Storage Haringey Privacy Policy
This Privacy Policy explains how Storage Haringey collects, uses, stores and protects personal data about customers and prospective customers located in our service area. It also explains the rights individuals have under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act.
By using Storage Haringey services or contacting us about our storage solutions, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Haringey customers, former customers, and individuals who make enquiries or bookings within our operating area. It covers personal data processed in connection with self-storage units, related services, payments, customer support, and marketing communications carried out by Storage Haringey as controller of that data.
Personal Data We Collect
Storage Haringey collects and processes personal data that is necessary for the provision of our services and the operation of our business. The types of personal data we may collect include:
Identification and contact details such as full name, residential address, correspondence address, identification document details where required, and other contact information that you provide to us.
Account and contract information such as storage unit number, contract start and end dates, rental history, communications with us about your contract, and any information you provide to us when setting up or managing your account.
Payment and billing information such as transaction details, billing address, payment method details as required for processing payments, and records of invoices and receipts.
Usage and operational information such as visit logs, access control records, entry and exit times to the facility where such systems are in use, and information relating to how you use our services.
Security and safety information such as CCTV images in and around our facilities, incident reports, and records relating to any accidents, complaints, disputes, or suspected criminal activity.
Marketing and communication preferences such as your choices about receiving marketing communications from us, and records of your responses to surveys, promotions, or feedback requests.
How We Collect Personal Data
We may collect personal data directly from you when you request a quote, sign a storage agreement, make a payment, contact our customer service, visit our premises, or interact with us by phone, in writing, or in person.
We may also collect personal data from third parties where lawful, for example from payment service providers, credit check agencies where applicable, or law enforcement bodies, and from publicly available sources if necessary for verification or fraud prevention.
Lawful Basis for Processing
Storage Haringey processes personal data only where there is a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contract. We process personal data where it is necessary to enter into, perform, or manage a contract with you, such as to set up your account, manage your storage unit, collect payments, and provide customer support.
Legal obligation. We process personal data where necessary to comply with legal and regulatory requirements, such as tax, accounting, health and safety, crime prevention, and responses to lawful requests from public authorities.
Legitimate interests. We process personal data for our legitimate business interests, balanced against your rights and freedoms. These interests include securing and managing our facilities, preventing fraud, improving our services, maintaining business records, and promoting our services to existing customers and interested individuals.
Consent. In limited circumstances, we may rely on your consent, for example for certain marketing communications where required by law or for specific optional services. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
How We Use Personal Data
We use personal data for the following purposes:
To provide storage and related services, including setting up and managing your contract, administering access to your storage unit, handling bookings and renewals, and providing customer support.
To manage payments and billing, including issuing invoices, processing payments, handling refunds where applicable, and maintaining financial records.
To ensure security and safety, including monitoring access to our facilities, operating CCTV systems where in use, investigating incidents, and protecting our staff, customers, and property.
To communicate with you, including responding to enquiries, sending important service or contract updates, and managing your communication preferences.
To improve and manage our business, including training staff, monitoring service quality, carrying out audits, and analysing the use of our services for operational purposes.
To conduct marketing and customer relationship management, including sending information about services that may be of interest to you, subject to your legal rights to opt out.
Data Retention
Storage Haringey keeps personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for a period after the end of the contractual relationship, to deal with any queries, disputes, or claims and to comply with applicable legal obligations. Financial and transaction records are kept in line with statutory retention periods for tax and accounting.
CCTV recordings, access logs, and security records are kept for a shorter period, unless required for investigating an incident or complying with a legal obligation, in which case they may be retained for longer as necessary.
When personal data is no longer needed, it is securely deleted, anonymised, or otherwise removed from our systems.
Data Processors and Sharing of Personal Data
Storage Haringey may share personal data with carefully selected third parties who act as data processors on our behalf. These processors provide services such as payment processing, secure data storage, information technology support, customer relationship management systems, and security services. They are required to process personal data only in accordance with our instructions and to implement appropriate security measures.
We may also share personal data with independent controllers where necessary, such as professional advisers including lawyers and accountants, insurers, law enforcement agencies, regulatory authorities, and debt collection agencies where this is lawful and appropriate.
We do not sell personal data. Any sharing of personal data is limited to what is necessary and is carried out in accordance with data protection laws.
International Data Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, Storage Haringey ensures that appropriate safeguards are in place to protect the data in accordance with data protection law. These safeguards may include the use of approved standard contractual clauses or transfers to countries that have been recognised as providing an adequate level of data protection.
Data Security
Storage Haringey takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, physical security at our facilities, secure storage systems, staff training on data protection responsibilities, and regular review of our security arrangements.
Your Data Protection Rights
Individuals whose personal data we process have a number of rights under data protection law, subject to certain conditions and exemptions. These rights include:
The right of access, which allows you to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how it is used.
The right to rectification, which allows you to request the correction of inaccurate personal data and the completion of incomplete data.
The right to erasure, which allows you to request that we delete your personal data in certain situations, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to keep it.
The right to restriction of processing, which allows you to request that we restrict the use of your personal data in certain circumstances, such as while we investigate a concern about its accuracy.
The right to data portability, which allows you in some cases to receive personal data you have provided to us in a structured, commonly used, machine-readable format and to ask us to transfer it to another controller.
The right to object, which allows you to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling, and to object at any time to the use of your personal data for direct marketing.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how Storage Haringey uses your personal data, you can contact us through our usual customer service channels or by writing to us at our business address.
We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before we can act on your request, in order to protect your data.
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant data protection supervisory authority. Details of how to contact the authority can be found on its official website.
Changes to this Privacy Policy
Storage Haringey may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. The updated version will be made available through our usual customer communication channels. We encourage customers and users of our services to review this Privacy Policy periodically to stay informed about how we protect personal data.
