where you use our online services.
We collect data directly from you when you complete our forms, sign a contract, correspond with us, visit our premises or otherwise provide information to us. We may also generate data about you in the course of providing our services, such as account and billing records and access logs.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are as follows:
To provide storage services and manage our relationship with you. We use identification, contact, payment and contract data to set up your account, prepare and administer your storage contract, process payments, respond to enquiries and provide customer service. The lawful basis is that processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
To comply with legal and regulatory obligations. We may process identification, contract, billing and security data in order to comply with laws relating to taxation, accounting, health and safety, anti‑fraud measures, crime prevention and other regulatory requirements. The lawful basis is that processing is necessary for compliance with a legal obligation to which we are subject.
To protect our legitimate interests and those of others. We may use your data to prevent and detect fraud or other unlawful activity, to protect the security of our premises, staff, customers and property, to manage access control, to handle complaints or disputes, and to improve our services. This includes the use of CCTV and access logs. The lawful basis is our legitimate interests, provided that your interests and fundamental rights do not override those interests.
To communicate with you about our services. We may contact you with information related to your existing contract or enquiries, such as notices, updates, changes to terms, or service messages. The lawful basis is the performance of a contract or our legitimate interests in running our business and keeping you informed.
To send marketing communications. Where permitted by law, we may send you information about products or services similar to those you have already purchased from us. In some cases we may rely on your consent for electronic marketing. You can opt out of marketing communications at any time.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected and to meet legal, accounting or reporting requirements. The precise retention period will depend on the type of data and the applicable legal obligations.
In general, we retain customer account and contract data for a number of years after the end of your storage agreement, so that we can respond to queries or disputes and comply with our legal obligations. Payment and billing records are kept for the period required by tax and accounting law. CCTV recordings and access logs are retained for a shorter period, unless a particular recording or log is required for the investigation of an incident or for legal proceedings.
When personal data is no longer needed, it will be securely deleted, anonymised or otherwise processed so that it can no longer be linked to you.
Data Processors and Other Recipients
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may include providers of data storage and IT services, payment processing services, customer management systems, security and access control systems, and professional advisors such as accountants or auditors.
These processors are only permitted to process your personal data in accordance with our documented instructions and for the specified purposes. We require all processors to implement appropriate technical and organisational measures to protect your personal data and to comply with data protection law.
We may also share personal data with other third parties where required by law or where necessary to protect our rights or the rights and safety of others. This may include law enforcement bodies, regulatory authorities, courts or legal advisors. Where we are legally permitted to do so, we will consider the impact on your privacy before disclosing personal data and will disclose only what is necessary.
We do not sell your personal data to third parties.
International Transfers
Where it is necessary to transfer personal data outside the United Kingdom or European Economic Area, we will ensure that an adequate level of protection is in place as required by data protection law. This may include using standard contractual clauses or other safeguards approved by the relevant data protection authorities.
Security of Your Personal Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include physical security at our premises, access controls, staff training, and policies and procedures designed to maintain confidentiality and integrity.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data held by Self Storage Soho. These rights apply to all Self Storage Soho customers in our area, subject to certain conditions and exemptions.
You have the right to request access to your personal data and to receive a copy of the information we hold about you, together with certain details about how we process it. You have the right to request rectification of any inaccurate or incomplete personal data. You have the right to request erasure of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal ground for processing.
You have the right to request restriction of processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing. You have the right to object to processing carried out on the basis of our legitimate interests, including profiling based on those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that our processing of your personal data infringes data protection law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or improvements in how we protect your personal data. Any updated version will apply from the date it is made available and will supersede previous versions. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.
