Storage Tottenham Privacy Policy
This Privacy Policy explains how Storage Tottenham collects, uses, stores, and protects personal data relating to our self-storage and associated services. It applies to all Storage Tottenham customers and prospective customers in our service area, as well as individuals who contact us with enquiries or interact with us in connection with our services.
We are committed to handling your personal data in a lawful, fair, and transparent manner and in accordance with applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
Data Controller
For the purposes of data protection law, Storage Tottenham is the data controller for the personal data we process about you in connection with our services. This means we decide how and why your personal data is used.
Personal Data We Collect
We may collect and process the following categories of personal data when you use our services or interact with us:
Identification and contact details: name, postal address, billing address, contact address, and similar identifiers; details required to confirm your identity, such as date of birth or ID document details where necessary.
Contact information: email address, any messaging usernames you choose to provide, and other communication preferences.
Account and contract information: customer account number, storage unit number, contract start and end dates, payment records, correspondence relating to your agreement, and service preferences.
Payment and transaction information: payment method details, transaction history, invoices, and records of payments made or due. Where required, limited information may be processed by our payment processors to complete a transaction.
Usage and operational data: records of your access to the facility such as entry and exit times where access control systems are in use, records of enquiries, complaints, and other interactions with our customer service team.
Security and CCTV data: images captured by closed-circuit television in and around our facilities, used for security, crime prevention, and safety purposes.
Technical and website data: information collected when you visit our website, such as IP address, browser type, and basic analytics data about how you use our online services, to the extent this data identifies or relates to you.
Lawful Basis for Processing
We rely on one or more of the following lawful bases under the UK GDPR to process your personal data:
Performance of a contract: We process your personal data when it is necessary to enter into or perform a contract with you, including providing you with storage services, managing your account, processing payments, communicating with you about your contract, and handling service-related enquiries.
Compliance with legal obligations: We process your data when necessary to comply with legal and regulatory requirements, such as tax and accounting rules, fraud prevention obligations, or lawful requests from authorities.
Legitimate interests: We may process personal data when it is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. This includes maintaining security of our premises, preventing fraud and crime, managing and improving our services, handling customer service issues, and pursuing or defending legal claims.
Consent: In limited situations, we may rely on your consent to process certain personal data, for example for specific marketing communications where required by law. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, manage, and administer your storage contract and customer account.
To provide and operate our storage and related services, including facility access and support.
To communicate with you about your account, payments, changes to our services, and responses to enquiries.
To process payments, issue invoices, and manage debt recovery where necessary.
To maintain the security and safety of our facilities, including the use of CCTV and access control systems.
To maintain accurate business and financial records for accounting and audit purposes.
To monitor, maintain, and improve our services and website, including internal reporting and administration.
To comply with legal obligations and assist law enforcement or regulatory authorities where we are required or permitted to do so.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with third parties in the following circumstances:
Service providers and processors: We may share personal data with carefully selected third-party service providers who act as data processors on our behalf. These may include payment processing providers, IT and cloud hosting providers, access control and security system providers, professional advisers, and customer management system providers. These service providers may only process your data in accordance with our instructions and must implement appropriate security measures.
Professional and legal advisers: We may share data with legal advisers, accountants, or insurers where necessary to obtain professional services or to manage legal claims.
Authorities and law enforcement: We may disclose your personal data to government bodies, regulators, law enforcement agencies, or courts where required to do so by law, or where disclosure is necessary to protect our rights, the rights of others, or to assist in the prevention or detection of crime.
Business transfers: In the event that part or all of our business is sold, transferred, or integrated with another organisation, your personal data may be transferred as part of that process, in line with applicable laws and subject to appropriate safeguards.
Data Retention
We keep your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected and to meet any legal, accounting, or reporting obligations.
In general, we retain core customer and contract records for the duration of your relationship with us and for a period after your contract ends, in line with statutory limitation periods and financial record-keeping requirements.
CCTV footage is retained for a limited period, usually only long enough to investigate incidents or meet security purposes, unless a longer retention period is required in connection with a specific investigation or legal claim.
When personal data is no longer needed, we will delete or anonymise it in a secure manner.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not provide the same level of data protection as the UK. In such cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved for use under data protection law, and we will take steps to protect your privacy rights.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions.
Right of access: You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.
Right to rectification: You can request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or assess an objection you have raised.
Right to data portability: You can request to receive certain personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling related to such interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.
Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time.
Complaints and Contact
If you have concerns about how we handle your personal data, you can raise them with us so that we have the opportunity to address them. You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner's Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will be posted in the latest version of this Policy, and the updated version will apply from the date it is published.
Your continued use of our services after any changes have been made will be taken as your acknowledgement of the updated Privacy Policy.
