Storage Morden Privacy Policy
This Privacy Policy explains how Storage Morden collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and other applicable data protection laws. By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope and who this applies to
This Privacy Policy applies to all Storage Morden customers and prospective customers in our service area, including individuals, business contacts, and anyone who communicates with us about our services. It covers personal data that we collect directly from you, from your use of our services, and from limited third-party sources as described in this document.
What personal data we collect
We only collect personal data that we need for clearly defined purposes. Depending on how you interact with us, we may collect the following categories of information:
Identification and contact details, such as full name, postal address, billing address, and preferred contact details. Account and contract information, such as customer reference numbers, storage unit numbers, contract start and end dates, payment history, and records of services used. Payment-related information, such as partial payment card details processed through secure payment providers, bank transfer references, and receipts. We do not store full card details on our own systems. Communication data, such as enquiries, complaints, feedback, and records of your communication preferences. Usage and security data, such as access control records, gate or door entry logs, visit times, and basic technical information related to the secure operation of our site. Regulatory and verification data, such as copies of identity documents and proof of address, where required for fraud prevention, security, or legal compliance.
How we collect personal data
We collect personal data in several ways:
Directly from you when you make an enquiry, request a quote, sign a storage agreement, make a payment, or update your details. Through our premises and systems when you access our storage facility, use access control systems, or interact with our staff. From third parties where lawful, for example payment processors that confirm payment status, or references provided by you, or publicly available information used for fraud prevention and credit checking where applicable.
Lawful basis for processing
We process your personal data only when we have a lawful basis under the UK General Data Protection Regulation. The main lawful bases we rely on are:
Contract: We process data that is necessary to enter into or perform our contract with you, including setting up your account, managing your storage unit, taking payments, and providing customer service. Legal obligation: We process data where it is necessary to comply with legal and regulatory requirements, such as tax and accounting rules, fraud prevention, and law enforcement requests. Legitimate interests: We process data where it is in our legitimate interests to do so, provided that your interests and fundamental rights do not override those interests. This includes operating and securing our facilities, managing and improving our services, and keeping records of communications. Consent: In some limited cases, we may rely on your consent, for example for certain types of direct marketing if required by law. Where we rely on consent, you can withdraw it at any time.
How we use personal data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your account, preparing and managing your agreement, administering access to the facility, and handling enquiries and support. To process payments and manage billing, including issuing invoices, recording payments, handling arrears, and dealing with refunds where applicable. To maintain safety and security, including controlling and monitoring access to our premises, preventing and detecting unlawful activity, and protecting property. To manage our business, including record keeping, auditing, reporting, responding to disputes or complaints, and maintaining accurate customer databases. To comply with legal requirements, including responding to lawful requests from authorities, complying with tax and accounting obligations, and maintaining records required by law. To communicate with you, including sending service messages about your contract, storage unit or payments, and where permitted, sending information about similar services that may be of interest to you.
Data processors and sharing of personal data
We may share your personal data with selected third parties who act as processors on our behalf. These processors are engaged under written contracts that require them to act only on our instructions and to maintain appropriate security measures. Typical processors include:
Payment service providers that process card payments or bank transfers. IT and software providers that host or support our booking systems, access control systems, and customer databases. Professional advisers such as accountants, auditors, or legal advisers, where they need access to personal data to provide their services. Secure document storage and disposal providers. We may also share data with other third parties where we act as an independent controller, for example:
Law enforcement bodies, courts, or regulators, where required by law or where we believe it is necessary to protect our rights, property, or the safety of others. Debt recovery agencies or legal representatives, where necessary to recover unpaid fees under a contract. We do not sell your personal data.
International transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of standard contractual clauses or confirmation that the destination country has an adequate level of data protection as recognised by relevant authorities.
Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting, or reporting requirements.
Customer account and contract records are generally retained for a period after your contract ends, to manage any queries, disputes, or legal claims, and to comply with tax and accounting rules. Payment and invoicing records are kept for the retention period required by applicable financial and tax legislation. Security and access logs are retained for a shorter period, unless they are needed for an ongoing investigation or legal matter. Enquiries from prospective customers are kept for a limited time to respond to your requests and to follow up if appropriate. When personal data is no longer needed, we securely delete or anonymise it.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include restricted access to systems and premises, staff training, secure storage, and regular review of our security practices. While we take all reasonable steps to protect your personal data, no system can be completely secure, and you are also responsible for keeping your account information confidential where applicable.
Your data protection rights
Under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data. These rights apply to all Storage Morden customers and prospective customers in our service area, subject to certain legal limitations and conditions.
Right of access: You can request a copy of the personal data we hold about you and information about how we process it. Right to rectification: You can ask us to correct or complete inaccurate or incomplete personal data. Right to erasure: In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised. Right to object: You can object to processing based on our legitimate interests, including certain types of direct marketing. We will stop processing your data unless we have compelling legitimate grounds that override your interests, or the processing is required for legal claims. Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can ask to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Exercising your rights
If you wish to exercise any of your data protection rights, please contact us using the usual communication channels you use for dealing with Storage Morden. We may need to verify your identity before responding to your request. There is no charge for most requests, but we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive. We aim to respond to all valid requests within one calendar month, or within any extended period permitted by law where requests are complex or numerous.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operational needs, or legal obligations. When we make material changes, we will take reasonable steps to inform you, for example by displaying a notice at our premises or updating the date of the latest version. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
