Storage Harold Hill Privacy Policy
This Privacy Policy explains how Storage Harold Hill collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Harold Hill service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our services, visiting our premises, or interacting with us in any way, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all customers, prospective customers, and users of services provided by Storage Harold Hill within our operating area. It covers personal data collected through our storage facilities, written correspondence, forms, contracts, and any other direct interactions with you.
Data Controller
Storage Harold Hill is the data controller in respect of the personal data we collect and process about you. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that it is handled in accordance with applicable data protection laws.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you use our services:
Identification data such as full name, date of birth, and photo identification details.
Contact details such as postal address, billing address, and any other correspondence addresses.
Customer account information such as unit numbers, contract details, start and end dates of storage, and payment history.
Financial and payment information such as bank or card details processed through secure payment processors, and records of payments made.
Communication records such as enquiries, complaints, and any correspondence you send to us in writing or by other means.
Security and access information such as access codes, key issuance records, and CCTV images captured on or around our premises where in use.
Technical and usage data related to our booking or account systems if you interact with any online platforms operated for Storage Harold Hill, such as log times and actions taken on your account.
How We Collect Your Personal Data
We collect personal data directly from you when you enter into a storage agreement, complete forms, provide identification, make payments, or contact us with queries. We may also collect personal data automatically through security and access systems at our premises, such as CCTV or entry logs, to ensure the safety and integrity of our facility.
In some cases, we may receive personal data about you from third parties, for example credit reference agencies or payment providers, where this is necessary to manage risk, prevent fraud, or process a transaction you initiate.
Lawful Bases for Processing Your Data
We process your personal data only where we have a lawful basis to do so under the UK General Data Protection Regulation. Depending on the context, we rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into a storage agreement with you, to provide storage services, to manage your account, to collect payments, and to respond to contractual queries or requests.
Legal obligation: We process certain personal data to comply with legal and regulatory obligations, such as record keeping, accounting requirements, and obligations relating to crime prevention or law enforcement requests.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This may include ensuring site security, safeguarding property, preventing fraud, improving our services, and managing our operations.
Consent: In limited situations, we may rely on your consent, for example for certain types of direct marketing. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To set up, administer, and manage your storage contract and any associated services.
To verify your identity, carry out fraud prevention checks where appropriate, and protect the security of our premises and other customers.
To process payments, issue invoices, chase overdue accounts, and maintain accurate financial records.
To communicate with you about your account, including operational notices, contract renewals, changes to terms, and responses to enquiries or complaints.
To operate and maintain our security systems, including access controls and CCTV monitoring, to protect people, property, and assets.
To comply with our legal and regulatory obligations, including cooperation with law enforcement or other competent authorities where required.
To manage our business operations, including quality control, training, and service improvement.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Factors we consider when determining retention periods include the nature and sensitivity of the data, the risks of harm from unauthorised use or disclosure, and our statutory obligations.
Typically, we retain customer account and contractual information for a number of years after your storage agreement ends, to enable us to respond to queries, resolve disputes, and meet legal obligations. Security-related data such as CCTV footage and access logs is usually kept for shorter periods unless it is required for an ongoing investigation or legal claim.
When personal data is no longer required, we will securely delete, anonymise, or destroy it in accordance with our data retention and deletion procedures.
Sharing Your Personal Data and Use of Processors
We may share your personal data with third parties where this is necessary for the purposes described in this Privacy Policy, and only where appropriate safeguards are in place.
We use carefully selected data processors to process personal data on our behalf. These may include payment processing providers, IT system and hosting providers, CCTV and security service providers, and professional advisers such as accountants. These processors are only permitted to process your personal data in line with our written instructions and are required to implement appropriate technical and organisational measures to protect it.
We may also share personal data with law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, or where this is necessary to protect our rights, property, or the safety of others.
We do not sell your personal data to third parties. If we were to consider any change in ownership or structure of Storage Harold Hill, personal data may be disclosed to potential buyers or investors under confidentiality obligations, solely for the purpose of evaluating the relevant transaction.
International Transfers
Where personal data is processed using systems or service providers located outside the United Kingdom, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. This may include the use of standard contractual clauses or reliance on adequacy decisions where available.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with information about how it is used.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, for example while the accuracy of the data is being verified.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
Right to object: You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests. You also have an absolute right to object to direct marketing.
Rights in relation to automated decision-making: You have rights not to be subject to a decision based solely on automated processing, including profiling, where this has legal or similarly significant effects on you, unless certain conditions apply.
To exercise any of these rights, you should contact Storage Harold Hill using your usual communication channels with us and clearly describe the nature of your request. We may need to verify your identity before responding. We will respond to legitimate requests within the time limits set by law.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include physical security at our premises, access controls, secure storage of records, and restrictions on who can access personal data within our organisation and among our processors.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will take effect when the updated version is made available to you. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use your personal data.
Contact and Complaints
If you have any questions about this Privacy Policy or how Storage Harold Hill handles your personal data, you can contact us using your usual communication method with our team at our site or by written correspondence.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly in the first instance.
