Storage Norwood Green Privacy Policy
This Privacy Policy explains how Storage Norwood Green collects, uses, stores and protects personal data relating to customers and prospective customers in the Norwood Green area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Norwood Green customers, former customers and prospective customers in the Norwood Green area. It covers data collected in person at our premises, by telephone, in writing, and through any other offline or online communication channels that we use to provide or promote our storage services.
Data Controller
Storage Norwood Green is the data controller for the personal data described in this Privacy Policy. As data controller, we are responsible for deciding how and why your personal data is used and for ensuring that it is handled in accordance with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you, where relevant to the services you use or request from us:
Identification and contact details, such as your name, postal address, billing address, contact address, and any other address you provide to us, as well as your contact preferences.
Account and contract information, such as customer reference numbers, storage unit or space details, rental agreements, start and end dates, payment status, and communications relating to your contract.
Payment and billing information, such as payment method details, invoices, transaction records and related accounting information. We do not store full payment card numbers if processed by a payment service provider; in such cases, the payment processor will handle and store this data.
Identity verification information, such as copies or details of passports, driving licences or other identity documents you choose or are required to provide for security or contractual reasons.
Security and access information, such as CCTV footage on our premises, access logs, unit entry records, records of keys or access devices issued, and records of any incidents reported on site.
Communication data, such as records of your correspondence with us including letters and notes of phone conversations, and any information you choose to provide when you contact us with an enquiry, feedback or a complaint.
Marketing preferences, such as your choices about receiving updates or offers relating to Storage Norwood Green and records of any consent you have given or withdrawn.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, visit our premises, sign a storage agreement, make a payment or communicate with us in any other way.
We may also generate personal data about you in the course of providing our services, for example through our access control systems and CCTV recordings, or by creating records of payments received.
In limited cases, we may receive personal data about you from third parties, such as payment processors confirming payment status, or from law enforcement or regulatory bodies where this is required by law.
Lawful Basis for Processing
We rely on the following lawful bases for processing your personal data, depending on the specific purpose involved:
Contract. We process your data where it is necessary to enter into or perform a storage agreement with you, including setting up your account, managing your storage unit, processing payments and communicating with you about your contract.
Legal obligation. We process personal data where this is necessary to comply with our legal obligations, such as maintaining accounting records, responding to lawful requests from authorities, and meeting health and safety or security requirements.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This can include ensuring the security of our premises, preventing fraud or misuse of our facilities, managing and improving our services, and keeping basic records of interactions with customers and potential customers.
Consent. In situations where we rely on your consent, such as for certain types of direct marketing that are not covered by legitimate interests, we will ask for your clear and specific permission. You can withdraw your consent at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide storage services to you, including setting up your account, managing your storage space, handling access to the premises, and administering your contract.
To process payments, issue invoices, manage debt recovery where necessary, and maintain accurate financial and accounting records.
To communicate with you, including responding to your questions, handling complaints, and sending you important information about your contract, such as changes to terms, prices or access arrangements.
To maintain the safety and security of our premises, customers, staff and property, including operating CCTV systems and access controls, investigating security incidents and preventing unauthorised access.
To comply with legal and regulatory obligations, including for tax purposes, record-keeping, law enforcement cooperation and responding to lawful requests from public authorities.
To manage and improve our services and operations, including analysing how our services are used, maintaining our facilities and planning for future capacity.
To send you marketing communications about our services if you have agreed to receive them, or where we are otherwise permitted to do so by law. You can opt out of marketing communications at any time.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or allowed by law.
Customer account and contract information is generally retained for the duration of your contract and for a period afterwards to enable us to handle any queries, disputes or legal claims and to comply with our legal obligations.
Financial and transaction records are kept for the period required by applicable tax and accounting laws.
CCTV footage and access logs are kept for a limited period, which is determined by security needs and legal requirements, unless specific footage or records need to be retained longer in connection with an investigation or legal claim.
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
Data Processors and Third Parties
We may use trusted third-party service providers to process personal data on our behalf in connection with the services we provide. These data processors may include providers of payment processing services, accounting or bookkeeping services, security and CCTV system maintenance, data storage or backup services, and other professional or technical support services.
Where we use data processors, we ensure that they only process personal data in accordance with our instructions, that they provide appropriate technical and organisational security measures, and that they are bound by data protection obligations that are at least as protective as those set out in this Privacy Policy.
We may also share personal data with other third parties where required by law, such as law enforcement agencies, regulatory authorities, courts and government bodies, or in connection with legal claims or proceedings.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers or systems located outside the United Kingdom, we will ensure that any transfer of personal data is carried out in compliance with data protection laws. This may include using countries that have been recognised as providing an adequate level of protection for personal data, or implementing appropriate safeguards such as standard contractual clauses approved by the relevant authorities.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions or exceptions. Subject to those, you have the right to:
Access your personal data and receive information about how we process it.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the purposes for which it was collected.
Object to certain types of processing, including processing based on our legitimate interests or for direct marketing purposes.
Request restriction of processing in certain circumstances, for example while we are considering a request you have made to correct or object to our use of your data.
Request the transfer of your personal data to you or to another organisation in a structured, commonly used and machine-readable format, where applicable.
Withdraw consent at any time where we rely on consent to process your personal data. This will not affect the lawfulness of processing carried out before you withdraw your consent.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so we can address your concerns directly.
Security of Your Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include physical security controls at our premises, access controls to systems holding personal data, staff training on data protection responsibilities and procedures for responding to suspected data breaches.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operations or legal obligations. The updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
