Storage Stoke Newington Privacy Policy
This Privacy Policy explains how Storage Stoke Newington collects, uses, stores and protects personal data relating to our customers and prospective customers in the Stoke Newington area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all services provided by Storage Stoke Newington, including storage unit rental, related services and customer support provided in the Stoke Newington area.
Who This Policy Applies To
This Privacy Policy applies to all Storage Stoke Newington customers and prospective customers in the local area, as well as individuals who contact us about our services, visit our facilities, or otherwise interact with us. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and which services you use:
Identity data, such as your full name, date of birth, and identification documents for verification and security purposes.
Contact data, such as your postal address, billing address, and any other contact details you choose to provide to us so that we can communicate with you about your storage agreement and related matters.
Account and contract data, such as details of your storage unit, contract start and end dates, payment status, correspondence relating to your account, and records of services we provide to you.
Payment and transaction data, such as records of payments made, payment method, invoices and receipts. We do not store full card details when payment is processed through a secure third-party payment processor.
Usage and communication data, such as enquiries, complaints, feedback, and any communications you have with us by post or in person.
Security and access data, such as access logs for our facilities, CCTV footage within and around our premises, and records related to the safety and security of our customers, staff, and property.
How We Collect Your Data
We obtain your personal data in several ways, including:
When you contact us to request information or a quote for storage services.
When you enter into a storage contract with us or open or manage an account.
When you make a payment or otherwise complete a transaction related to our services.
When you visit our facilities, including through CCTV and access control systems used for security.
When you communicate with us, for example to make an enquiry, request support, or provide feedback.
Lawful Basis for Processing Your Data
We process your personal data only where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:
Contract: We process your data where it is necessary to enter into or perform a contract with you, including setting up and managing your storage agreement, handling billing, and providing customer support.
Legal obligation: We may process your data where we are required to do so by law, for example to comply with tax, accounting, regulatory or law enforcement requirements, or to maintain certain records for legal purposes.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and these interests are not overridden by your fundamental rights and freedoms. This may include ensuring the security of our premises, preventing fraud, managing and improving our services, and responding to enquiries.
Consent: In limited cases, we may rely on your consent, for example for certain types of optional communication. Where we rely on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you and manage our relationship with you as a customer, including setting up and administering your account, allocating a storage unit and managing access.
To process payments, issue invoices and receipts, and maintain accurate financial and transactional records.
To respond to your enquiries, requests for information, and any complaints or disputes, and to provide you with customer service and support.
To maintain the security and safety of our premises, customers and staff, including through access logs, CCTV monitoring and related security measures.
To manage our business operations, including record-keeping, auditing, reporting and the development of our services.
To comply with applicable laws, regulations and legal processes, and to respond to lawful requests from public authorities.
Data Retention
We keep your personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy, and to meet any legal, regulatory, tax, accounting or reporting requirements.
In general, we retain your core account and contract data for the duration of your contract with us and for a period after your contract ends, where required by law or where it is necessary to resolve disputes, enforce our agreements or maintain accurate records.
CCTV footage and security access data are typically retained for a shorter period, only as long as necessary for security, incident investigation and legal purposes.
When we no longer need to retain your personal data, we will take steps to delete or anonymise it securely.
Sharing Your Data and Use of Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are appointed to provide services that support our business operations and the delivery of our services to you. They process your data only on our documented instructions, and are required to implement appropriate technical and organisational measures to protect your data.
Examples of data processors we may use include payment processing providers, accounting or billing service providers, secure storage and backup providers, and certain professional service providers who assist us with business administration.
We may also share your personal data with third parties where required by law, for example with law enforcement agencies, regulatory authorities or courts, or in connection with legal proceedings. In some cases, we may need to share limited personal data with insurers, advisors or other parties where it is necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers that are located outside the United Kingdom or European Economic Area, or that store data in such locations, we will ensure that appropriate safeguards are in place to protect your personal data. This may include the use of standard contractual clauses adopted by relevant authorities or other legally recognised transfer mechanisms.
Security of Your Personal Data
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage, staff training and regular review of our procedures.
While we take reasonable steps to safeguard your information, no system can be completely secure, and we cannot guarantee absolute security of your data.
Your Data Protection Rights
Under data protection law, you have several rights in relation to your personal data. Subject to certain conditions and legal exceptions, you have the right to:
Access: You can request confirmation that we are processing your personal data and obtain a copy of the personal data we hold about you.
Rectification: You can ask us to correct inaccurate or incomplete personal data about you.
Erasure: You can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing.
Restriction: You can ask us to restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to our processing.
Objection: You can object to the processing of your personal data where we rely on legitimate interests as our lawful basis, and we will stop processing your data unless we have compelling legitimate grounds to continue.
Data portability: You can request that we provide you with certain personal data in a structured, commonly used and machine-readable format, or ask us to transmit that data to another controller, where this is technically feasible and the processing is based on consent or contract.
Withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
How to Exercise Your Rights or Raise Concerns
If you wish to exercise any of your data protection rights, or if you have questions or concerns about how we handle your personal data, you can contact us using the details provided in your contract or any correspondence you have received from Storage Stoke Newington. We will respond to your request in accordance with applicable data protection laws.
You also have the right to lodge a complaint with the relevant data protection authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. Any changes will apply from the date they are communicated. You should review this Privacy Policy periodically to ensure that you are aware of any updates relevant to you.
