Storage Finchley Privacy Policy
This Privacy Policy explains how Storage Finchley collects, uses, protects, and retains personal data relating to customers and prospective customers in the Storage Finchley service area. It is designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Finchley customers and prospective customers located in the Storage Finchley area, including individuals, sole traders, and representatives of corporate customers. It covers personal data collected in person, by phone, in writing, or through any digital channels we operate, as well as data obtained from third parties where lawful.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:
Identification and contact details, such as name, postal address, billing address, and other contact details you choose to provide.
Customer account and contract details, such as storage unit number, contract start and end dates, services selected, payment status, and any communications relating to your contract.
Payment and billing information, such as records of payments made, payment method used, and associated billing history. We do not store full payment card details where a third party payment processor is used.
Verification data, such as copies or details of identity documents or proof of address where required for security, fraud prevention, or legal compliance.
Communications data, including records of enquiries, complaints, feedback, and other correspondence with us, whether by phone, in person, or in writing.
Security and access data, such as access logs, entry and exit records, and any relevant security information required to manage access to our premises. Where security cameras are in use, we may collect video images of individuals on our premises.
Technical and usage data, where applicable, such as basic details collected when you visit our online channels, including date and time of access and general interaction information used to maintain and improve our services.
Lawful Basis for Processing
We only process personal data where we have a lawful basis under data protection law. Depending on the context, we may rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, for example to set up and manage your storage agreement, take payment, and provide customer service.
Legal obligation: We process personal data where it is necessary to comply with our legal obligations, such as accounting, taxation, fraud prevention, and law enforcement requirements.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or those of a third party, and where those interests are not overridden by your rights and freedoms. This may include securing our premises, managing our business operations, improving our services, and handling enquiries and complaints.
Consent: In limited cases, we may rely on your consent, for example for certain types of marketing communications where consent is required. Where processing is based on consent, you have the right to withdraw that consent at any time.
How We Use Personal Data
We use personal data for the following purposes:
To provide storage and related services, including setting up your account, managing your contract, arranging access to units, and handling renewals and terminations.
To process payments and manage billing, including issuing invoices, processing card or bank payments through third party payment processors, and managing refunds where applicable.
To communicate with you, including responding to enquiries, sending service-related notices, and providing information about changes to our terms or policies.
To ensure security and prevent fraud, including verifying identity where appropriate, operating and reviewing security systems, and monitoring access to storage facilities.
To comply with legal and regulatory obligations, including record keeping, responding to lawful requests from authorities, and maintaining appropriate business records.
To manage and improve our business, including maintaining our facilities, training staff, and analysing general usage of our services to enhance the customer experience.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the context of our relationship with you.
Customer account and contract records are typically kept for a period after the end of your contract to answer queries, resolve disputes, and comply with legal obligations. Payment and transaction records are retained for the period required by tax and financial regulations. Security and access data, including any video images, are kept for a limited period necessary for security and investigation purposes, unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims.
When personal data is no longer needed, we will delete it or anonymise it so that it can no longer be associated with an identifiable individual.
Data Processors and Third Parties
We may share personal data with carefully selected service providers who act as data processors on our behalf. These processors are contracted to process personal data only in accordance with our instructions and in compliance with data protection law. They are not permitted to use the data for their own purposes.
Categories of processors and third parties may include:
Payment processing providers that handle card or bank transactions and related verification.
IT and system support providers that maintain our customer databases, security systems, and communication tools.
Professional advisers, such as accountants or legal advisers, who require access to relevant records in the course of providing services to us.
Security and facility management providers involved in the operation and monitoring of our premises and security systems.
We may also share personal data with public authorities, law enforcement, or regulatory bodies where required by law, or where it is necessary to protect the rights, property, or safety of our customers, staff, or the public.
Where we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections required by data protection law.
Security of Personal Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, and procedures to handle any suspected personal data breach. While we take reasonable steps to secure your data, no system can be completely secure, and you should take care to protect your own information when communicating with us.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights include:
Right of access: You have the right to request confirmation of whether we process your personal data and, if so, to request a copy of that data.
Right to rectification: You have the right to request that we correct or complete any personal data that you believe is inaccurate or incomplete.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to its processing.
Right to data portability: In certain circumstances, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit that data to another controller where technically feasible.
Right to object: You have the right to object to processing based on our legitimate interests, including any direct marketing activities. If you object to direct marketing, we will stop processing your personal data for this purpose.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing that took place before consent was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updates will be effective from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.
