Storage Primrose Hill Privacy Policy
This Privacy Policy explains how Storage Primrose Hill collects, uses, stores and protects personal data relating to customers and prospective customers in the Storage Primrose Hill service area. It also explains your rights under data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
By using Storage Primrose Hill services or contacting us about storage facilities, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Primrose Hill customers and prospective customers in the area who use or inquire about our storage services, including but not limited to self-storage units, associated services and related customer support.
Storage Primrose Hill is the data controller for the personal data covered by this Privacy Policy. As data controller, we decide how and why your personal data is processed and are responsible for complying with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data when you contact us, make a booking or use our services:
Identification and contact details such as full name, postal address, billing address, communication preferences and similar identifying details you provide.
Account and contract information such as storage unit number, contract dates, service history, payment status, rental charges, deposit information and correspondence about your account.
Payment and billing information such as payment method details and records of payments made and amounts due. We do not retain full card details when payments are processed through secure third party payment processors.
Security and access information such as vehicle registration number if provided, access codes or key details, and records of entry and exit times where access control systems or logs are in operation.
Communication data such as emails, letters, forms, notes from telephone conversations and other communications with us, including any feedback or complaints you submit.
Technical usage data such as basic log information generated when you visit our website, including date and time of access and pages visited. We aim to keep any such data limited to what is necessary for security and performance.
Lawful Basis for Processing
We process your personal data only when we have a valid legal basis under data protection law. Depending on the circumstances, we rely on the following legal bases:
Contract. We process personal data where it is necessary to enter into or perform a contract with you, such as when you reserve, rent or pay for a storage unit or when we manage your account and provide related customer services.
Legal obligation. We may process personal data to comply with legal obligations, such as tax, accounting, reporting or obligations to law enforcement or regulatory authorities where required.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests, for example to manage our facilities, prevent fraud and abuse, maintain security and improve our services.
Consent. In limited cases, where required by law, we may rely on your consent to process personal data, for example for certain categories of marketing communications. When we rely on consent, you can withdraw it at any time.
How We Use Personal Data
We use the personal data we collect for the following purposes:
To manage enquiries, reservations and bookings for storage units.
To create and manage customer accounts and storage contracts.
To process payments, issue invoices, handle deposits and manage any arrears.
To provide customer care, respond to questions and resolve issues or complaints.
To operate and secure our storage facilities, including managing authorised access.
To maintain accurate business and financial records for administrative and legal purposes.
To protect our business, premises and customers, including the prevention and detection of crime, fraud and misuse of services.
To send you service-related communications, such as changes to terms, notices relating to your unit or important updates about our operations.
To send you marketing communications about similar services, where permitted by law and taking account of your communication preferences and any opt outs.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to meet legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the applicable obligations, but the following general principles apply:
Customer and contract records, including basic identification and contact details, contract details and billing records, are typically retained for up to six years after the end of the customer relationship, to comply with legal, tax and accounting requirements and to allow us to respond to any disputes or claims.
Security and access records may be retained for a shorter period, typically only as long as required for security, investigation or operational purposes, unless a longer retention is required by law or in connection with an ongoing dispute or investigation.
Marketing data relating to communication preferences and contact details is generally retained until you opt out or until we determine that it is no longer necessary for the purposes for which it was collected.
When data is no longer needed, we will securely delete, anonymise or irreversibly de identify it.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf and only process personal data in accordance with our instructions and applicable law. These processors may include:
Payment processing providers who handle card and other payment transactions for storage fees and related charges.
Information technology and system support providers who host or maintain our customer databases, access control systems and related business systems.
Professional advisers such as accountants or legal advisers who support our business operations and may need limited access to personal data for their services.
We require all processors to implement appropriate technical and organisational measures to protect personal data and to use it only for the purposes of providing their services to us.
In addition, we may share personal data where required by law, for example with law enforcement, regulators, tax authorities or courts, or where it is necessary to establish, exercise or defend legal claims or to protect the rights, property or safety of Storage Primrose Hill, our customers or others.
We do not sell your personal data.
International Data Transfers
Where we use service providers located outside the United Kingdom or where personal data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. These safeguards may include the use of standard contractual clauses or equivalent protections approved by relevant authorities. Further information about such safeguards can be requested using the contact details you normally use to reach us.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption, secure storage, staff training and regular review of our security procedures.
While we take reasonable steps to safeguard personal data, no system can be completely secure, and we cannot guarantee the absolute security of information transmitted or stored electronically.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights include:
Right of access. You have the right to request confirmation as to whether we process your personal data and, if we do, to request a copy of that data and information about how we use it.
Right to rectification. You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify accuracy or investigate an objection.
Right to object. You may have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds or need the data for legal claims. You always have the right to object to direct marketing.
Right to data portability. In some cases, you may have the right to receive personal data that you provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another organisation where technically feasible.
Where our processing of your personal data is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights and Complaints
You can exercise your data protection rights or raise questions about this Privacy Policy by contacting us using the usual contact channels you use for Storage Primrose Hill. To help us respond efficiently, please clearly describe the right you wish to exercise or the information you require and provide sufficient information to verify your identity.
We aim to respond to requests and questions without undue delay and within the time limits set by data protection law. We may need to request additional information from you to confirm your identity or clarify your request.
If you are not satisfied with how we collect or use your personal data, you also have the right to lodge a complaint with the relevant supervisory authority for data protection in the United Kingdom. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or changes in legal requirements. Any updates will be made available through our usual communication channels. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
