Storage Waterloo Privacy Policy
This Privacy Policy explains how Storage Waterloo collects, uses, stores, and protects personal data of its customers and prospective customers in the local area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and related legislation. This Privacy Policy applies to all Storage Waterloo customers and individuals who make enquiries or interact with us in connection with our storage services in the area.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Waterloo customers, former customers, persons who make enquiries about our services, visitors to our premises, and any individuals who interact with us in relation to storage services in the area. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Personal data we collect
We collect and process different categories of personal data, depending on your relationship with us and how you interact with Storage Waterloo. The personal data we may collect includes:
Identification and contact details such as full name, residential address, postal address, date of birth where required for verification, and other contact details necessary for communication with you.
Account and contract information such as storage unit number, contract start and end dates, billing history, communication preferences, and records of your communications with us.
Payment and billing information such as payment method details necessary to process payments, billing address, and records of invoices and receipts. We do not store full payment card details where payments are processed through secure third party payment processors.
Security and access information such as vehicle registration numbers for site access where applicable, CCTV footage recorded on or around our premises, access logs for entry systems, and records of visits when required for security and safety purposes.
Enquiry and correspondence information such as information you provide when you contact us by phone, in writing, or through other communication channels, including queries, feedback, or complaints.
How we collect personal data
We collect personal data directly from you when you request a quote, make an enquiry, sign a storage agreement, make a payment, visit our premises, or otherwise interact with us. We may also collect personal data from third parties where permitted by law, such as payment providers processing transactions on our behalf, or from publicly available sources where necessary to verify identity or address details.
Purposes and lawful bases for processing
We process personal data only when we have a lawful basis under data protection law. The purposes for which we process personal data and the corresponding lawful bases include:
To provide and manage storage services to you, including setting up and administering your account, processing payments, managing your contract, and providing customer support. The lawful basis for this processing is performance of a contract or taking steps at your request prior to entering into a contract.
To comply with legal and regulatory obligations, including tax, accounting and record keeping obligations, responding to lawful requests from authorities, and maintaining health and safety records. The lawful basis for this processing is compliance with legal obligations.
To maintain the security and safety of our premises, customers, staff, and property, including the use of CCTV, access control and visitor logs, and fraud prevention checks. The lawful basis for this processing is our legitimate interests in ensuring the security of our operations and premises, and where appropriate, the protection of vital interests of individuals.
To manage our business operations, such as maintaining internal records, conducting audits, monitoring service quality, and planning and improving our services. The lawful basis for this processing is our legitimate interests in running and improving our business in a responsible and efficient manner.
To send you service-related communications, such as notifications about your unit, changes to terms, or information essential to your contract. The lawful basis for this processing is performance of a contract and our legitimate interests in keeping you informed about important service matters.
To send you marketing communications about our storage services where permitted by law. Where required, we rely on your consent to send such communications. You may withdraw your consent or opt out of marketing communications at any time.
How we share personal data
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this Privacy Policy and only to the extent permitted by law. These third parties act as data processors or, in some cases, independent controllers. Categories of recipients may include:
Payment processors and banks that process payments on our behalf.
IT, hosting, and cloud service providers that supply and support our business systems and data storage solutions.
Professional advisers such as accountants, auditors, or legal advisers where necessary for the provision of their services.
Security service providers involved in CCTV monitoring, alarm response, or access control systems, where applicable.
Regulators, law enforcement agencies, and other public authorities where we are required or permitted by law to share personal data.
Where we use processors, we ensure that appropriate contractual safeguards are in place, including obligations to keep your data secure and to process it only in accordance with our instructions and applicable law.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will take steps to ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other safeguards recognised by data protection law. Details of such safeguards can be made available on request where applicable.
Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, and to meet legal, accounting, or reporting requirements. The specific retention period will vary depending on the category of data and the context of the processing. In general:
Customer account and contract information is retained for the duration of your relationship with us and for a period after the end of the contract to address queries, resolve disputes, and comply with legal obligations.
Financial and transaction records are kept for the period required by tax and accounting laws.
CCTV footage and access logs are retained for a limited period necessary for security and incident investigation, unless a longer retention is required in connection with an incident or legal claim.
Marketing contact data is retained until you object to or opt out of marketing, or until it is no longer necessary for the purpose for which it was collected.
When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and irreversible way.
How we protect your data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, encryption or pseudonymisation where appropriate, staff training, and procedures for handling data protection incidents. While we take reasonable steps to protect your personal data, no system can be completely secure. We maintain procedures to respond to potential security incidents and, where required by law, we will notify you and the relevant supervisory authority of a data breach.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights may include:
The right of access, which allows you to request confirmation as to whether we process your personal data and, if so, to obtain a copy of your data and certain information about how it is processed.
The right to rectification, which allows you to request correction of inaccurate personal data and completion of incomplete data.
The right to erasure, also known as the right to be forgotten, which allows you to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing.
The right to restriction of processing, which allows you to request that we limit the processing of your personal data in specific situations, such as while we are assessing a request for rectification or objection.
The right to data portability, which allows you to receive certain personal data you have provided to us in a structured, commonly used and machine readable format and to transmit that data to another controller where technically feasible and lawful.
The right to object to processing based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your personal data for that purpose.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
How to exercise your rights
If you wish to exercise any of your data protection rights or have questions about how we process your personal data, you can contact us using your usual Storage Waterloo contact method or by writing to us at our business address. We may need to verify your identity before responding to your request to protect your privacy and security. We will respond to your request within the timeframes required by law.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any changes will be effective when the updated Privacy Policy is made available. You should review this Privacy Policy periodically to stay informed about how we protect your personal data.
Contacting Storage Waterloo about privacy
If you have any questions, comments, or requests regarding this Privacy Policy or our handling of your personal data, please contact Storage Waterloo using your usual communication channels or by writing to our business address. We will handle your enquiry promptly and in accordance with applicable data protection laws.
