Storage South Harrow Privacy Policy
This Privacy Policy explains how Storage South Harrow collects, uses, stores, and shares personal data relating to individuals who enquire about, use, or otherwise interact with our storage services in the South Harrow area. It is intended to provide clear information about our data practices and your rights under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all customers, prospective customers, authorised users on a customer account, and any other individuals whose personal data we process in connection with our storage services in the South Harrow area.
Data Controller
For the purposes of data protection law, Storage South Harrow is the data controller in respect of the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed in relation to our storage services.
Personal Data We Collect
We collect and process personal data that is necessary to provide and manage our storage services, to comply with our legal obligations, and to protect our legitimate interests. The categories of personal data we may collect include:
Identification and contact details such as full name, postal address, billing address, contact address, and details of any authorised persons on your account.
Contact information such as email address and other contact details you choose to provide so we can communicate with you about your enquiries, bookings, and ongoing storage arrangements.
Account and contract information such as unit number, contract start and end dates, details of services taken, payment status, and correspondence relating to your account.
Payment and transaction information such as records of payments made, amounts due, payment method used, and associated billing details. We do not store full payment card details where payments are processed by third party payment service providers.
Security and access information such as vehicle registration numbers provided for site access, gate or unit access codes, security log data relating to entry and exit times, and closed circuit television footage in and around our premises where CCTV is in operation.
Communication data such as copies of emails, letters, and any notes from telephone or in person discussions, where relevant to the management of your account or to the resolution of enquiries or disputes.
Technical data relating to your use of our websites or online portals, where applicable, such as IP address, approximate location derived from your connection, device information, and basic usage data, collected using standard web technologies.
How We Collect Your Data
We collect personal data directly from you when you contact us for an enquiry or quote, make a booking, sign a storage agreement, update your details, set up or amend a payment method, communicate with us by telephone, email, online form, or in person at our premises, or use any online customer portals we provide.
We may also receive personal data about you from third parties where it is lawful and necessary. These may include payment service providers, debt collection agencies, law enforcement or other public authorities, and individuals who are authorised by you to deal with us about your storage arrangements.
Lawful Basis for Processing
We rely on one or more of the following lawful bases under data protection law to process your personal data:
Contract. We process personal data where it is necessary to enter into or perform our contract with you, including to set up and administer your storage unit, process payments, manage your account, and communicate with you about your storage arrangement.
Legal obligation. We process personal data where we are required to do so by law, including for tax and accounting purposes, to comply with law enforcement requests, to meet obligations relating to health and safety, and to comply with record keeping requirements.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include ensuring the security of our premises and property, managing and improving our services, preventing fraud and misuse of our facilities, and pursuing and defending legal claims.
Consent. In limited circumstances, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you can withdraw it at any time by contacting us using the details provided in this Privacy Policy.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you, including handling enquiries, providing quotes, entering into and administering storage agreements, managing bookings and extensions, and maintaining our customer database.
To process payments, manage billing and invoicing, deal with payment queries, and keep accurate financial records.
To maintain the safety and security of our premises, customers, and staff, including controlling and monitoring access to the site, using CCTV where in place, and investigating incidents, accidents, or suspected unlawful activity.
To communicate with you about your account, including sending service messages, contract information, changes to terms and policies, and important notices about site access or safety.
To manage our business operations, including internal reporting, quality assurance, staff training, service improvement, and planning and forecasting.
To comply with legal and regulatory requirements, to respond to requests from public authorities, and to establish, exercise, or defend legal claims.
To send you information about similar services that we believe may be of interest to you, where permitted by law. You can opt out of receiving such communications at any time.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The length of time we retain data will vary depending on the type of data and the reason for processing.
In general, we retain customer account records, contract documents, and related correspondence for a period after the end of the storage agreement to enable us to respond to queries, deal with any disputes, and comply with legal obligations. Payment and transaction records are held for periods required by tax and accounting rules. CCTV footage, where used, is normally retained for a limited period, unless it is needed for the investigation of an incident or for legal proceedings.
When personal data is no longer required, we will securely delete or anonymise it, so that it can no longer be associated with you.
Data Processors and Sharing
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers are only permitted to process your personal data in accordance with our instructions and must implement appropriate security measures. Such processors may include providers of payment processing services, customer management or billing systems, secure data storage and backup, IT support and maintenance, and security and CCTV system support.
We may also share personal data with other third parties where necessary and lawful, including professional advisers such as lawyers and accountants, law enforcement and other public authorities, debt collection agencies for the recovery of unpaid charges, and courts or tribunals in connection with legal proceedings.
Where we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Your rights include:
The right of access. You have the right to request confirmation of whether we process your personal data and, if so, to request a copy of the personal data we hold about you and related information.
The right to rectification. You have the right to ask us to correct any inaccurate or incomplete personal data that we hold about you.
The right to erasure. In certain circumstances, you may have the right to request that we delete your personal data. This is sometimes known as the right to be forgotten. This right is not absolute and does not apply where we have a legal obligation or compelling legitimate grounds to retain the data.
The right to restriction of processing. You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or consider an objection you have raised.
The right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling based on those interests, and we will stop processing unless we have compelling legitimate grounds to continue. You also have an absolute right to object to direct marketing.
The right to data portability. In some circumstances, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine readable format and to request that we transmit that data to another controller where this is technically feasible.
The right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before consent was withdrawn.
How to Exercise Your Rights
If you wish to exercise any of your data protection rights, or if you have any questions or concerns about how we handle your personal data, you can contact us using the contact details provided on our main customer communications and documentation. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we have handled your personal data. We would, however, welcome the opportunity to address your concerns directly before you approach the authority.
Applicability to Customers in the South Harrow Area
This Privacy Policy applies to all Storage South Harrow customers, prospective customers, and individuals associated with customer accounts whose personal data is processed in connection with our services in the South Harrow area, regardless of the specific unit or facility used.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we provide. When we make significant changes, we will take reasonable steps to inform you, for example by updating the policy on our customer information materials or by providing a notice in our premises or through our usual communication channels.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
