Storage Tottenham Hale Privacy Policy
This Privacy Policy explains how Storage Tottenham Hale collects, uses, and protects personal data relating to our customers and prospective customers in the Tottenham Hale area. It is intended to provide clear information in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Tottenham Hale customers and anyone who enquires about, uses, or interacts with our storage services in the Tottenham Hale area, whether in person, by phone, or through any online or written communication.
Who We Are and Scope of This Policy
Storage Tottenham Hale is the controller of the personal data described in this Privacy Policy. This means we decide how and why your personal data is used when you use our storage facilities and related services in the Tottenham Hale area.
By using our services, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time to reflect changes in our services or in applicable law. Where appropriate, we will notify you of significant changes.
Personal Data We Collect
We only collect personal data that is relevant and necessary for providing our services, managing our relationship with you, and meeting our legal and contractual obligations. The categories of personal data we may collect include:
Identity and contact details, such as your full name, home or billing address, contact address, and other basic identifying information you choose to provide, which may include business details if you are a business customer.
Account and contract information, such as unit or locker numbers, contract dates, rental period, payment history, invoices, and correspondence relating to your storage agreement with us.
Financial and payment information, including information necessary to process payments and prevent fraud. We do not store full payment card details when processed by a secure payment provider, but we may keep records of transaction amounts, dates, and payment methods.
Security and access data, which may include vehicle registration numbers if you provide them, access codes, logs of entry to and exit from our premises, and video images captured by closed circuit television systems operated for security and safety purposes.
Communication data, including messages, queries, complaints, and any other information you choose to provide when you contact us or respond to our communications.
Technical and usage information when you access our online services, such as basic device and usage data, for example to ensure security and proper functioning of our systems.
Lawful Basis for Processing Your Data
We rely on one or more of the following lawful bases under the UK GDPR when processing your personal data:
Contract. We process personal data that is necessary to enter into, perform, and manage our contract with you for storage services, including opening and managing your account, taking payments, and providing access to your storage unit.
Legal obligation. We process personal data where it is required to comply with applicable laws and regulations, including tax, accounting, and health and safety requirements, and to respond to lawful requests from public authorities.
Legitimate interests. We process personal data to pursue our legitimate business interests, balanced against your rights and freedoms. This may include ensuring the security of our premises, preventing and detecting crime or fraud, managing and improving our services, and handling enquiries and complaints.
Consent. In some cases, we may ask for your clear and specific consent to process your data for a particular purpose that is not covered by another lawful basis. Where we rely on consent, you can withdraw it at any time, although this will not affect processing that has already taken place.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To set up and manage your storage account, including verifying your identity, creating your customer record, preparing and administering contracts, and recording your storage unit details.
To provide and manage storage services, including granting access to our site and storage units, managing moves in and out, and providing customer support.
To process payments and manage billing, including issuing invoices, taking and recording payments, managing arrears, and where necessary taking steps to recover unpaid amounts.
To ensure safety and security, including monitoring access to our premises, operating closed circuit television systems, preventing and detecting crime or fraud, and protecting our staff, customers, and property.
To manage our relationship with you, including responding to your enquiries, handling feedback or complaints, and notifying you of important changes to our services or policies.
To comply with legal and regulatory obligations, including record keeping, responding to lawful requests from authorities or courts, and cooperating with law enforcement where necessary.
To improve our services, operations, and customer experience, such as reviewing service usage information, analysing trends, and developing new features or offerings.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, and to comply with legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and any relevant legal limitation periods.
Customer account and contract data are generally retained for a period after the end of your contract to enable us to respond to queries, address disputes, and meet our legal and regulatory obligations. Financial records are kept for the period required by tax and accounting laws.
Security and access data, including closed circuit television recordings and entry logs, are kept for a limited period, which may vary depending on security needs and legal requirements. Video footage will normally be overwritten or securely deleted after the relevant retention period, unless it is required in connection with an ongoing investigation or legal matter.
When personal data is no longer required, we will delete it or anonymise it so that it can no longer be associated with an identifiable individual.
Data Processors and Sharing Your Information
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services that support our operations, such as payment processing, information technology and system support, data storage and backup, and physical security systems.
We only use processors who provide sufficient guarantees that they will implement appropriate technical and organisational measures to meet the requirements of data protection law and protect your rights. We have written agreements in place with all processors, and they are not permitted to use your personal data for their own purposes.
In some situations, we may also share personal data with other third parties acting as independent controllers, where necessary and lawful. This may include professional advisers such as accountants or legal representatives, insurers, law enforcement agencies, or regulatory authorities where we are required to do so by law or where it is necessary to protect our rights, property, or the safety of others.
We do not sell your personal data. If the ownership or structure of our business changes, we may need to share your information with a new owner or reorganised entity, but your personal data will continue to be protected in accordance with this Privacy Policy and applicable law.
International Data Transfers
Where possible, we aim to keep your personal data within the United Kingdom or within jurisdictions that are recognised as providing an adequate level of data protection. If we must transfer personal data to a country that does not have the same level of data protection laws as the UK, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved for use under data protection law, or other recognised transfer mechanisms.
How We Protect Your Data
We use a range of technical and organisational measures to keep your personal data secure and to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, physical security measures at our premises, secure storage systems, and procedures to manage and respond to any suspected data incidents.
While we take appropriate steps to protect your personal data, no system can be completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you and any relevant regulators where required by law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These include:
The right of access. You can request confirmation that we are processing your personal data and obtain a copy of the personal data we hold about you, along with certain additional information.
The right to rectification. You can ask us to correct or complete personal data that you believe is inaccurate or incomplete.
The right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the original purpose and there is no legal reason to continue processing it.
The right to restrict processing. You can request that we limit how we use your personal data in specific situations, for example while we are dealing with a request to correct inaccurate data.
The right to object. You may object to our processing of your personal data where we are relying on legitimate interests, and we will consider your objection and stop processing unless we can demonstrate compelling legitimate grounds.
The right to data portability. In certain circumstances, you can ask us to provide your personal data in a commonly used, machine readable format or to transfer it to another controller, where technically feasible.
Where we rely on consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn, but it may affect our ability to provide certain services.
You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us in the first instance so we can attempt to resolve your concerns directly.
Contact and Further Information
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact Storage Tottenham Hale using the usual contact methods you use for our services. We will respond to your request as soon as reasonably possible and in accordance with applicable legal timeframes.
This Privacy Policy applies to all customers and users of Storage Tottenham Hale services in the Tottenham Hale area and is intended to help you understand how and why we use your personal data, and how you can exercise your rights.
