Self Storage Haringey Privacy Policy
This Privacy Policy explains how Self Storage Haringey collects, uses, shares and protects personal data relating to our customers and prospective customers in the Haringey area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act, and how you can exercise those rights.
This Privacy Policy applies to all Self Storage Haringey customers, account holders, authorised users, guarantors, payers and any individual who contacts or interacts with us in connection with our self storage services in the Haringey area.
Who we are and our role as data controller
Self Storage Haringey is the organisation responsible for deciding how and why your personal data is processed in connection with our storage services. For the purposes of data protection law, we act as the data controller when we handle your personal information as described in this Privacy Policy.
Where we use third parties to process personal data on our behalf, those third parties act as data processors and are bound by written contracts requiring them to protect your data and only process it in accordance with our documented instructions.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us and the services you use. This may include:
Identification and contact details: name, postal address, billing address, date of birth, identification document details, and contact details such as email address and any contact preferences you communicate to us.
Account and contract information: customer account number, unit number, contract start and end dates, payment terms, communication history with us, and details of any authorised persons on your account.
Payment and transaction data: payment method details, records of payments made, payment status, invoices, credits and refunds. Card details are processed via secure payment providers and are not stored by us in full where this is not necessary.
Security and access data: CCTV footage in and around our facilities where installed, access control logs, visit records, and records of any incidents or complaints. CCTV is used for site safety, security and crime prevention.
Usage and communication data: records of enquiries and communications with us, notes of conversations, requests or complaints, and information provided via forms or correspondence when you contact us about our services.
Technical information: if you visit our website, basic technical data such as your IP address, browser type, and information about how you navigate the site may be collected through standard web technologies. This helps us maintain and improve our online services.
Lawful bases for processing your data
We will only process your personal data where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contract: to take steps at your request before entering into a storage agreement, and to perform our contract with you. This includes processing your data to set up and administer your account, take payment, provide access to your unit, communicate essential service information, and manage the relationship.
Legal obligation: to comply with legal and regulatory requirements, such as tax and accounting rules, fraud and crime prevention laws, and where necessary assisting law enforcement and regulatory authorities in line with applicable legislation.
Legitimate interests: to pursue our legitimate business interests, provided your rights and freedoms do not override those interests. This includes maintaining site security, operating CCTV where installed, improving our services, managing business operations, and defending or establishing legal claims.
Consent: in limited circumstances we may rely on your consent, for example for certain types of optional marketing where required by law. Where we rely on consent, you can withdraw it at any time, and we will explain how to do this at the point we request it.
How we use your personal data
We use the personal data we collect for the following purposes:
To provide and manage storage services: setting up your account, verifying your identity where appropriate, allocating and managing your storage unit, administering your contract, handling payments and billing, and responding to your queries.
To manage customer relationships: communicating with you about your agreement, changes to our terms or policies, renewals, reminders, and any necessary service updates or notices relating to your storage unit or our facilities.
To ensure safety and security: operating any CCTV and access control systems at our sites, preventing unauthorised access, detecting and investigating fraud or other unlawful activity, and ensuring the safety of customers, staff and property.
To run and improve our business: maintaining our records, managing risk, conducting audits, training staff, enhancing our facilities and service offering, and performing internal analysis such as understanding usage patterns at our sites.
To comply with legal and regulatory obligations: maintaining appropriate business records, cooperating with legal requests where permitted or required, and fulfilling our duties under applicable data protection, tax and other laws.
Data retention and storage
We keep personal data only for as long as is necessary for the purposes for which it was collected, including any period required to comply with our legal obligations, resolve disputes, and enforce our agreements.
In general, this means that we retain your core account and contract records for a fixed period after your storage agreement ends, in line with statutory limitation periods and tax requirements. CCTV and access records, where used, are typically retained for a shorter period unless they are required to investigate an incident, manage a complaint, or support legal proceedings.
When personal data is no longer required, we will securely erase, anonymise or destroy it in accordance with our internal policies and applicable law.
Data processors and sharing your information
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include payment service providers, IT and cloud hosting providers, customer management system suppliers, maintenance and security service providers, and professional advisers such as accountants or legal advisers where they require access to personal data to provide their services.
All such processors are required to keep your personal data confidential, use it only for the purposes of providing their services to us, and implement appropriate technical and organisational security measures.
We may also share your personal data with other organisations where required by law, for example with law enforcement agencies, regulators, courts or government bodies, or where necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
International transfers
Where any of our service providers or their systems are located outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. This may include using contracts approved for international data transfers or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Your data protection rights
You have a number of rights in relation to the personal data we hold about you. Subject to certain conditions and exemptions under data protection law, you may have the right to:
Access: request confirmation of whether we process your personal data and obtain a copy of that data.
Rectification: ask us to correct inaccurate or incomplete personal data we hold about you.
Erasure: request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the purposes for which it was collected.
Restriction: ask us to restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to our processing.
Portability: receive personal data that you have provided to us in a structured, commonly used and machine readable format, and have that data transmitted to another controller where technically feasible and where the processing is based on consent or contract.
Objection: object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests, or to direct marketing where applicable.
Where we rely on consent as our lawful basis, you also have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
How to exercise your rights
If you wish to exercise any of your data protection rights in relation to Self Storage Haringey, or if you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the usual contact details you use to reach us about our services.
To help us respond efficiently, please provide your name, contact details, and enough information to identify your account or your interactions with us, together with a clear description of your request. We may ask for proof of identity where necessary to protect your data.
Complaints and supervisory authority
If you have concerns about how we handle your personal data, we would encourage you to contact us in the first instance so we can try to resolve the issue. You also have the right to lodge a complaint with the UK supervisory authority for data protection matters. Details of how to do this and current contact information can be found on the supervisory authoritys official website.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in the law. Any updated version will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
