Storage South Tottenham Privacy Policy
This Privacy Policy explains how Storage South Tottenham collects, uses and protects personal data relating to customers and prospective customers in the South Tottenham area. It is intended to provide clear information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage South Tottenham customers and prospective customers located in the South Tottenham area. It covers personal data collected in connection with storage enquiries, bookings, contracts, payments, access to storage units and any related customer service interactions.
Data Controller
Storage South Tottenham is the data controller for the personal data described in this Privacy Policy. As data controller, we decide how and why your personal data is processed and we are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identification data such as full name, date of birth, proof of identity details shown on official documents and proof of address details.
Contact details such as residential address, billing address and any other address you choose to provide, together with any non-electronic contact details you share with us.
Customer account information such as storage unit number, contract start and end dates, services selected, access permissions, records of communications with us and preferences you communicate to us.
Payment and billing information such as billing address, payment history, invoices and information necessary to manage your account and detect or investigate payment irregularities. We do not store full payment card details; these are handled by our chosen payment processors.
Security and access data such as access logs, dates and times of entry, vehicle registration numbers where provided and any incident reports relating to the safety and security of the premises.
Technical and usage data where relevant, such as data recorded by security systems on site and information generated by our internal systems when managing your account.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us by any method, request a quotation, visit the site, sign a storage agreement, make a payment or update your account details. We may also receive personal data from third parties where this is necessary to verify your identity, prevent fraud, recover debts or comply with legal obligations.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the circumstances, we rely on the following lawful bases:
Performance of a contract. We process personal data to provide storage services to you, manage bookings, administer your account, take payments, communicate with you about your contract and provide customer support.
Compliance with legal obligations. We process personal data where necessary to comply with applicable laws and regulations, for example to meet tax, accounting, anti money laundering, law enforcement and court order requirements.
Legitimate interests. We process personal data to pursue our legitimate interests, provided that these are not overridden by your rights and freedoms. Our legitimate interests include operating a secure and efficient storage facility, preventing and detecting crime, safeguarding our staff and customers, managing and improving our services, protecting our property and recovering unpaid sums.
Consent. In limited situations, we may rely on your consent, for example where required for specific optional communications or uses of your data that are not necessary for the performance of a contract or our legitimate interests. Where processing is based on consent, you can withdraw that consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up and manage your storage agreement, allocate units and administer your account.
To process payments, issue invoices and manage refunds or arrears.
To verify your identity and address, keep our records accurate and reduce the risk of fraud.
To manage access to our premises, ensure security and investigate incidents or disputes.
To provide customer service, respond to queries and handle complaints or requests.
To maintain and improve our services, plan capacity and manage our business operations.
To comply with legal, regulatory and law enforcement requirements and to establish, exercise or defend legal claims.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to meet our legal and operational requirements. In general:
Customer account and contract information is kept for the duration of your relationship with us and for a reasonable period afterwards, typically up to six years, to respond to queries, maintain records for tax and accounting purposes and deal with potential legal claims.
Security and access data is retained for a shorter period, based on security and operational needs and in line with any applicable legal requirements.
Where personal data is no longer required, it will be securely deleted, anonymised or archived in accordance with our data retention procedures.
Data Processors and Third Parties
We may engage carefully selected third party service providers who act as data processors on our behalf. These may include providers of payment processing, secure data hosting, document storage, IT support, customer relationship management systems and professional advisers such as accountants or lawyers.
These processors are only permitted to handle your personal data in accordance with our instructions and solely for the purposes we specify. They are required to keep your data secure and to comply with applicable data protection laws, including appropriate confidentiality and security safeguards.
We may also share personal data with other third parties where required by law, for example with law enforcement agencies, regulators, courts and government bodies, or where necessary to establish, exercise or defend legal claims. Where we are involved in a business transfer or reorganisation, personal data may be shared with relevant parties where appropriate and lawful.
International Data Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors or service providers, we take steps to ensure an adequate level of protection. This may include using countries that have been formally recognised as providing an adequate level of data protection, or implementing appropriate safeguards such as standard contractual clauses approved by relevant authorities.
Data Security
We take the security of your personal data seriously. We implement technical and organisational measures appropriate to the nature of the data and the risks associated with processing it. These measures may include restricted access controls, secure storage, encryption where appropriate, staff training and regular review of our security procedures. While we strive to protect personal data, no system can be completely secure and we cannot guarantee absolute security.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Your rights include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data together with information about how it is used.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you can request the deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal requirement for us to retain it.
Right to restriction. You can request that we restrict the processing of your personal data in certain situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object. You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.
Right to data portability. Where processing is based on consent or the performance of a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it is transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights
You can exercise your data protection rights by contacting us using the usual communication channels you use to manage your account or by writing to us at our business address. We may need to verify your identity before responding to a request. We aim to respond within the time limits set by data protection law.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or legal requirements. Any revised version will be made available to customers. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
