Storage Barnsbury Privacy Policy
This Privacy Policy explains how Storage Barnsbury collects, uses and protects personal data relating to customers and prospective customers in the Barnsbury area. It is intended to comply with applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
By using Storage Barnsbury services, making an enquiry or entering into a contract with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Barnsbury customers and prospective customers in the Barnsbury area, including individuals, sole traders and representatives of business customers. It covers personal data collected in person at our premises, over the phone, through online forms, and through any other communication channels used to provide storage services, customer support or related activities.
Data Controller
Storage Barnsbury is the data controller for the personal data described in this Privacy Policy. As data controller, we decide why and how your personal data is processed and are responsible for ensuring that such processing is carried out in accordance with data protection law.
Personal Data We Collect
The type of personal data we collect will depend on your relationship with us and the services you use. We may collect and process the following categories of personal data:
Identification and contact details such as full name, postal address, billing address, and other basic contact information you provide to us.
Account and contract information such as customer or unit reference numbers, storage unit details, rental start and end dates, payment history and communications about your contract.
Payment information such as payment method and transaction details. Card details are handled in a secure and compliant manner and are not retained by us beyond what is necessary for processing and evidence of payment.
Verification and security information such as copies or details of identification documents if required for security or legal purposes, and vehicle registration numbers used to access the premises.
Technical and usage data such as details about your visits to our premises captured by access control systems or CCTV operating on and around our site for security and safety purposes.
Communication data such as records of enquiries, complaints, feedback or other communications you make to us by phone, in person or through online forms.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, visit our premises, make a payment or contact us for customer support.
We may also collect limited information from third parties, for example from payment service providers confirming transaction status, or from public sources where this is necessary to verify identity or address information.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, for example to set up your storage unit, manage your account, process payments and provide customer service.
Legal obligation: We process certain personal data to comply with our legal and regulatory obligations, such as record keeping, tax and accounting requirements, and safety and security obligations.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and these are not overridden by your interests or fundamental rights. This may include operating and improving our storage services, ensuring site security through access control and CCTV, preventing fraud and misuse, and handling customer enquiries and complaints.
Consent: In limited situations, we may rely on your consent, for example for certain types of optional communications not directly related to your contract. Where we rely on consent, you may withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To respond to enquiries, provide quotes and explain our services.
To set up, manage and administer your storage contract, including unit allocation, renewals, upgrades or terminations.
To process payments, manage billing and deal with any payment queries.
To maintain security and safety at our premises, including through access control systems and CCTV monitoring where in place.
To communicate with you about your contract, notices relevant to your storage unit, service updates and changes to our terms and policies.
To manage our business operations, including auditing, accounting and internal reporting.
To handle complaints, disputes or legal claims and to establish, exercise or defend our legal rights.
To comply with any applicable laws, regulations or requests from authorities.
Data Retention
We keep your personal data only for as long as it is necessary for the purposes described in this Privacy Policy or as required by law. The retention period will depend on factors such as the nature of the data, the purpose for which it is processed and any statutory retention periods.
In general, we retain customer and contract records for a period after the end of the storage agreement to respond to any queries, handle potential disputes or meet legal and regulatory requirements. CCTV recordings and access control logs, where used, are kept for a shorter period unless a longer retention is required in connection with an incident, investigation or claim.
When personal data is no longer required, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers are only permitted to process your personal data in accordance with our instructions and must implement appropriate technical and organisational measures to protect it.
Such processors may include payment processing providers, cloud storage and IT support services, maintenance contractors for security systems and professional advisers such as accountants where they need access to specific information to perform their services.
We may also share personal data with third parties acting as independent data controllers where required by law, for example with law enforcement agencies, regulatory bodies or courts, or where necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers located outside the United Kingdom, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data, such as relying on adequacy regulations or standard contractual clauses approved under data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: You have the right to request confirmation as to whether we process your personal data and, if so, to receive a copy of that data along with related information.
Right to rectification: You have the right to request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, for example while the accuracy of the data is being checked or where you have objected to our use of it.
Right to object: You have the right to object to processing based on our legitimate interests on grounds relating to your particular situation. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims.
Right to data portability: In certain circumstances, you may ask to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are proportionate to the nature of the personal data and the risks associated with processing it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection guidance. The revised version will apply from the date it is made available. You should review this Privacy Policy periodically to stay informed about how we handle your personal data.
