Storage North Harrow Privacy Policy
This Privacy Policy explains how Storage North Harrow collects, uses and protects the personal data of all Storage North Harrow customers in the area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our storage services, visiting our premises or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all customers and prospective customers of Storage North Harrow located in the surrounding area who use or enquire about our storage units and related services. Storage North Harrow is the data controller, which means we decide how and why your personal data is processed in connection with our services.
Categories of Personal Data We Collect
We only collect personal data that is relevant and necessary for providing and managing our storage services. The categories of personal data we may collect include:
Identification and contact details such as full name, postal address, billing address, and any other contact information you choose to provide.
Account and contract information such as customer reference numbers, storage unit numbers, contract start and end dates, payment history, and information relating to your chosen services.
Payment and transaction data such as payment method and records of payments made to us. We do not store full card details when payments are processed through secure payment processors.
Communication data such as emails, letters, and records of telephone or in-person conversations relating to enquiries, bookings, complaints or support.
Security and access data such as CCTV footage at our premises, access logs for entry systems, and records of visits to our site, where applicable.
Technical information where you use our website, such as IP address, device and browser type, and basic usage data necessary for the operation and security of the site.
How We Collect Your Data
We may collect personal data directly from you when you enquire about our services, sign a storage agreement, make a payment, contact us for support, or visit our premises.
We may also collect data automatically when you visit our website, such as basic technical and usage data needed to operate and protect the website.
In some cases, we may receive information from third parties such as payment processors, reference agencies, or other service providers where this is necessary for our contract with you or to comply with legal obligations.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis under the UK GDPR. Depending on the context, the lawful basis will usually be one or more of the following:
Contract. We process your personal data where this is necessary to enter into a contract with you or to perform a contract for storage services, including managing bookings, payments, access to your unit and communication about your account.
Legal obligation. We process certain data to comply with legal and regulatory obligations, such as keeping appropriate financial and tax records, responding to lawful requests from authorities and maintaining health and safety records on our premises.
Legitimate interests. We process data where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests include securing our premises, preventing fraud, managing and improving our services, and handling queries, feedback and complaints.
Consent. In limited situations, we may rely on your consent, for example for certain optional communications or activities. Where we rely on consent, you can withdraw it at any time, and we will explain how to do this when consent is obtained.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide, administer and manage storage services, including setting up your account, allocating storage units, processing payments and managing renewals or terminations.
To communicate with you about your account, service updates, changes to terms, and practical information related to your storage unit and access.
To secure and monitor our premises, including through CCTV and access control systems, in order to protect customers, staff, property and assets.
To handle customer service requests, enquiries, feedback and complaints, and to maintain records of our interactions with you.
To meet our legal and regulatory obligations, including record keeping, financial reporting and responding to lawful requests from authorities.
To protect our legal rights and interests, including debt recovery, investigating potential breaches of contract or site rules, and handling legal claims.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this Privacy Policy and where permitted by law.
We may share data with external service providers acting as data processors who support our operations. These may include providers of payment processing services, IT and cloud hosting services, security and CCTV maintenance, document storage, and professional advisers such as accountants or legal advisers. These processors are bound by contractual obligations to keep your data secure and to use it only on our instructions.
We may also share your information with third parties where required by law, for example with law enforcement or regulatory authorities, or where necessary to establish, exercise or defend legal claims.
If we undertake any reorganisation or transfer of our business, we may need to share personal data in a controlled manner as part of that process, in accordance with data protection law.
Data Retention
We keep your personal data only for as long as it is reasonably necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
Generally, we retain customer account and contract information for a period after your contract ends to deal with any queries, disputes or legal claims and to comply with statutory retention periods. Payment records and invoices are retained for the minimum period required under tax and accounting laws.
CCTV footage and access logs are retained for a shorter period, only for as long as is required for security monitoring, incident investigation and compliance with any relevant regulations, after which the data is securely deleted or anonymised.
When personal data is no longer required, we will securely delete or anonymise it in line with our data retention and disposal procedures.
International Transfers
Where we use service providers located outside the United Kingdom, or where data may be accessed from outside the United Kingdom, we take steps to ensure that your personal data remains protected. This may include relying on adequacy regulations, using standard contractual clauses or other appropriate safeguards required by data protection law.
Your Data Protection Rights
You have a number of rights in relation to your personal data under the UK GDPR. These rights may be subject to certain legal conditions and exemptions. Your rights include:
Right of access. You can request confirmation that we process your personal data and obtain a copy of that data, together with other information about how it is used.
Right to rectification. You can request correction of inaccurate personal data and completion of incomplete data.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose it was collected or where you withdraw consent and there is no other lawful basis.
Right to restriction. You can request that we restrict the processing of your data in certain circumstances, for example while we verify the accuracy of data or consider an objection you have raised.
Right to object. You can object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop such processing unless we have compelling legitimate grounds or the processing is needed for legal claims.
Right to data portability. In some circumstances, you can request that we provide your personal data in a structured, commonly used and machine-readable format or that we transmit it to another controller, where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, secure storage, staff training and regular review of our security practices. While we strive to protect your personal data, no system can be guaranteed to be completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
