Storage Haggerston Privacy Policy
This Privacy Policy explains how Storage Haggerston collects, uses, stores, and protects personal data relating to customers and potential customers in the Storage Haggerston service area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act.
This Privacy Policy applies to all Storage Haggerston customers and individuals who enquire about or use our storage services in the area, whether in person, by phone, or through our online channels.
Who We Are and Scope of This Policy
Storage Haggerston is a storage service provider offering storage solutions to individuals and businesses in the Haggerston area. In relation to the personal data we collect and process, Storage Haggerston acts as a data controller, which means we determine the purposes and means of processing your personal data.
This policy covers personal data processed in connection with enquiries, bookings, contracts, payments, access to storage units, and related customer service activities.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification details, such as full name, title, date of birth, and proof of identity details where required for security or verification purposes.
Contact details, such as billing and service addresses, and other contact information you choose to provide so that we can communicate with you regarding your storage arrangements.
Contract and service data, such as details of your storage unit, contract start and end dates, access permissions, and communications relating to your contract.
Payment and billing data, such as payment method details processed through secure payment processors, payment history, invoices, and transaction records. We do not store full payment card details; these are handled by our payment processing partners.
Security and access data, such as unit numbers, access logs, and recordings from any CCTV systems in and around our facilities where used for security, crime prevention, and safety.
Communication data, such as emails, letters, and notes from telephone conversations that we record to manage your account or respond to your enquiries.
Technical and usage data, where applicable, such as information about your interaction with any online booking or account management tools, including date and time of access and basic device or browser information.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us to make an enquiry, request a quote, book storage, sign a contract, make a payment, or communicate with us for customer service purposes.
We may also collect personal data when you enter our premises, for example through access control systems and CCTV, and when you use our online services, such as online forms or account portals.
In some cases, we may receive personal data from third parties, for example from business partners, comparison services, or someone who refers you to us. Where this occurs, we ensure that they are legally permitted to share this information with us.
Lawful Bases for Processing Your Data
We rely on one or more of the following lawful bases under data protection law to process your personal data:
Contract. We process your personal data when it is necessary to enter into or perform a contract with you, for example to set up and manage your storage unit, take payments, provide access, and communicate with you about your contract.
Legal obligation. We may process personal data where necessary to comply with legal obligations, such as accounting, tax, record-keeping, and obligations relating to security and crime prevention.
Legitimate interests. We may process personal data for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. This can include managing and improving our services, ensuring security and safety at our facilities, handling queries and complaints, and protecting our property and legal rights.
Consent. In limited cases, we may rely on your consent, for example for certain optional communications or marketing. Where we rely on consent, you can withdraw it at any time, and we will stop the relevant processing unless we have another lawful basis to continue.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your account, allocating and maintaining units, arranging access, and coordinating move-in and move-out processes.
To manage payments and billing, including issuing invoices, processing payments through payment processors, and handling any payment queries or disputes.
To ensure security and safety at our facilities, including monitoring access, preventing unauthorised entry, protecting property, and assisting in the investigation of incidents or suspected criminal activity.
To provide customer service and support, including responding to your enquiries, handling complaints, and providing updates and information related to your storage arrangements.
To manage our business operations, including internal reporting, auditing, quality control, staff training, and service improvement.
To comply with legal and regulatory requirements, including responding to lawful requests from authorities and enforcing our terms and conditions.
Data Retention and Storage Periods
We retain personal data only for as long as is necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting obligations.
Customer and contract records are typically retained for a period after the end of your contract, to manage any ongoing queries, disputes, or legal obligations. Payment and invoicing records may be kept for longer periods where required by tax and financial regulations.
CCTV recordings, access records, and other security related data are retained for a limited time, which is determined by security needs and legal considerations, and then securely deleted or anonymised unless they are required for an ongoing investigation or legal claim.
When personal data is no longer needed, it is securely deleted, anonymised, or otherwise removed from our active systems and backups in accordance with our data retention procedures.
Sharing Your Data and Use of Processors
We do not sell your personal data. We may share your personal data with selected third parties where necessary for the purposes described in this policy and where permitted by law.
We may use third party processors to provide certain services on our behalf, such as payment processing providers, IT and cloud service providers, security and access control system providers, and professional advisers such as accountants or legal advisers. These processors are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures.
We may also share personal data with law enforcement agencies, regulators, or other authorities where required by law or where necessary to protect our rights, property, customers, or the public.
If any transfer of personal data involves a country outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses, in accordance with data protection law.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
Right to rectification. You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to erasure. In some circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop the processing unless we have compelling legitimate grounds which override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive the personal data you have provided to us in a structured, commonly used, and machine readable format and to request that it be transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent for specific processing activities, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before the withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, staff training, and regular review of our security practices.
While we take these precautions, no system can be guaranteed to be completely secure. We encourage you to take care in how you share personal data with us and to notify us promptly if you suspect any misuse of your data related to our services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will take effect when the updated policy is made available. We encourage you to review this policy periodically to stay informed about how we handle your personal data.
