Storage Hackney Privacy Policy
This Privacy Policy explains how Storage Hackney collects, uses, stores and shares personal data relating to customers and prospective customers in the Hackney area. It is intended to inform you about your rights under the UK General Data Protection Regulation and related data protection laws. By using Storage Hackney services, visiting our premises or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Hackney customers and prospective customers in the Hackney area, including individuals and business customers who enquire about, use or previously used our storage services. Storage Hackney is the data controller for the personal data it processes in connection with the provision and marketing of its services.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and the services you use. This may include the following information.
Identification and contact information: name, postal address, billing address, contact address, date of birth, and identifiers contained in official documents you provide for verification purposes.
Contact details: email address, correspondence address and communication preferences that you provide when you contact us or sign up for our services.
Contract and account information: records of your storage unit bookings, contract start and end dates, access permissions, payment history and related correspondence about your services.
Payment and billing information: information necessary to process payments such as partial card details and payment references. Full payment card information is processed by our payment processors and is not retained by us in a form that allows us to access the complete card number.
Access and security information: details relating to access to our facilities such as unit numbers, access logs, visit times, and information necessary to manage security at our premises including closed circuit television recordings where in operation.
Communication and enquiry records: any information you choose to share with us when you contact us by post, online form or in person, including complaints, feedback and requests.
Marketing and preference data: records of your consent or objection to receive marketing communications and information about your preferences relevant to our services.
How We Collect Personal Data
We may collect personal data directly from you when you contact us for a quotation, make a booking, sign a storage agreement, update your account details, visit our premises or communicate with us in any way. We may also receive limited information from third parties, such as payment service providers who confirm whether a payment has been successful, or public sources used for identity verification and fraud prevention where necessary.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under data protection law. The lawful bases we rely on are as follows.
Performance of a contract: We process personal data when it is necessary to set up, manage and fulfil our contract with you, including providing access to storage units, administering your account, handling billing and responding to your service related enquiries.
Legal obligations: We process personal data when we are required to comply with legal and regulatory obligations, such as record keeping, tax and accounting requirements, security and safety regulations and responding to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate interests or those of a third party, and where these interests are not overridden by your rights and freedoms. This includes managing our facilities, ensuring the security and integrity of the premises, preventing and detecting fraud, improving our services, maintaining business records, and contacting existing customers about similar services.
Consent: In some cases we rely on your consent, for example for certain types of marketing where consent is required. When we rely on consent, you are free to withdraw it at any time and we will stop processing your data for that purpose.
Purposes for Which We Use Personal Data
We use your personal data for the following purposes.
To provide storage services, including setting up your account, processing bookings, managing access to your unit and communicating important service information.
To administer billing and payments, including issuing invoices, processing payments and dealing with any payment queries or disputes.
To manage our relationship with you, including responding to your questions, handling complaints, notifying you about changes to our terms and conditions and keeping records of our communications.
To protect our premises, customers and staff, including operating access controls, conducting security monitoring and maintaining the safety and security of the site.
To comply with legal and regulatory obligations, including record keeping, tax and accounting requirements and responding to lawful requests from authorities.
To improve and develop our services, including analysing how our services are used, monitoring trends and planning the operation and expansion of our business.
To send you marketing communications, where permitted by law, about Storage Hackney services that may be of interest to you. You can object to or opt out of marketing communications at any time.
Data Sharing and Processors
We may share your personal data with carefully selected third parties who act as processors on our behalf. These processors only process your personal data in accordance with our documented instructions and are required to implement appropriate technical and organisational measures to protect your data.
Such processors may include payment processing providers, information technology hosting and support providers, customer relationship management and communication service providers, professional advisers such as accountants or auditors, and physical security or maintenance contractors where necessary for the operation of our facilities.
We may also share personal data where required by law, for example with law enforcement agencies, courts, regulators or tax authorities, or where sharing is necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties. If we consider entering into a business transaction such as a merger or transfer of part of our business, we may share relevant data with prospective buyers or their advisers, subject to confidentiality obligations and data protection requirements.
International Data Transfers
If we use service providers located outside the United Kingdom or European Economic Area, we take steps to ensure that your personal data is afforded a level of protection essentially equivalent to that required under data protection law. This may include reliance on adequacy regulations, or the use of approved standard contractual clauses and additional safeguards where appropriate.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the purposes for which it is processed.
Generally, we retain customer account and contract information for a period necessary to manage your relationship with us and for a period after your contract ends in order to deal with any queries, complaints or legal claims. Financial records are retained for the period required by applicable tax and accounting laws. Security related information, such as access logs and closed circuit television recordings, is retained for a shorter period unless required for investigation of an incident or legal claim.
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a safe manner.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions.
Right of access: You can request confirmation of whether we process personal data about you and obtain a copy of your personal data along with information about how we use it.
Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data that we hold about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine readable format, or that we transmit it directly to another organisation where technically feasible.
Right to object: You can object at any time to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims. You have an unconditional right to object at any time to the processing of your personal data for direct marketing purposes.
Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has not been handled in accordance with applicable law.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage systems, staff training and procedures to handle suspected data breaches. While we work to protect your information, no system can be entirely secure and there is always some risk involved in transmitting data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make material changes, we will take reasonable steps to bring the updated policy to your attention. The most recent version will always apply to the personal data we hold about you.
