Self Storage Harringay Privacy Policy
This Privacy Policy explains how Self Storage Harringay collects, uses, stores and protects personal data relating to customers and prospective customers in the Harringay area. It is intended to provide clear information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our self storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Self Storage Harringay customers, prospective customers and account holders in the Harringay area, including individuals, sole traders and representatives of corporate customers. It covers personal data collected in person at our facility, over the phone, by post, via online forms or other digital channels operated by Self Storage Harringay.
Personal Data We Collect
We only collect personal data that is necessary for the provision and administration of our self storage services, to meet our legal obligations and to protect our business and customers. The categories of personal data we may collect include:
Identification details such as full name, date of birth, proof of identity and proof of address provided during account setup and contract signing.
Contact information such as postal address, billing address, and any additional contact details that you choose to provide for communication and account management.
Contract and account data such as storage unit number, contract start and end dates, payment history, correspondence relating to your contract and records of interactions with our staff.
Payment and billing information such as records of payments made, payment method type and related transaction references. We do not store full card details where payments are processed through secure payment providers.
Security and access information such as entry logs, access control records and closed circuit television footage at our facility, to maintain safety and security for our customers and premises.
Technical information such as basic usage data relating to our digital channels, including date and time of contact and information you choose to provide via online forms.
Purposes and Lawful Bases for Processing
We process personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are:
Performing a contract. We process your personal data to administer and fulfil our storage agreements with you. This includes setting up your account, managing access to your unit, handling billing and payments and communicating with you about your contract, notices and changes to our services.
Compliance with legal obligations. We may process and retain certain information to comply with our legal and regulatory obligations, including tax and accounting requirements, fraud prevention, law enforcement requests and health and safety obligations at our facility.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. Our legitimate interests include maintaining the security of our premises, managing our relationship with customers, improving our services and defending our legal rights. For example, we use CCTV and access logs to help prevent theft, vandalism and unauthorised access.
Consent. In some limited cases, we may rely on your consent, for example for certain optional communications or where we wish to use your information for a purpose that is not covered by another lawful basis. Where we rely on consent, you are free to withdraw it at any time.
Data Retention
We will keep your personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting or reporting requirements and to resolve disputes.
In general, we retain customer account and contract records for a period that allows us to respond to any questions, disputes or legal claims relating to your use of our services. CCTV footage and access control logs are retained for a shorter period, unless we need to keep them longer in connection with a specific incident, dispute or investigation.
When personal data is no longer required for the purposes for which it was collected, we will take reasonable steps to securely delete or anonymise it.
Sharing Personal Data and Use of Processors
We do not sell your personal data. We may share your personal data with third parties only when it is necessary and lawful to do so, as described below.
Service providers acting as data processors. We may engage carefully selected third party providers to support the operation of our business and services, for example providers of secure payment processing, customer account management systems, document storage, information technology support and security systems including CCTV maintenance. These providers act on our instructions, are bound by contractual obligations to protect personal data and may not use it for their own purposes.
Professional advisers. We may share personal data with professional advisers such as legal advisers, accountants or insurers where this is necessary for the establishment, exercise or defence of legal claims or for compliance and audit purposes.
Authorities and legal obligations. We may disclose personal data where required by law, regulation or court order or in response to lawful requests from law enforcement or regulatory authorities. We may also share information when it is necessary to protect the rights, property or safety of our customers, staff or the public.
Any sharing of personal data is carried out in accordance with applicable data protection laws, and we ensure that appropriate safeguards are in place.
International Transfers
Our core operations and data storage are intended to be based within the United Kingdom or the European Economic Area. If, in limited cases, personal data is transferred to a country outside this area, we will ensure that an adequate level of protection is in place in accordance with data protection law. This may include the use of standard contractual clauses or other approved safeguards.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include controlled access to our premises, access control systems, staff training on data protection responsibilities, secure storage of physical documents and appropriate controls on access to digital systems. While we make reasonable efforts to protect your personal data, no system can be completely secure and we cannot guarantee absolute security.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access. You have the right to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated without undue delay.
Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data. This is not an absolute right and may be subject to our need to retain data for legal or contractual reasons.
Right to restriction. You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we consider a request for rectification.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a commonly used, machine readable format and to have it transmitted to another controller where technically feasible.
Right to object. You may have the right to object to certain types of processing based on legitimate interests or to direct marketing. Where you object, we will stop the processing unless we can demonstrate compelling legitimate grounds which override your interests and rights or where processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection best practices. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data at Self Storage Harringay.
