Storage Islington Privacy Policy
This Privacy Policy explains how Storage Islington collects, uses, stores and protects the personal data of its customers and prospective customers located in the Storage Islington service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws, and how you can exercise those rights.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Islington customers, former customers and prospective customers in the Storage Islington area, as well as individuals who contact us with enquiries or who interact with us in relation to our storage services. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Types of personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identification details such as your full name, date of birth, and identification document details where required for security or verification purposes.
Contact details such as your postal address, billing address, and other contact information necessary for managing your account and communicating with you.
Account and contract information such as unit number, contract start and end dates, payment history, and communications relating to your storage agreement.
Payment and billing information such as limited payment card details or bank account details processed via approved payment processors, and information needed for invoicing and accounting.
Security and access information such as CCTV footage, access logs, visit records, and incident reports where necessary to ensure the safety and security of our facilities, customers and staff.
Communication data such as records of correspondence with you, including enquiries, complaints, feedback, and any information you choose to provide in the course of your dealings with us.
Technical data such as your IP address, device information, and basic usage data where you visit our website, to enable us to operate and secure our online services.
How we collect personal data
We collect personal data directly from you when you enquire about our services, obtain a quote, sign a storage agreement, make a payment, contact us with questions or feedback, visit our facilities, or use our website or online tools. We may also receive personal data from third parties, such as payment service providers, credit reference agencies where applicable, and any person you authorise to act on your behalf.
Lawful bases for processing your data
We will only process your personal data when we have a lawful basis to do so under data protection law. Depending on the context, our processing will rely on one or more of the following legal bases:
Contract: We process personal data where this is necessary to enter into, perform or manage a contract with you, such as a storage agreement, and to take steps at your request before entering into such a contract.
Legal obligation: We process personal data where this is necessary for us to comply with legal and regulatory obligations, including obligations relating to financial records, taxation, security and safety, and responding to lawful requests from authorities.
Legitimate interests: We process personal data where this is necessary for our legitimate business interests or those of a third party, provided your interests and fundamental rights do not override those interests. These interests may include operating secure storage facilities, preventing and detecting fraud or crime, managing and improving our services, and maintaining accurate records.
Consent: In limited circumstances, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services, including creating and administering your account, allocating units, handling access, and responding to your instructions.
To process payments, manage billing, handle debt recovery where necessary, and maintain accurate financial and transaction records.
To ensure the security and integrity of our facilities, including through CCTV monitoring, access control systems, and investigation of security incidents or complaints.
To communicate with you about your account, your storage unit, changes to our terms, service updates, and operational notices that affect your use of our facilities.
To manage our relationship with you, including handling enquiries, customer service requests, feedback and complaints.
To comply with our legal and regulatory obligations, to cooperate with law enforcement and regulatory authorities when required, and to enforce our rights arising from contracts.
To improve our services and operations, including internal reporting, training, quality assurance and service development based on aggregated or anonymised information where possible.
Use of processors and sharing of data
We may share your personal data with trusted third parties that provide services to us as data processors. These may include payment service providers, secure data hosting providers, IT support and maintenance providers, and professional advisers such as accountants or legal advisers where needed.
When we use processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only on our instructions, is kept secure, and is not used for the processor's own purposes.
We may also share personal data with other third parties where required by law, to protect the rights, property or safety of our business, customers or others, or where necessary in connection with a business transaction such as a sale or reorganisation of our business, subject to appropriate confidentiality protections.
We do not sell your personal data to third parties.
Data retention and storage
We retain your personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the context in which it is processed.
In general, we keep customer account and contract information for a period after the end of your storage agreement to handle any queries, disputes or legal claims, and to comply with statutory record-keeping obligations. Payment and transaction records are typically retained for the periods required by tax and financial regulations. CCTV footage and access records are usually kept for shorter periods, unless they are required in connection with an incident, investigation or legal claim.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be linked to you.
International data transfers
If we transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that a similar level of protection is afforded to it by implementing appropriate safeguards. These may include transferring data to countries that have been deemed to provide an adequate level of protection, or using standard contractual clauses approved by relevant authorities. You can obtain further information about these safeguards by contacting us using the contact details available on our main customer communications.
How we protect your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures include access controls, secure storage systems, staff training, and regular review of our security procedures. While we strive to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security of your information.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation as to whether we process your personal data and to receive a copy of the personal data we hold about you.
Right to rectification: You have the right to request that inaccurate or incomplete personal data about you be corrected or completed.
Right to erasure: In certain circumstances, you have the right to request that we delete or remove your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or assess an objection.
Right to object: You have the right to object to processing of your personal data based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Right to data portability: In certain circumstances, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent for processing, you can withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, this is generally the Information Commissioner's Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or for other operational reasons. Any changes will take effect when the updated policy is made available through our usual customer information channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
