Storage Lambeth Privacy Policy
This Privacy Policy explains how Storage Lambeth collects, uses, shares and protects personal data relating to our customers in the Lambeth area. It is intended to be clear and transparent and to comply with the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Lambeth customers and prospective customers who live in, store goods in, or otherwise use our services in the Lambeth area.
Scope of this Privacy Policy
This Privacy Policy applies when you contact Storage Lambeth, request a quote, enter into a storage agreement, visit our premises, make a payment, or otherwise interact with us as a customer or potential customer. It covers information collected in person, by post, and via any online tools we operate, to the extent they are used to provide storage and related services in the Lambeth area.
Types of Personal Data We Collect
Depending on how you interact with Storage Lambeth, we may collect and process the following categories of personal data about you:
Identification data, such as your full name, date of birth and proof of identity details shown on documents you present, for example a passport or driving licence.
Contact details, such as your home address, billing address, and any alternative contact address, together with any contact name you nominate as an emergency or authorised contact.
Account and contract details, such as your customer account number, storage unit number, contract start and end dates, and information relating to your chosen services, notices given, and correspondence related to your agreement.
Payment and billing information, such as payment method, payment history, and invoices. We do not store full card details if you pay by card; these are processed securely by our payment processors.
Security and access information, such as CCTV footage in and around our facilities, access logs showing when units or gates are accessed, and records of incidents or security checks.
Communication records, such as details of enquiries, complaints, or feedback you provide to us, and notes from telephone or in-person conversations where this is necessary for managing your contract or our services.
Lawful Basis for Processing Your Personal Data
Storage Lambeth processes personal data only where we have a lawful basis under the UK GDPR. Depending on the activity, this may include:
Contract performance: We process your identification, contact, account and payment data to provide storage services, manage your account, accept and allocate payments, communicate about your contract, and handle renewals or termination.
Legal obligations: We may process your data where required by law, such as for tax and accounting requirements, fraud prevention, and to comply with law enforcement requests or court orders.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and these are not overridden by your rights. This may include maintaining the security of our premises through CCTV and access logs, improving our services, managing business records, and handling customer queries efficiently.
Consent: In limited cases, we may ask for your consent, for example if we wish to send you certain types of marketing communications that are not already covered by legitimate interests. Where we rely on consent, you can withdraw it at any time, and we will stop that particular processing.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To create and administer your customer account and storage contract, including verifying identity, setting up units, and managing access rights.
To process payments, issue invoices, handle arrears or disputes, and maintain accurate financial records.
To maintain the security and safety of our premises, staff, and customers through access controls, CCTV monitoring and incident management.
To respond to your enquiries and to provide customer service and support throughout the duration of your relationship with Storage Lambeth.
To manage our business operations, including auditing, reporting, service improvement and training of staff.
To send you important notices relating to your contract, such as changes to terms, pricing or facility rules, and where appropriate, to provide information about related services that may be of interest, in accordance with data protection and marketing laws.
Data Retention
Storage Lambeth retains personal data only for as long as necessary to fulfil the purpose for which it was collected, and to meet legal, accounting or reporting requirements.
Contract and account records, including core identification and contact information, are generally retained for a period after your contract ends, to respond to any queries or claims and to comply with legal obligations. This retention period will reflect statutory requirements and limitation periods for legal claims.
Payment and billing information is retained in line with applicable tax and accounting laws.
CCTV footage and access logs are retained for a shorter period, which is kept no longer than is necessary for security, incident investigation and, where relevant, handover to authorities.
When personal data is no longer required, we will securely delete or anonymise it so that you can no longer be identified.
Data Processors and Third Parties
Storage Lambeth may use carefully selected third party service providers to process personal data on our behalf. These providers act as data processors and are only permitted to process your data in accordance with our written instructions and for specified purposes. They are required to implement appropriate technical and organisational measures to protect your data.
Processors may include providers of payment processing services, customer management systems, document storage, IT support, security, and professional advisers such as accountants. We share only the minimum personal data necessary for them to provide their services to us.
Where required by law, we may share personal data with regulatory bodies, law enforcement agencies, courts or other public authorities. We may also share limited information with debt recovery agencies where this is necessary to enforce our contractual rights.
Storage Lambeth does not sell your personal data.
International Data Transfers
Where any of our service providers process personal data outside the United Kingdom, Storage Lambeth will ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to ensure your data remains protected to standards equivalent to UK data protection law.
How We Protect Your Personal Data
Storage Lambeth takes appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures may include restricted access controls, secure storage, encryption or pseudonymisation where appropriate, staff training, and regular review of our security arrangements.
Your Data Protection Rights
As a customer or prospective customer of Storage Lambeth in the Lambeth area, you have a number of rights in relation to your personal data under the UK GDPR, subject to certain conditions and exemptions. These include:
Right of access: You can request confirmation of whether we hold personal data about you and obtain a copy of that data, together with information about how and why it is processed.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: In some circumstances, you can request that we delete your personal data. This is not an absolute right and may not apply where we still need the data for legal or contractual reasons.
Right to restriction: You can ask us to restrict the processing of your data in certain situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling based on those interests. You also have an absolute right to object to direct marketing.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your data in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible.
If you exercise any of these rights, we may need to ask you for information to confirm your identity before acting on your request. We will respond within the time limits set by law.
Changes to This Privacy Policy
Storage Lambeth may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. Any updated version will apply to all new and existing customers in the Lambeth area from the date it is issued.
Complaints and Further Information
If you have concerns about how Storage Lambeth handles your personal data, you can raise these with us and we will do our best to address them. You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed.
