Storage New Southgate Privacy Policy Overview
This Privacy Policy explains how Storage New Southgate collects, uses, stores and protects personal data relating to all Storage New Southgate customers in the area. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Storage New Southgate acts as the data controller for the personal data it processes about its customers and prospective customers. This means we determine the purposes and means of processing your personal data.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage New Southgate customers in the area, as well as to individuals who enquire about or use our storage services, visit our premises, or otherwise interact with us in relation to our services. It describes how we handle personal data about individuals, not about companies or other organisations.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details such as your name, postal address, billing address, date of birth, and identification document details where required for verification and security.
Contact information such as email address and any communication preferences you share with us.
Service and contract information such as unit numbers, access permissions, contract duration, pricing, payment status, renewals, and termination dates.
Payment and billing information such as payment method details, billing history, invoices, and records of payments. We do not store full card details if payment is processed through a secure third-party provider.
Security and access information such as CCTV footage at our premises, access logs, gate or door entry records, and incident reports relating to safety and security.
Communication records such as enquiries, complaints, feedback, and any correspondence you have with us in writing or by other communication channels.
Technical and usage information such as information generated when you visit our website, including standard log data and information related to your use of online account features where available. This may include identifiers such as IP addresses where necessary for security and service functionality.
How We Collect Your Data
We may collect personal data directly from you when you complete a storage agreement, make an enquiry, request a quote, visit our premises, make or receive payments, contact us with questions, or update your account details.
We may also obtain personal data automatically when you use our website or digital services, such as technical information necessary to provide and secure these services.
In limited cases we may receive personal data from third parties, for example reference checks or information from payment providers, fraud prevention agencies, or law enforcement where this is lawful and necessary.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis to do so. Depending on the circumstances, we may rely on the following lawful bases:
Performance of a contract. We process personal data to enter into and perform our storage contracts with you, including setting up your account, managing your storage unit, taking payment, communicating about your contract, and providing customer service.
Legal obligations. We process certain personal data to comply with legal and regulatory requirements, including record keeping, tax obligations, preventing fraud, and responding to lawful requests from authorities.
Legitimate interests. We process personal data where necessary for our legitimate interests, provided these are not overridden by your rights and interests. These interests include securing our premises and property, ensuring the safety of customers and staff, improving our services, managing our business operations, handling disputes, and marketing our services to existing customers in a proportionate way.
Consent. In some cases, we rely on your consent, for example for certain optional marketing communications. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up, administering, and renewing storage contracts and processing payments.
To verify identity where appropriate and maintain the security of our premises, including access control and CCTV monitoring.
To manage customer relations, including responding to enquiries, handling complaints, resolving issues, and providing customer support.
To operate, maintain, and improve our business processes, services, and customer experience.
To meet our legal and regulatory obligations and cooperate with law enforcement or regulatory bodies when legally required.
To send service-related information such as contract updates, notices about your storage unit, changes to terms, or information required for safety and security.
To send marketing communications about our services where this is permitted by law and, where required, with your consent. You can opt out of marketing communications at any time.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for a period after the end of the storage agreement to manage any queries, disputes, or legal claims, and to comply with statutory retention periods for business and tax records.
CCTV footage and access logs are kept for a limited period that is appropriate for security and incident investigation purposes, unless a specific incident requires us to retain relevant footage for longer in connection with an investigation or legal claim.
When personal data is no longer required, we will delete it or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may use trusted third-party service providers to process personal data on our behalf in accordance with our instructions and this Privacy Policy. These service providers act as data processors and may assist us with services such as payment processing, accounting, secure data storage, customer management systems, and security services including CCTV system maintenance.
We ensure that any data processor we use provides sufficient guarantees to implement appropriate technical and organisational measures to protect personal data. We put in place written agreements requiring them to keep your data secure, to use it only for the agreed purposes, and to process it in accordance with applicable data protection laws.
We may also share personal data with other third parties where necessary, including professional advisers such as lawyers or auditors, insurers, law enforcement or regulatory authorities where required by law, and in connection with a business reorganisation where permitted by law.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers or systems located outside the United Kingdom, we will take steps to ensure that your personal data receives an adequate level of protection. This may include relying on adequacy regulations, using standard data protection clauses approved for use in international transfers, or implementing other appropriate safeguards required under data protection law.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures may include restricted access to systems and premises, encryption or pseudonymisation where appropriate, secure storage, staff training, and procedures for handling suspected data breaches.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage New Southgate customers in the area, subject to certain legal conditions and limitations. Your rights include:
Right of access. You can request confirmation as to whether we process your personal data and obtain a copy of your personal data, together with information about how we use it.
Right to rectification. You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data. This is not an absolute right and may be subject to our need to retain data for legal or contractual purposes.
Right to restriction of processing. You can request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of the data or handle an objection.
Right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds or the processing is required for legal claims. You can also object at any time to direct marketing.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may be entitled to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect processing carried out before withdrawal.
To exercise any of your rights, you can contact us using the contact methods provided on our main customer communications. We may need to verify your identity before responding to your request.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any significant changes will be communicated where appropriate, and the updated policy will apply from the date it is published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
