Privacy Policy

Privacy Notice and Consent

We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on who we are, how and why we collect, store and use personal information and how to contact us and supervisory authorities in the event you have a complaint. This policy explains how information about you is collected and used.

We ask that you read this privacy policy carefully as it contains important information on:

Who we are

Loft Management Services (trading also as Attic Self Storage and Self Storage London Ltd) (“we”, “us”, “our”) is a company having their registered office at 3rd Floor, 72 Borough High Street, London, SE1 1XF is the ‘data controller’.  As the data controller, we respect your right to privacy and will only process personal information you provide to us in accordance with applicable data protection laws and as described in this policy. Applicable data protection laws include (i) the General Data Protection Regulation (Regulations 2016/679) (“GDPR”); and (ii) all other existing or new applicable laws relating to or impacting on the processing of information of a living person and privacy)

The person responsible for how we handle personal information is The Data Controller.  If you have any questions about how we collect, store and/or use your personal information, or if you have any other privacy-related questions, please contact [email protected]

What information will we collect?

Personal information provided by you

We collect personal information about you (such as your name, postal address, email address, phone numbers, date of birth, payment details, photo ID document number, a photo of you, transcripts of live chats, vehicle registration number and telephone call recordings) when you sign up to participate in or receive a service from us, such as getting an online quote, live chat, reserve a unit online, manage your account online, or face to face if you come to our site to sign a storage agreement. We also collect personal information when you contact us, send us feedback, complete customer surveys, or participate in competitions. Our website also uses cookies (see “Use of cookies” section below) and collects IP addresses (which means a number that can uniquely identify a specific computer or other device on the internet). 

Personal information provided by third parties

Occasionally we may receive information about you from other sources (which may include identity or credit reference agencies), which we will add to the information we already hold about you in order to help us provide services to you and to improve and personalise our service to you.  If you apply for a job with us, we may receive information from any previous employer or person who will provide a reference on your behalf.

Personal information about other individuals

If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:

Sensitive personal information

We will not usually ask you to provide sensitive personal information. We will only ask you to provide sensitive personal information if we need to for a specific reason, for example, if we believe you are having difficulty dealing with your account due to illness. If we request such information, we will explain why we are requesting it and how we intend to use it.

Sensitive personal information includes information relating to:

We will only collect your sensitive personal information with your explicit consent.


We do not knowingly collect personal data relating to children under the age of 16. The only exception to this is that from time to time we may run competitions within our local communities which invite children to enter. Parental consent will always be essential in these cases and the data will be used solely in relation to the competition and not for any other purposes.  If you are a parent or guardian of a child under the age of 16 and think that we may have information relating to your child, please contact us using the details provided.

How we share your personal information and who we share it with

We will not sell, rent or otherwise disclose your personal data to any third party, except as described in this policy.

We may provide your personal information to Rafter Group (parent company) and its subsidiaries, Loft Management Group subsidiaries/affiliated companies and to third party processors to process personal information on our behalf for the purposes set out in this policy.  These parties are required to process such information based on our instructions and in accordance with any up to date law and regulations.

The third-party providers to whom we may disclose your personal data are:

We may disclose your personal information where:

How do we collect information from you?

We gather information directly from you and also via our websites and other technical systems and platforms. If you visit our storage facility, some personal data may be collected from monitoring devices and systems such as closed circuit TV (CCTV) and door entry systems at the site.

We may monitor and record communications with you (such as telephone conversations and emails).  We may do this for a number of reasons, such as to check the quality of our customer service, for training purposes, to prevent fraud or to make sure we are complying with legal requirements.

Use of cookies

A cookie is a small text file which is placed onto your computer (or other electronic device such as a mobile telephone or tablet) when you use our website. We use cookies and on our website and may also use other similar tracking technologies such as web beacons, action tags, Local Shared Objects (‘Flash cookies’) or single-pixel gifs on our website. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify you individually. We use analysis software to look at IP addresses and cookies to improve your experience as a user of our website. We do not use this information to develop a personal profile of you. If we do collect personally identifiable information, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

You can set your browser not to accept cookies and the websites below tell you how to remove cookies from your browser. For further information on our use of cookies, please see our website cookie policy.

How will we use the information about you?

We use the lawful basis of legitimate interest when contacting you in relation to obtaining a storage price from us and contract when you become a customer. We collect information about you for a number of reasons, namely to:

We also collect personal information to comply with our legal obligations, for example to comply with anti-money laundering and counter-terrorist financing requirements.

So that we can make sure we give a high-quality service, we collect personal information to:

If you agree, we will contact you to let you know about other products or services that may be of interest to you—see ‘Marketing’ section below;

If we propose to use your information for any other uses we will ensure that we notify you first. If we need your consent to use your information for these other purposes, we will give you the opportunity to opt in or to refuse.  If you opt in, you will be able to opt out at any time.


When you request a quotation, we will contact you to discuss your needs and enable us to make sure that we are providing you with an accurate price. We will ask whether you would like us as a Group of Companies to send you other marketing messages by asking you to tick the relevant boxes when you complete our online enquiry form, come to our storage facility to sign a storage agreement or provide us with your contact details though another means.

If you have consented to receive such other marketing from us, you can opt out at any time. Simply follow the link to unsubscribe in the email.

Identity and Credit checking

We may do an identity or credit check on you:

Our search will be recorded on the files of the credit reference agency.

We may also disclose information about how you conduct your account to credit reference agencies and your information may be linked to records relating to other people living at the same address or who are financially linked to you.

Other credit businesses may use your information to:

If you provide false or inaccurate information to us and we suspect fraud, we will record this.

If you want to see your credit file, please contact the credit reference agency we use Credit Assist.

When will we contact you?

We may contact you to let you know about any changes to the service you have signed up for or to provide information you have requested. Where you have opted to receive further information from us, we will invite you to participate in surveys about our services (but it is your choice if you wish to take part) and we will contact you for marketing purposes. You can tell us to stop contacting you for marketing at any time – see the section on your rights below. If you ask us to stop contacting you, you can also ask us to start again at any time.

When will we contact any other person about you?

If you provide us with details of any other person we can contact to discuss your account, we may contact that person and discuss and share the details of your account with that person and deal with that person in relation to your account as if that person was you.  We may particularly want to do this if we are unable to get in touch with you for any reason. If you change your mind, you can email or write to us and have this person taken off your account as an alternate contact person.

Data privacy for job applicants

In order to process your job application, we will collect the following information about you:

We may also collect, store and use the following ‘special categories’ of more sensitive personal information:

How do we collect your personal data?

We will collect this information from a range of sources, which will include your application form, CV, passport or other identity documents, or information provided directly by you through interviews or other forms of assessment.

We may also collect personal data about you from third parties, such as references supplied by former employers, employment agencies and social media.

Unsolicited CVs

If we receive an unsolicited CV at any time, we may retain this unsolicited data on file.

How will we use your personal data?

We will need to process your personal data:

Who your information might be shared with

We may disclose your personal data (where it is lawful to do so) to:

If we pass data on to insurers, they may enter your data onto a register of claims which is shared with other insurers to prevent fraudulent claims. If we use an outside party to process your information, we will require them to comply with our instructions in connection with the services they provide for us and not for their own business purposes.

Keeping your data secure

We will use technical and organisational measures to safeguard your personal data, for example:

We have strict security and confidentiality procedures covering the storage and disclosure of your information in order to keep it safe and to prevent unauthorised access.  We only allow certain authorised employees to have access to your personal information who need to use it to fulfil their job responsibilities. These employees are trained in the proper handling of customer information.  Employees who do not comply with our internal rules are subject to our usual disciplinary procedures.

While we will use all reasonable efforts to keep your personal data safe, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How can you contact us?’ below).

Our website contains links to websites and applications owned and operated by other people and businesses. These third-party sites have their own privacy policies and use their own cookies and we recommend that you review them before you provide them with personal information.  They will tell you how your personal information is collected and used whilst you are visiting these other websites.  We do not accept any responsibility or liability for the content of these sites or the use of your information collected by any of these other sites and you use these other sites at your own risk.

What can I do to keep my information safe?

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit Get Safe Online is supported by HM Government and leading businesses.

Transfers of my personal information abroad

We will not process any personal data in jurisdictions other than the EEA, however some of our service providers may hold personal data in jurisdictions outside of the EEA. This transfer will only happen where we have specific safeguards in place to protect your personal data.

How long do we keep your personal information?

We will hold your personal information on our system for as long as is necessary for the service you have requested, for the length of time set out in any contract between us, unless you have told us you want us to remove us from the system (see section “Right to be forgotten” below) or, in the case of customers, for up to seven years in accordance with financial regulations.

What rights do you have?

Right to request a copy of your information

You can request a copy of your information which we hold (this is known as a subject access request). If you would like a copy of some or all of it, please:

We will not charge any fee for this service in most cases.

Right to correct any mistakes in your information

You can require us to correct any mistakes in your information which we hold free of charge. If you would like to do this, please:

Right to ask us to stop contacting you with direct marketing

You can ask us to stop contacting you for direct marketing purposes. If you would like to do this, please:

Right to be forgotten

You can ask us to delete the data we hold about you in certain circumstances. You can do this if it is no longer necessary for us to hold the data for the purpose it was collected (for example if you are no longer a customer), or if we are using it without your consent or you have to ask us to delete it to comply with any of your legal obligations.  You can also do this if you originally gave your consent to us using your information and you want to change your mind, If you would like to do this, please:

We will take steps to make sure the information is deleted from our systems and by any people who are processing your information for us unless we have to carry on using the information for legal reasons.

How to contact us

Please contact Loft Management Services if you have any questions about this privacy policy or the information we hold about you.

If you wish to contact us, please send an email to [email protected] or write to us at Loft Management Services, 3rd Floor, 72 Borough High Street, SE1 1XF.

Changes to the privacy policy

We may change this privacy policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access our website.

If you would like this policy in another format (for example, audio, large print, braille), please contact us.

Board of Directors

This policy applies from 30/05/24