Storage Harmondsworth Privacy Policy
This Privacy Policy explains how Storage Harmondsworth collects, uses, stores, and protects personal data about customers and prospective customers. It applies to all Storage Harmondsworth customers in the surrounding area who use or enquire about our storage services, whether in person, by phone, or through other communication channels.
Storage Harmondsworth is committed to handling personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy describes the categories of personal data we process, the lawful bases we rely on, the purposes for processing, how long we keep data, who we share it with, and the rights you have in relation to your personal data.
Data Controller
For the purposes of data protection law, Storage Harmondsworth is the data controller in relation to personal data that we collect and use about our customers and prospective customers. This means that we decide how and why your personal data is processed.
Personal Data We Collect
We collect and process different types of personal data depending on your relationship with us and how you interact with our services. This may include the following categories of data.
Identity and contact details such as your name, postal address, billing address, contact address, and other basic contact details needed to manage your storage agreement.
Communication details such as your communication preferences and any correspondence you send to us, including enquiries, complaints, or feedback provided in person or through other communication channels.
Contract and account information such as details of your storage unit, access rights, rental period, payment history, invoices, and records of any changes to your agreement with us.
Payment-related information such as payment method details and records of payments made and due. Where third party payment processors are used, we will generally not have access to full payment card details but will receive confirmation of payment and related transaction information.
Security and access data such as access logs, visit dates and times, and data captured by on-site security systems including CCTV images in and around our facilities. This helps to maintain the security of the premises and your stored goods.
Technical and usage information where relevant, such as basic technical information relating to the use of our online services, and records of consents or preferences you give or withdraw.
How We Collect Personal Data
We collect personal data directly from you when you contact us to enquire about our services, request a quote, sign a storage agreement, make a payment, visit our facilities, or communicate with us in any way about your account. We may also collect information generated by the operation of our security and access systems.
In some cases, we may receive personal data about you from third parties where it is lawful to do so, for example from payment processors, credit reference agencies if applicable, or from someone who is authorised by you to act on your behalf.
Lawful Basis for Processing
We only process personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are set out below.
Contract. We process personal data where it is necessary to enter into or perform a contract with you, such as setting up and managing your storage unit, handling payments, and providing customer service throughout your agreement.
Legal obligation. We process certain data to comply with legal and regulatory requirements, including accounting, tax, security, and health and safety laws. This can involve retaining records of transactions and other necessary documentation.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests or those of a third party, provided that your interests and fundamental rights do not override those interests. This includes maintaining site security, preventing fraud, managing business operations, improving our services, handling enquiries and complaints, and keeping accurate records of our dealings with you.
Consent. In limited situations, we may rely on your consent, for example where you choose specific optional communications. When we rely on consent, you can withdraw it at any time, and we will explain how you can do this at the point where consent is obtained.
Purposes of Processing
We use your personal data for purposes including the following.
To provide storage services, including setting up your account, managing your storage unit, organising access, and responding to queries about your agreement or stored items.
To administer billing and payments, including issuing invoices, taking and recording payments, managing arrears, and dealing with refunds where applicable.
To maintain security and safety on our premises, including the use of access control systems and CCTV to protect customers, staff, visitors, and property.
To manage customer relationships, including handling enquiries, complaints, feedback, and general communications about our services.
To comply with legal, regulatory, and accounting obligations, including record keeping and responding to lawful requests by public authorities.
To protect our rights, property, and interests, including pursuing or defending legal claims and preventing misuse of our services.
Data Retention
We keep personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with legal, regulatory, and reporting requirements.
In general, data relating to your storage agreement and account will be retained for a period after your contract ends. This retention period allows us to respond to queries, handle any disputes or claims, meet tax and accounting obligations, and demonstrate that we have complied with our legal duties. CCTV and access records are typically kept for a shorter period, unless they form part of an investigation or legal claim where a longer retention period may be required.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in a safe and irreversible manner.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to support the operation of our business and are only allowed to process your data in accordance with our instructions and data protection law.
Examples of processors we may use include payment processing providers, accounting and bookkeeping service providers, information technology and system support providers, secure data storage and document management services, and providers of security or access control systems. We take steps to ensure that all processors implement appropriate technical and organisational measures to protect your data.
We may also share personal data with other third parties where required by law, such as regulatory authorities, law enforcement bodies, or public agencies, or where it is necessary to protect our legal rights, to prevent fraud, or in connection with a business transaction such as a merger or restructuring.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers that process personal data outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place so that your data remains protected at a level essentially equivalent to that provided within the United Kingdom. This may include using standard contractual clauses or relying on other lawful transfer mechanisms recognised under data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
You have the right to be informed about how your personal data is collected and used, which is one of the purposes of this Privacy Policy.
You have the right of access to the personal data we hold about you, including certain information about how we process it. You can request a copy of your personal data.
You have the right to request that inaccurate or incomplete personal data is rectified or updated.
You have the right to request the erasure of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
You have the right to request the restriction of processing of your personal data in certain situations, such as where the accuracy of the data is contested or where you have objected to processing based on legitimate interests.
You have the right to object to certain types of processing, including processing based on our legitimate interests and, where applicable, processing for direct marketing purposes.
You have the right to data portability, which allows you to receive certain personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where the processing is based on consent or contract and carried out by automated means.
If you have given consent to processing, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we process your personal data, you can contact Storage Harmondsworth using the usual communication channels you use for your customer account or enquiries.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has not been handled in accordance with data protection law. You are encouraged to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update or amend this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The most recent version will always apply to your personal data. You should review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
