Storage Chelsea Privacy Policy
This Privacy Policy explains how Storage Chelsea collects, uses, stores, and protects personal data relating to customers and prospective customers in our service area. It also sets out your rights under the General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Chelsea customers in our area, including individuals and business customers who use or enquire about our storage services.
1. Data Controller
For the purposes of data protection law, Storage Chelsea is the data controller in relation to the personal data that we collect and process about you. This means we determine the purposes and means of processing your personal data when you use our storage services or interact with us in connection with those services.
2. Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact information such as your name, postal address, billing address, and any alternative contact details you provide to manage your account or bookings.
Account and contract information such as your customer reference number, unit number or storage space details, contract dates, rental period, payment history, and records of your communications with us.
Payment and billing information such as details of payments made, payment method used, and invoicing records. We do not store full card details when payments are processed via third-party payment providers, but we may receive partial information such as the last digits of a card number to help identify payments.
Usage and access information such as dates and times of access to our storage facilities, entry logs where we use access control systems, and records of any incidents or issues reported while using our services.
Marketing and communication preferences such as your consent status for receiving marketing information, your preferred communication channels, and any responses or opt-out requests you submit.
Technical information such as information obtained from your use of our website or online booking system, including device data, basic log data, and information you submit through online forms.
We will only collect the personal data that is necessary for the purposes set out in this Privacy Policy. Where we request personal data, you can choose not to provide it, but this may affect our ability to provide services to you.
3. How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, book a storage unit, sign a contract, make a payment, contact us with a question or complaint, or update your details.
We may also collect personal data automatically when you use our website or digital services, for example when you complete an online form. In addition, we may receive personal data about you from third parties, such as payment processors, where this is necessary to complete a transaction or prevent fraud.
4. Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so under data protection law. The purposes for which we use your data, and the corresponding lawful bases, include the following:
To provide our storage services to you, including setting up your account, preparing and administering contracts, managing your bookings, providing access to your storage unit, handling payments, and communicating with you about your use of the services. We rely on the lawful basis of performance of a contract or taking steps at your request prior to entering into a contract.
To comply with legal and regulatory obligations, such as record-keeping, tax and accounting requirements, and responding to lawful requests from public authorities. We rely on the lawful basis of compliance with a legal obligation.
To protect our legitimate interests, such as maintaining the security of our premises and customers, preventing and detecting fraud or misuse of our services, managing business operations, improving our services, and exercising or defending legal claims. We rely on our legitimate interests, balanced against your rights and freedoms.
To send you marketing communications about our services, promotions, or updates that we believe may be relevant to you. We will rely on your consent where required by law, or on our legitimate interests where consent is not required and you have not objected.
Where we rely on consent, you may withdraw your consent at any time. Where we rely on legitimate interests, you may object to processing based on those interests, as explained in the section on your rights.
5. Data Sharing and Processors
We may share your personal data with third parties where necessary for the purposes set out in this Privacy Policy and in accordance with data protection law.
We use carefully selected service providers who act as data processors on our behalf. These may include providers of payment processing services, customer management systems, data storage and cloud hosting services, security and access control systems, and providers who support our marketing or communication activities. These processors are only permitted to process your personal data in accordance with our instructions and for the purposes we specify, and they are subject to appropriate contractual and security obligations.
We may share personal data with professional advisers such as auditors, accountants, or legal advisers where this is necessary for our legitimate interests or legal obligations. We may also share data with law enforcement or regulatory authorities where required by law or where necessary to protect our rights, customers, or the public.
Where there is a change in the structure or ownership of our business, we may share personal data with potential or actual buyers or investors, subject to appropriate confidentiality safeguards and only to the extent necessary for the relevant transaction.
6. International Transfers
Where we transfer personal data outside the European Economic Area or the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. This may include using countries that have been recognised as providing an adequate level of protection, or using standard contractual clauses or equivalent legal mechanisms.
7. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, meet legal and regulatory requirements, resolve disputes, and enforce our agreements.
In general, we keep customer account and contract information for a period after your contract ends, to meet legal obligations and to maintain records in case of queries or disputes. Payment and invoicing records are retained for the period required by tax and accounting laws. Access logs and security records are retained for a period that allows us to investigate incidents, ensure security, and comply with relevant regulations.
When personal data is no longer needed for the purposes for which it was collected, we will either delete it or anonymise it so that it can no longer be associated with you.
8. Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, encryption or pseudonymisation where appropriate, secure storage solutions, staff training, and regular review of our security practices.
While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure. You are responsible for keeping any account details or access credentials confidential and for notifying us promptly if you suspect any unauthorised use of your account or personal data.
9. Your Data Protection Rights
Under the General Data Protection Regulation and related laws, you have a number of rights in relation to your personal data. These include the following rights, subject to applicable conditions and exemptions:
The right of access, which allows you to request confirmation of whether we process your personal data and, if so, to receive a copy of that data and certain information about how we use it.
The right to rectification, which allows you to request correction of inaccurate or incomplete personal data that we hold about you.
The right to erasure, sometimes known as the right to be forgotten, which allows you to request the deletion of your personal data where there is no longer a lawful basis for us to process it.
The right to restriction of processing, which allows you to request that we limit the processing of your data in certain circumstances, for example while we are investigating a concern you have raised.
The right to data portability, which allows you to request that we provide certain personal data to you or to another controller in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
The right to object, which allows you to object to processing based on our legitimate interests, and to object at any time to the use of your personal data for direct marketing.
Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updated version will apply to all Storage Chelsea customers in our area from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
