Privacy Policy - Selfstorage Haringey

This Privacy Policy explains how Selfstorage Haringey collects, uses, stores, shares, and protects personal data in connection with our storage services. It applies to all Selfstorage Haringey customers in area, including prospective customers, account holders, authorised users, visitors, and any individuals whose information we process in the course of providing storage-related services.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. This policy is designed to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your data.

1. Data Collection

We collect personal data only where it is necessary for the operation of our business and the provision of storage services. The types of personal data we may collect include:

Identity information such as your name, date of birth, and proof of identity documents where required for verification.
Contact details such as your address, email address, and telephone number.
Account information including customer reference numbers, service preferences, payment status, and booking details.
Financial information such as payment card details, bank account information, billing records, and transaction history.
Security and access information including CCTV recordings, access logs, key or access code records, and vehicle registration details where used for site security.
Correspondence including emails, letters, phone call notes, complaint records, and service communications.
Usage information related to your use of our facilities, services, and online or administrative systems.

We may collect data directly from you when you complete forms, sign agreements, make payments, or communicate with us. We may also receive information from third parties where this is necessary for identity verification, payment processing, insurance arrangements, debt recovery, fraud prevention, or legal compliance.

We do not collect more data than is reasonably necessary for the purposes stated in this policy.

2. How We Use Personal Data

We use personal data for the following purposes:

To register customers and manage storage agreements.
To verify identity and prevent fraud.
To process payments, refunds, and charges.
To provide access to storage units and maintain site security.
To communicate about your account, service changes, notices, and operational matters.
To manage disputes, complaints, and service requests.
To comply with legal obligations, regulatory requirements, and court orders.
To defend legal claims and establish, exercise, or protect our legal rights.
To improve our services, systems, and security controls.

Where we use CCTV or access records, this is done primarily for security, crime prevention, and the protection of customers, staff, and property.

3. Lawful Basis for Processing

We only process personal data where we have a lawful basis under UK GDPR. Depending on the context, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes setting up your storage account, managing your unit, taking payments, and delivering agreed services.

Legal Obligation

We may process personal data where required to comply with legal and regulatory obligations, including tax, accounting, fraud prevention, health and safety, and lawful requests from authorities.

Legitimate Interests

We may process data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include protecting our premises, preventing theft or misuse, maintaining records, improving services, and enforcing contractual rights.

Consent

In limited situations, we may rely on your consent, for example for optional communications or certain non-essential processing. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties that act as processors or independent controllers depending on the service provided. These third parties are only permitted to use your data for specified purposes and under appropriate contractual safeguards.

Examples of processors and recipients may include:

Payment service providers for card and account transactions.
IT and cloud service providers for secure data hosting, storage, and system support.
Security providers for alarm monitoring, CCTV support, and access control systems.
Accountants and auditors for financial reporting and compliance.
Legal and professional advisers for dispute resolution, enforcement, and regulatory advice.
Debt recovery or credit reference agencies where lawful and necessary for overdue payments or fraud prevention.
Public authorities where disclosure is required by law or necessary for legal proceedings.

We require processors to implement appropriate technical and organisational measures to protect personal data. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason for processing.

In general, we may retain:

Customer and contract records for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records for the period required under applicable law.
Security records such as CCTV or access logs for a limited period unless needed for an investigation, claim, or legal matter.
Correspondence and complaints for the time needed to resolve the issue and keep a record of outcomes.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include restricted access controls, secure storage, password protection, staff confidentiality obligations, and monitoring of systems and premises.

Although we take reasonable steps to protect your information, no system can be guaranteed to be completely secure. We therefore encourage customers to protect their own account details and to notify us promptly if they suspect unauthorised use of their information.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal limits, exceptions, or conditions.

Right of access - you may request a copy of the personal data we hold about you.
Right to rectification - you may ask us to correct inaccurate or incomplete information.
Right to erasure - in certain circumstances, you may request deletion of your data.
Right to restrict processing - you may ask us to limit how we use your data in certain cases.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to data portability - where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law.

8. Children’s Data

Our storage services are intended for adults and business users. We do not knowingly collect personal data from children unless it is necessary in connection with a lawful service arrangement or legal obligation. If we become aware that we have collected data improperly, we will take appropriate steps to delete or safeguard it.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable law. Such safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Our Commitments

Selfstorage Haringey is committed to processing personal data fairly, lawfully, and transparently. We collect information only for legitimate storage and business purposes, use it on a valid lawful basis, retain it for no longer than necessary, and share it only with trusted processors or recipients where required. We also respect the rights of every customer and aim to handle all personal data with care, confidentiality, and accountability.

This Privacy Policy applies to all Selfstorage Haringey customers in area.