Storage Pimlico Privacy Policy
This Privacy Policy explains how Storage Pimlico collects, uses, stores and protects the personal data of customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Pimlico customers and individuals who enquire about or use our storage services in the area where we operate.
Who we are and scope of this policy
Storage Pimlico is a storage services provider. For the purposes of data protection law, Storage Pimlico is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed when you interact with us as a customer, prospective customer, supplier or website visitor in our service area.
This Privacy Policy covers personal data we collect through our premises, our website, written correspondence and any other channels through which you engage with Storage Pimlico in relation to our storage services.
Personal data we collect
We may collect and process the following categories of personal data about you when you use or enquire about our services:
Identification data, such as your full name, title, date of birth and proof of identity details shown on official documents you provide for verification purposes.
Contact details, such as your residential address, billing address, and any other address you choose to provide, together with your preferred methods of communication.
Account and contract data, such as storage unit numbers, contract start and end dates, payment history, services selected, and correspondence related to your account or contract with us.
Payment and billing details, such as partial payment card details, bank details where required for specific payment methods, payment confirmation information and invoicing records. We do not retain full card details beyond what is necessary for secure payment processing or as required by law.
Security and access data, such as access logs, unit entry times, CCTV footage within and around our facilities, vehicle registration numbers recorded on site, and records of visitors where relevant to site security.
Communications and enquiries, such as emails, letters, forms and any information you choose to provide when you contact us with questions, complaints, feedback or requests.
Website and technical data, such as IP address, device information and basic usage data generated by your interactions with our website, to the extent that it identifies or can identify you.
How we collect your personal data
We collect personal data directly from you when you visit our premises, sign a storage agreement, make an enquiry, complete a form, contact us via phone or written communication, or interact with us through any other channel. We may also collect data automatically through security systems such as access control and CCTV, and through the normal operation of our website.
In some cases we may receive personal data from third parties, such as credit reference agencies, payment service providers, or other parties involved in a transaction you authorise. Where this occurs, we ensure that such collection is lawful and compatible with this Privacy Policy.
Lawful basis for processing your data
We process your personal data only when we have a lawful basis to do so. Depending on the circumstances, the lawful basis will be one or more of the following:
Performance of a contract. We process personal data to set up, manage and fulfil your storage contract, including taking payment, communicating with you about your unit or account, and providing customer support.
Compliance with legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, such as anti money laundering obligations, record keeping rules, tax requirements, health and safety, and responding to lawful requests from authorities.
Legitimate interests. We process personal data based on our legitimate interests, provided those interests are not overridden by your rights and interests. This includes maintaining site security, preventing fraud and theft, improving our services, managing our business operations and protecting our legal rights.
Consent. In some situations we rely on your consent, for example if we send you certain types of marketing communications or use optional cookies on our website, where applicable. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To set up, manage and administer your storage contract, including account creation, unit allocation, billing and customer service.
To take and process payments, issue invoices, manage arrears and handle refunds where applicable.
To maintain the safety and security of our facilities, including managing access systems, monitoring CCTV, and investigating incidents or suspicious activity.
To communicate with you about your account, contract renewals, changes to our terms, service updates, and important information about your storage unit.
To respond to your enquiries, feedback or complaints, and to keep a record of our communications.
To manage our business operations, including financial management, reporting, auditing, risk management and quality control.
To comply with applicable laws, regulations and law enforcement requests, and to establish, exercise or defend legal claims.
Data retention and storage
We retain your personal data only for as long as it is reasonably necessary for the purposes described in this Privacy Policy, or as required by law. The precise retention period depends on the nature of the data and our legal or contractual obligations.
In general, customer account and contract data are kept for a period after your contract ends so that we can respond to queries, manage any disputes, meet tax or accounting requirements and comply with statutory limitation periods. Security data such as CCTV footage and access logs are retained for shorter periods, unless needed in connection with a specific investigation, dispute or legal obligation.
When personal data is no longer required, we delete it securely or, where deletion is not possible, we anonymise it so that it can no longer be associated with you.
Data processors and third party recipients
We may share your personal data with trusted third parties who act as our data processors. These service providers process data on our behalf and only in accordance with our instructions. They are contractually required to protect your personal data and to use it only for the services they provide to us.
Typical categories of processors include payment service providers, IT and cloud hosting providers, security and access control system providers, document storage and destruction services, and professional advisers such as accountants or auditors.
We may also share personal data with other third parties where we act as joint controllers or independent controllers, for example with insurers, law enforcement agencies, regulatory bodies, courts or other authorities where required by law or necessary for the establishment, exercise or defence of legal claims.
We do not sell your personal data. Personal data is not transferred outside the UK or European Economic Area unless appropriate safeguards are in place to protect your information, in accordance with data protection law.
Your data protection rights
Under data protection law you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access. You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data together with certain information about how we use it.
Right to rectification. You have the right to ask us to correct inaccurate personal data and to complete incomplete information we hold about you.
Right to erasure. In certain circumstances you may request that we delete your personal data, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may ask us to restrict the processing of your personal data in specific cases, for example while we verify the accuracy of the data or assess an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Right to data portability. Where processing is based on consent or on a contract and is carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format and to request that it be transmitted to another controller.
Right to withdraw consent. Where we rely on your consent to process your data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We encourage you to contact us first so that we can try to resolve any concerns.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include physical security at our facilities, restricted access to personal data, secure storage systems and regular review of our security practices. While we work hard to protect your information, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection practices. When we make significant changes, we will take reasonable steps to inform you, such as updating the policy on our website or notifying you via other appropriate channels. The updated policy will apply from the date it is published.
