Storage Hornsey Privacy Policy
This Privacy Policy explains how Storage Hornsey collects, uses, stores and protects personal data relating to customers and prospective customers using our storage services in the Hornsey area. It also explains your rights under the UK General Data Protection Regulation and related data protection law. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Hornsey customers and prospective customers in our service area, as well as individuals who contact us with enquiries, visit our premises, or otherwise interact with us in relation to our storage services. It covers personal data collected through in-person interactions, telephone, post, and any online or digital channels we operate, except where a separate privacy notice is expressly provided.
Data Controller
Storage Hornsey is the data controller for the personal data it processes about you. This means we determine the purposes and means of the processing of your personal data and are responsible for complying with applicable data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you use our services:
Identification and contact details: name, postal address, billing address, contact address, and similar details. We may also collect proof of identity such as passport details, driving licence details or other official identification numbers where required for security, verification or legal compliance.
Contact information: email address, and other contact details you choose to provide to communicate with us.
Customer account details: information related to your storage unit, contract, access permissions, account history, preferences and communications with us.
Payment and billing information: details necessary to process payments and manage invoices, such as billing name, payment method details as provided through our secure payment channels, and records of transactions and payment history. We do not store full card details where payment processing is handled by a secure payment processor.
Usage and technical data: information about how you interact with our services, such as dates and times of unit access where access control systems are used, and basic technical information associated with online enquiries or account access, such as device information and log data, where applicable.
Security and CCTV data: if you visit our premises, you may be recorded on CCTV for security and safety purposes. This may capture your image, vehicle details and time of entry and exit.
Correspondence and enquiry data: information that you provide in enquiries, complaints or other communications, including any additional personal data you choose to share with us.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, access your storage unit, or otherwise interact with us. We may also collect personal data from third parties where lawful and appropriate, for example credit reference agencies or identity verification providers, where required to prevent fraud or meet legal obligations. CCTV images are collected automatically through our security systems when you are on our premises.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contract: to take steps at your request before entering into a contract and to perform our contract with you, such as setting up and administering your storage agreement, managing your account, processing payments and providing customer service.
Legal obligation: to comply with our legal and regulatory obligations, including tax, accounting and record-keeping requirements, fraud prevention, and responding to lawful requests from public authorities.
Legitimate interests: to pursue our legitimate business interests, provided your interests and fundamental rights do not override these. This includes securing our premises and units through access systems and CCTV, managing and improving our services, handling enquiries and complaints, recovering debts, and maintaining the safety of customers, staff and property.
Consent: where we rely on your consent for a particular activity, such as certain types of marketing communications. When we rely on consent, you can withdraw it at any time, and this will not affect the lawfulness of any processing before consent was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your storage unit, managing access, handling reservations, renewals, moves and terminations, and providing customer support.
To process payments, issue invoices, manage refunds and handle any billing queries.
To verify your identity and eligibility to use our services, prevent fraud and ensure the security of our premises and customers.
To operate and monitor security systems, including access control and CCTV, to protect people, property and assets.
To manage our relationship with you, including communicating about your account, sending service updates, and dealing with enquiries, feedback and complaints.
To maintain business records, perform internal administration, and comply with our legal and regulatory obligations.
To analyse the use of our services and improve our operations, security measures and customer experience, using aggregated or anonymised data where possible.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where lawful and necessary for the purposes described in this Privacy Policy. These may include:
Service providers acting as data processors who provide services to us, such as payment processing, secure data hosting, security and CCTV services, IT support, customer management systems and professional advisers. These providers are only permitted to process your personal data on our documented instructions, are bound by confidentiality obligations and must implement appropriate security measures.
Professional advisers such as accountants, auditors, insurers and legal advisers, where necessary for the management and protection of our business and to comply with legal requirements.
Public authorities, law enforcement bodies or regulators where we are required to do so by law, or where disclosure is necessary to protect our rights, your safety or the safety of others.
Debt collection agencies or legal representatives where necessary to enforce contractual rights and recover outstanding payments.
We do not sell your personal data to third parties. If we were to undertake any restructuring, merger or transfer of business, your data may be transferred as part of that transaction, in which case appropriate safeguards would be applied.
International Transfers
Where any of our service providers or their systems are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as using approved standard contractual clauses or equivalent measures required by data protection law.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. In general, this means:
Customer and contract data: retained for the duration of your contract and for a period afterwards as required by law for tax and accounting purposes, and to manage any potential disputes.
CCTV recordings: retained for a limited period sufficient for security and incident investigation purposes, unless a longer retention period is required in connection with a specific incident or legal claim.
Correspondence and enquiry data: retained for as long as necessary to address your enquiry and for a reasonable period afterwards for reference and audit purposes.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and procedures for managing and responding to potential data security incidents. While no system can be completely secure, we regularly review and improve our security measures in light of current risks and best practice.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access: you have the right to request a copy of the personal data we hold about you, along with information about how we use it.
Right to rectification: you have the right to ask us to correct inaccurate or incomplete personal data.
Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: you can request that we restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to our processing.
Right to data portability: where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
Right to object: you can object to our processing of your personal data where we rely on legitimate interests, including for direct marketing. We will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Right to withdraw consent: where we rely on your consent, you have the right to withdraw it at any time.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using the contact methods provided on our website or at our premises. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so we can address your concerns where possible.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any changes will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
