Storage Bromley Privacy Policy
This Privacy Policy explains how Storage Bromley collects, uses, stores and protects personal data relating to its customers and prospective customers in the Bromley area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Bromley customers and to anyone who makes an enquiry about our services in the Bromley area.
Who we are and scope of this policy
Storage Bromley is a storage service provider operating in the Bromley area. For the purposes of data protection law, Storage Bromley is the data controller of the personal data described in this Privacy Policy. This means that Storage Bromley determines the purposes and means of processing your personal data.
This Privacy Policy applies to personal data collected from individuals who use, or express an interest in, Storage Bromley services, including self-storage units, associated transport or packing services, and any related support or administration within the Bromley area.
Types of personal data we collect
Storage Bromley may collect and process the following categories of personal data about you:
Identification and contact details: name, postal address, previous address where relevant for security or verification purposes, date of birth, and other basic identification information, as well as contact details such as email address and correspondence address.
Account and contract information: details of the storage unit or service you have booked, contract start and end dates, billing history, communications relating to your account, and any preferences you tell us about, for example preferred contact methods.
Payment and financial information: payment method details including card or account information processed via secure payment processors, payment status and transaction records. Storage Bromley does not store full payment card details where this is not necessary.
Verification and security information: identity documents where required for security and fraud prevention purposes, such as proof of identity or proof of address, records of access to Storage Bromley premises where access control systems or logs are used, and any images captured by CCTV systems on or around our facilities.
Communications and enquiry information: information you provide when you contact Storage Bromley with an enquiry, make a complaint, request a quote, or otherwise communicate with us by phone, in writing, or in person at our facilities.
Technical information: basic technical information relating to your use of any online services offered by Storage Bromley, such as the type of device or browser used, and log information generated by our website or online booking tools, to the extent that this is personal data.
How we collect your personal data
Storage Bromley collects personal data directly from you when you contact us for a quote, visit our facilities, sign a storage agreement, make a payment, or communicate with us by phone or in writing. We may also receive personal data about you from third parties such as online platforms you use to find storage services or from payment processors, where this is necessary to complete your booking or manage your account.
Lawful bases for processing your data
Storage Bromley processes your personal data only where there is a lawful basis to do so. Depending on the circumstances, we may rely on one or more of the following lawful bases:
Performance of a contract: where processing is necessary to enter into or perform a contract with you, for example to set up your storage unit, manage your account, take payment, and provide customer support.
Compliance with legal obligations: where we are required to process personal data to comply with legal or regulatory requirements, including tax and accounting rules, fraud prevention, security obligations, and law enforcement requests.
Legitimate interests: where processing is necessary for the legitimate interests of Storage Bromley or a third party, and those interests are not overridden by your rights and freedoms. Examples include maintaining the security of our premises, improving our services, managing business operations, and handling customer queries and complaints.
Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as receiving certain types of marketing communications. You can withdraw your consent at any time, although this will not affect the lawfulness of processing carried out before consent was withdrawn.
How we use your personal data
Storage Bromley uses your personal data for the following purposes:
To provide and manage storage services: including handling enquiries, setting up and administering your storage agreement, handling access to your unit, processing payments, and providing customer support.
To maintain security and prevent fraud: including identity verification where required, maintaining access control systems and CCTV monitoring at our facilities, investigating suspected fraud, and ensuring the safety of staff, customers, and stored property.
To manage our business operations: including internal record keeping, financial reporting, analysis of how our services are used in the Bromley area, and planning and improving our services.
To communicate with you: including responding to your enquiries, providing service updates, sending invoices and payment reminders, and notifying you of changes to this Privacy Policy or our terms and conditions.
To comply with legal and regulatory obligations: including responding to requests from law enforcement or regulatory authorities, complying with tax and accounting rules, and maintaining records required by law.
Data sharing and use of processors
Storage Bromley may share your personal data with carefully selected third parties where this is necessary for the purposes described in this Privacy Policy, or where we are legally required to do so. These third parties include:
Service providers acting as data processors: such as payment processing companies, IT and cloud service providers, security and CCTV system providers, document storage providers, and providers of customer relationship and booking systems. These processors are only permitted to process your personal data on our instructions and are required to keep it secure.
Professional advisers: such as accountants, auditors, and legal advisers, to the extent that they need access to personal data to provide their services.
Insurance providers: in connection with any insurance cover related to storage units or stored items, and for handling related claims.
Law enforcement and regulatory authorities: where required by law or where necessary to protect the rights, property, or safety of Storage Bromley, our customers, or others.
Storage Bromley does not sell your personal data to third parties.
International transfers
Where Storage Bromley uses service providers based outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These may include using contractual clauses approved for use in international data transfers or ensuring that the country has been recognised as providing an adequate level of data protection.
Data retention
Storage Bromley retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the context in which it was collected:
Customer account and contract data: retained for the duration of your contract with Storage Bromley and for a reasonable period thereafter, typically up to six years, to deal with any queries or disputes and to comply with legal obligations.
Payment and financial records: retained for periods required by tax and accounting laws.
CCTV and access records: retained for a limited period that allows us to investigate incidents or security concerns, unless a longer retention period is required for a particular investigation or legal claim.
Marketing and enquiry data: retained for a period appropriate to the nature of the enquiry or your relationship with Storage Bromley, or until you object to such processing or withdraw your consent where consent is the lawful basis.
At the end of the relevant retention period, personal data will be securely deleted, anonymised, or otherwise rendered unusable.
Your data protection rights
Under data protection law, individuals whose personal data is processed by Storage Bromley have a number of rights. These include:
Right of access: you can request confirmation that we process your personal data and obtain a copy of that data, together with information about how we use it.
Right to rectification: you can request that inaccurate or incomplete personal data held by Storage Bromley is corrected or updated.
Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restrict processing: you can ask us to restrict the processing of your personal data in certain situations, for example while we check the accuracy of the data or consider an objection you have raised.
Right to object: you can object to processing carried out on the basis of legitimate interests, including profiling, and Storage Bromley will stop processing unless we have compelling legitimate grounds not to do so. You also have an absolute right to object to direct marketing at any time.
Right to data portability: where processing is based on your consent or on a contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to withdraw consent: where Storage Bromley relies on your consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that Storage Bromley has not complied with data protection law in handling your personal data.
Security of your personal data
Storage Bromley takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures may include access controls, secure storage, encryption, staff training, and regular review of our security arrangements. While we aim to protect your personal data, no system can be completely secure, and you should take care to keep any account information or access credentials safe.
Changes to this Privacy Policy
Storage Bromley may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any changes will be published in the latest version of this Privacy Policy. Your continued use of Storage Bromley services in the Bromley area after changes are made will signify that you accept those changes.
