Storage New Barnet Privacy Policy
This Privacy Policy explains how Storage New Barnet collects, uses, stores and protects personal data in connection with the self-storage services we provide. It applies to all Storage New Barnet customers and prospective customers in the area, as well as to individuals who contact us with enquiries or visit our premises.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the lawful bases we rely on, the periods for which we retain it and the rights you have in relation to your personal data.
Personal data we collect
We collect and process personal data that is necessary for us to provide storage services and to operate our business securely and efficiently. The categories of personal data we may collect include:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and identifiers needed to verify your identity.
Communication details such as email correspondence, records of enquiries, complaints and feedback, and notes of communications with our staff.
Contract and account information such as storage unit number, contract start and end dates, rental charges, payment history, deposit details, and records of changes to your contract.
Payment and billing information such as payment method details, partial payment card details where relevant, payment confirmations, invoices and receipts. We do not store full card details where payments are processed by a third-party payment processor.
Security, access and CCTV information such as access codes, key or fob identifiers, vehicle registration numbers where relevant, and CCTV footage recorded at our premises for security and safety purposes.
Technical and usage information such as information about how you use our website and online services, including IP address and device information, where this is necessary for security, troubleshooting and service improvement.
How we collect personal data
We may collect personal data in the following ways:
Directly from you when you contact us by phone, in person at our site, or through online forms to request information, obtain a quote or enter into a storage agreement.
During the course of our relationship with you when you access your storage unit, make payments, request changes to your contract or communicate with us for any reason.
From security systems when you attend our premises, including CCTV recordings, access control logs and visitor records.
From third-party service providers and publicly available sources where necessary to verify your identity, prevent fraud or comply with our legal obligations.
Lawful bases for processing
We only process your personal data where we have a lawful basis to do so under data protection law. Depending on the purpose, we rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into, administer and perform a storage contract with you, including to set up your account, manage payments, communicate with you about your unit and handle service-related queries.
Legal obligation: We process personal data when we are required to comply with legal and regulatory obligations, including obligations relating to tax, accounting, health and safety, crime prevention and responding to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or the legitimate interests of a third party, and where those interests are not overridden by your rights and freedoms. These interests include securing our premises and property, preventing and detecting crime, managing customer relationships, improving our services, and defending legal claims.
Consent: In limited circumstances, we may rely on your consent to process certain personal data, for example for optional marketing communications. Where we rely on consent, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before your withdrawal.
Purposes for which we use personal data
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your storage contract, processing payments, facilitating access to your unit and providing customer support.
To communicate with you about your account, including sending service messages, contract updates, payment reminders, expiry notices and information about changes to our terms and policies.
To verify your identity, assess risk, prevent fraud and protect the safety and security of our customers, staff and property.
To operate and monitor the security of our premises through access control systems and CCTV, and to assist in the investigation of security incidents, accidents or suspected criminal activity.
To manage our business operations, including accounting, auditing, record keeping, data analysis, service improvement and staff training.
To comply with legal and regulatory requirements and to respond to lawful requests from law enforcement agencies, regulators or courts.
To defend or bring legal claims where necessary for the protection of our rights and interests.
Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting or reporting requirements. Retention periods depend on the type of data and the context in which it was collected.
Contract and account records, including basic identification details, contract documents, payment history and related correspondence, are generally retained for a period necessary to meet statutory limitation periods for claims and legal obligations.
CCTV recordings and access control logs are retained for a limited period, which is usually short, unless required to be kept longer in connection with a specific investigation, incident or legal claim.
Where we have collected personal data based solely on your consent, and you withdraw that consent, we will stop processing that data for the relevant purpose and will either delete it or anonymise it, unless we have another lawful basis requiring us to retain it.
Data processors and third parties
We may engage carefully selected third-party service providers who act as data processors on our behalf. These processors only process your personal data in accordance with our documented instructions and are subject to contractual obligations to protect your data and comply with applicable data protection laws.
Examples of the types of processors and third parties we may use include payment processing providers, IT hosting and maintenance providers, security and CCTV system providers, document storage and disposal companies, accountants, and professional advisers.
We may also disclose personal data to other third parties where required by law, to protect our legal rights, or to assist with the prevention and investigation of crime. In such cases, we will ensure that any disclosure is lawful, proportionate and subject to appropriate safeguards.
International data transfers
Where we transfer personal data outside the United Kingdom, we will ensure that an adequate level of protection is in place in accordance with data protection law. This may include relying on adequacy regulations for the relevant country or implementing appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, to protect your personal data.
Your data protection rights
As an individual whose personal data we process, you have specific rights under data protection law. These rights include:
The right of access: You have the right to request confirmation as to whether we process your personal data and to receive a copy of the personal data we hold about you, together with information about how we use it.
The right to rectification: You have the right to request that inaccurate or incomplete personal data is corrected or updated without undue delay.
The right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and there is no other lawful basis for processing.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our legitimate interests.
The right to data portability: In some cases, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transmitted to another controller, where this is technically feasible.
The right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims.
Rights in relation to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless specific conditions are met.
You may exercise your rights by contacting us using the contact details provided in your contract or on our official communications. We may need to verify your identity before responding to certain requests and will respond within the time limits set by law.
Security of your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include secure storage systems, access controls, staff training, and procedures designed to ensure that personal data is handled responsibly and securely.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. Any updated version will apply to all Storage New Barnet customers in the area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
