Storage North Finchley Privacy Policy
This Privacy Policy explains how Storage North Finchley collects, uses, stores and protects personal data relating to our customers and prospective customers in the North Finchley area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage North Finchley customers and anyone who makes an enquiry or interacts with us in connection with our storage services in the local area.
Who we are and scope of this policy
Storage North Finchley is a self-storage service provider operating in the North Finchley area. For the purposes of data protection law, Storage North Finchley is the data controller in relation to the personal data described in this Privacy Policy. This policy applies to all customers, leads and visitors whose personal data we process in connection with the provision of storage units and related services.
Personal data we collect
We collect and process different types of personal data depending on your relationship with us. This may include:
Identity and contact data: name, postal address, billing address, contact address, date of birth, and other similar identifiers necessary to manage your storage agreement.
Communication data: information you provide when you contact us in person, by post or through any messaging or enquiry system, including enquiries, complaints and feedback.
Contract and account data: information about the storage unit you rent, start and end dates, payments received, invoices issued, deposit details, access permissions and correspondence relating to your account.
Payment data: information relating to payments, such as the name on the payment card or bank account, partial card details where required for verification, payment history and billing information. Full card details are not stored by us if processed via a secure payment processor.
Usage and security data: information relating to your access to the facility, such as unit number, dates and times of entry where access control systems are used, and records of any incidents or security reports connected with your use of the facility.
Marketing preference data: information about your preferences for receiving marketing or service updates from us, including records of your consent or objection to marketing.
We generally do not seek to collect special category data such as health information or data relating to criminal convictions. If such information is provided to us on an incidental basis, we will only process it where strictly necessary and lawful, and we will protect it with appropriate safeguards.
How we collect your personal data
We collect personal data directly from you when you contact us, request a quote, visit our premises, sign a storage agreement, make a payment, or communicate with us about your account. We may also receive data indirectly from third parties, such as payment processors who confirm whether a transaction has been authorised, or providers of security or maintenance services who report an incident involving your unit.
Lawful basis for processing
We only process your personal data when we have a lawful basis to do so. The main lawful bases we rely on are:
Contract: to take steps at your request before entering into a storage agreement and to perform our contract with you, including setting up and managing your account, providing you with access to your storage unit and administering payments.
Legal obligation: to comply with legal and regulatory requirements, including tax, accounting, prevention of fraud and crime, and responding to lawful requests from public authorities.
Legitimate interests: to operate and improve our storage business, maintain the security of our premises, manage customer relationships, handle enquiries, establish or defend legal claims and protect our assets, provided that such interests are not overridden by your rights and interests.
Consent: for certain types of communication or processing that are not strictly necessary for the contract or our legitimate interests, for example some forms of marketing. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your customer record, preparing and administering storage agreements, processing payments and deposits, and communicating with you about your unit and account.
To maintain security and safety, including managing access to the facility, investigating incidents or potential breaches and protecting our property and the property stored on the premises.
To manage our business operations, including internal administration, accounting, auditing, service improvement and staff training.
To comply with legal and regulatory requirements, including record keeping, responding to regulatory or law enforcement requests and resolving disputes.
To send you service information and, where permitted, relevant messages about similar services or offers. You can object to marketing communications at any time.
Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by law or to establish, exercise or defend legal claims. In general:
Customer account and contract data are kept for the duration of your contract and for a period after closure, typically up to six years, to comply with legal, tax and accounting obligations and to manage any potential disputes.
Payment and financial records are kept in accordance with legal and regulatory requirements relating to financial reporting and taxation.
Enquiry and communication records are retained for a reasonable period to respond to your request and, where relevant, to demonstrate how we handled it.
Security and incident data are kept for as long as necessary to investigate and resolve the matter and to comply with any legal obligations.
When personal data is no longer required, it will be securely deleted or anonymised so that it can no longer be associated with you.
Sharing your personal data and use of processors
We do not sell your personal data. We may share your data with carefully selected third parties where necessary for the purposes described in this Privacy Policy or where we are legally required to do so. These include:
Service providers acting as data processors who provide services such as payment processing, secure data storage, accounting, facility management, maintenance, security and IT support. These providers only process your data on our instructions and are subject to contractual obligations to protect your information.
Professional advisers such as accountants, auditors, legal representatives and insurance providers who assist us in running our business and protecting our legal rights.
Public authorities, law enforcement agencies and regulators where we are required or permitted by law to share data, for example in connection with an investigation or to prevent fraud or crime.
Other third parties involved in a corporate transaction, such as a sale or restructuring of the business, where necessary and subject to appropriate confidentiality protections.
Where we use data processors, we ensure they provide sufficient guarantees regarding the security and confidentiality of your personal data and that they act only on our documented instructions.
International data transfers
Our primary operations and data storage are intended to be within the United Kingdom or the European Economic Area. If we or our processors transfer personal data to a country outside the United Kingdom or European Economic Area that does not offer the same level of data protection, we will ensure appropriate safeguards are in place, such as approved standard contractual clauses or an adequacy decision, to protect your rights.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: you can request confirmation that we process your personal data and obtain a copy of that data.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure: in certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected.
Right to restriction: you can request that we restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller where technically feasible.
Right to object: you can object at any time to processing based on our legitimate interests, including profiling, and we will stop processing your data unless we have compelling legitimate grounds to continue. You also have an absolute right to object to direct marketing.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
If you wish to exercise any of these rights, please contact us using the contact channels made available to you by Storage North Finchley. We may need to verify your identity before responding to your request.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include limiting access to personal data to staff and processors who need it for their duties, maintaining secure systems and applying appropriate physical, electronic and managerial safeguards. While we strive to protect your data, no system can be guaranteed to be completely secure.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
