Storage Marylebone Privacy Policy
This Privacy Policy explains how Storage Marylebone collects, uses, stores and protects personal data relating to its customers and prospective customers in the Marylebone area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Marylebone customers and users of our services in the area, whether you contact us online, by post, or in person at our storage facilities.
Who We Are and Scope of This Policy
Storage Marylebone is a storage service provider offering storage units and related services to individuals and businesses in the Marylebone area. For the purposes of data protection law, Storage Marylebone is the controller of the personal data described in this Privacy Policy. This means we are responsible for deciding how and why your data is processed and for ensuring that such processing is carried out in a lawful and transparent manner.
This Privacy Policy covers personal data relating to customers, prospective customers, individuals making enquiries, visitors to our premises, and individuals whose data we process in connection with the provision of our storage services in the Marylebone area.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, postal address, billing address, service address, contact preferences, and communication history.
Account details: customer account number, contract details, storage unit number, access codes or key references, and service preferences.
Payment and billing information: payment card details processed through secure payment processors, bank details where necessary for payments or refunds, and records of payments made and amounts due.
Verification data: copies or details of identification documents where we are required to verify your identity, for example passport, driving licence, or other photo ID, and proof of address documents.
Usage and communication data: information about how you use our services, your correspondence with us, notes relating to enquiries, complaints or support requests, and call or visit records where relevant.
Security and access data: information relating to access to our facilities, such as access logs, time and date of entry and exit, vehicle details where required for security, and CCTV footage recorded at our premises.
Marketing preferences: your choices about receiving updates or offers from us, and records of your consent or objection to such communications.
How We Collect Your Data
We collect personal data in several ways, including:
Directly from you when you contact us, request a quote, make a booking, sign a contract, access your storage unit, or communicate with us by any channel.
Automatically when you visit our premises, through security systems such as CCTV and access control systems, and through operational systems that record entry times and usage.
From third parties, such as payment service providers processing your payments, credit reference agencies where checks are necessary for certain contracts, and business partners or referrers who introduce you to our services.
Lawful Bases for Processing Your Data
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the context, we rely on the following lawful bases:
Contract: we process your data to enter into and perform our contract with you, including setting up your account, managing your storage unit, handling billing and payments, and providing customer service.
Legal obligation: we process your data to comply with legal and regulatory requirements, such as tax and accounting rules, anti money laundering and fraud prevention obligations, and health and safety responsibilities at our premises.
Legitimate interests: we process your data for our legitimate business interests, provided these are not overridden by your interests or fundamental rights. This includes ensuring the security of our facilities, preventing fraud and misuse, improving our services, managing our operations, and maintaining accurate records.
Consent: where required by law, we rely on your consent to send you certain types of marketing communications or to use optional cookies or similar technologies. You can withdraw your consent at any time.
Purposes for Which We Use Personal Data
We use your personal data for the following purposes:
To provide storage services: this includes setting up and managing your account, allocating and managing storage units, handling bookings, and providing support.
To process payments: to take payments, issue invoices and receipts, manage billing queries, and process refunds where applicable.
To verify identity and prevent fraud: to confirm your identity, protect our premises, and reduce the risk of fraudulent or unlawful activities.
To maintain security at our facilities: to control access to our sites, monitor security using CCTV and access control systems, and investigate security incidents or accidents.
To manage our business operations: to analyse service usage, improve our services and premises, train staff, and plan future capacity and offerings.
To communicate with you: to respond to your enquiries, inform you about changes to our services or terms, send important notifications about your account, and deal with complaints or disputes.
To send marketing communications: where permitted by law, to provide information about services or offers that we believe may be of interest to you, and to manage your marketing preferences.
Data Retention
We keep personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. The specific retention periods depend on the type of data and the relevant legal and operational considerations.
In general, we retain customer account records, contracts and billing information for the duration of your relationship with us and for a period after your contract ends, to deal with any queries, disputes or legal claims, and to comply with record keeping obligations. CCTV and access control records are retained for a limited period necessary for security monitoring and incident investigation, unless a longer retention period is required in connection with a specific investigation, dispute or legal claim.
When personal data is no longer required, we will securely delete or anonymise it so that you can no longer be identified from it.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as processors on our behalf and who provide services necessary for our operations. These may include:
Payment service providers who process your payments and manage payment security.
IT and cloud service providers who host our systems, store data, and support our software and security systems.
Security and access control providers who maintain CCTV systems, access logs, and related security infrastructure.
Professional advisors such as accountants, auditors and legal advisors, where necessary for our business and legal compliance.
Each processor is required to process personal data only on our documented instructions, to keep it secure, and to comply with applicable data protection laws. We do not sell your personal data.
We may also disclose your personal data where required by law, to law enforcement bodies, courts, regulatory authorities or other third parties, or where it is necessary to establish, exercise or defend legal claims, or to protect the vital interests of any person.
International Transfers
Where we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses or transferring to countries that have been recognised as providing an adequate level of protection. You can contact us for more information about the safeguards we use in connection with international transfers of personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
Right of access: you can request a copy of the personal data we hold about you and information about how we process it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
Right to erasure: you can ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis.
Right to restriction of processing: you can ask us to restrict the processing of your data in certain situations, such as while we consider a challenge you have made about the accuracy of your data.
Right to data portability: for certain data processed by automated means on the basis of consent or contract, you can ask us to provide your data in a structured, commonly used and machine readable format, or to transmit it directly to another controller where technically feasible.
Right to object: you can object to our processing of your personal data where we rely on legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds which override your interests. You can always object to the use of your data for direct marketing purposes.
Right to withdraw consent: where we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you are concerned about how we handle your personal data.
Security of Your Personal Data
We take appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. These measures may include secure access controls, encryption, staff training, regular review of security practices, and the use of trusted service providers who are contractually required to protect your data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operational needs, or legal and regulatory requirements. Any updated version will apply to all Storage Marylebone customers and users in the Marylebone area from the date it is published. We recommend that you review this Privacy Policy periodically to stay informed about our data protection practices.
