Privacy Policy - Stokenewington Storage

Stokenewington Storage is committed to protecting the privacy and personal data of all customers in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our storage services. It applies to all Stokenewington Storage customers in area, including prospective customers, current customers, former customers, and any individuals whose data we process as part of delivering our services.

1. Who We Are

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, Stokenewington Storage acts as a data controller when we determine the purposes and means of processing personal data. In some cases, we may act as a data processor where we process data on behalf of another party in accordance with their instructions.

This policy explains how we handle personal data in a lawful, fair, and transparent manner. We only collect and use information that is necessary for the operation of our storage services and related administrative obligations.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data such as name, date of birth, and identification details where required for verification.
Contact data such as address, email address, and telephone number.
Contract data including storage unit details, account records, payment status, and service history.
Financial data such as billing information, payment method details, and transaction records.
Technical data such as IP address, device information, and basic usage data collected through digital systems used to manage bookings or accounts.
Security data such as access logs, CCTV footage, key-card entries, and incident reports where applicable.
Correspondence data including communications with us by email, phone, or written form.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such data is provided to us inadvertently, we will handle it with heightened care and only process it where there is a lawful basis to do so.

3. How We Use Your Data

We use personal data for the following purposes:

To provide storage services and manage customer accounts.
To verify identity and prevent fraud or misuse of our services.
To process payments, invoices, and refunds.
To communicate service updates, account notices, and operational information.
To maintain the safety, security, and integrity of our premises and systems.
To comply with legal and regulatory obligations.
To handle disputes, complaints, or insurance-related matters.
To improve our services, administration, and customer experience.

We ensure that our use of data is limited to what is relevant, adequate, and necessary for the stated purpose. We do not sell personal data.

4. Lawful Basis for Processing

We process personal data under one or more lawful bases set out in data protection law:

Contract

We process information where it is necessary to enter into or perform a contract with you, such as managing storage bookings, billing, access arrangements, and customer support.

Legal Obligation

We may process personal data where required to comply with tax, accounting, safety, anti-fraud, or other legal obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include securing premises, managing records, preventing misuse, and operating our business efficiently.

Consent

Where required, we rely on your consent. If consent is used as a lawful basis, you may withdraw it at any time. Withdrawal of consent will not affect processing already carried out lawfully before withdrawal.

Vital Interests

In rare circumstances, we may process personal data to protect someone’s vital interests, such as in an emergency affecting health or safety.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, only where necessary and lawful. These may include:

Payment service providers for processing customer payments.
IT and cloud service providers that host systems, manage records, or provide secure digital tools.
Security service providers assisting with surveillance, access control, or incident response.
Professional advisers such as accountants, insurers, auditors, or legal advisers.
Public authorities where disclosure is required by law or necessary to protect rights, safety, or property.

When processors are used, they are bound by appropriate contractual obligations to process data only on our instructions, keep it secure, and comply with data protection law. We require all processors to apply appropriate technical and organisational safeguards.

We may also disclose data in connection with a business reorganisation, provided appropriate protections are in place and the transfer is lawful.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, security, and dispute-resolution requirements. Retention periods depend on the type of data and the reason for processing.

In general:

Customer account and contract records are retained for the duration of the relationship and for a reasonable period thereafter.
Financial records are retained for the period required by tax and accounting law.
Security records, including access logs and CCTV footage, are retained for a limited period unless needed for an investigation.
Correspondence and complaints are retained for as long as needed to resolve the matter and maintain accurate records.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff training, restricted permissions, monitoring, and physical security measures.

While we work hard to safeguard your information, no system is completely risk-free. If a personal data breach occurs and presents a risk to your rights and freedoms, we will act in accordance with applicable law, including notifying relevant authorities and affected individuals where required.

8. International Transfers

If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it. Such safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain circumstances.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so we can address any concerns promptly and fairly.

10. Automated Decision-Making

We do not normally make decisions based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide appropriate information about the logic involved and your rights.

11. Children’s Data

Our storage services are not directed at children. We do not knowingly collect personal data from children unless it is required in connection with a customer account or legal obligation and processed lawfully.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

13. Our Commitment

Stokenewington Storage respects your privacy and is committed to handling personal information responsibly, securely, and in accordance with data protection law. We process data only where we have a valid reason, retain it for no longer than necessary, and apply appropriate safeguards throughout its lifecycle. This policy is intended to provide clear and transparent information to all Stokenewington Storage customers in area.

By using our storage services, you acknowledge that your personal data may be processed as described in this Privacy Policy.