Storage Hackney Marshes Privacy Policy
This Privacy Policy explains how Storage Hackney Marshes collects, uses and protects personal data relating to our self-storage services. It applies to all Storage Hackney Marshes customers and prospective customers in our service area, including individuals, sole traders and businesses that interact with us, whether online, by phone, in writing or in person at our premises.
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with Storage Hackney Marshes or use our services:
Identification and contact details, such as name, postal address, billing address, contact address, and other contact details you provide.
Account and contract information, such as customer account numbers, storage unit details, contract start and end dates, payment history, and communication records relating to your agreement with us.
Payment and billing details, such as payment method, billing history and transaction details processed through our chosen payment processors. We do not store full card details if payment is taken by card.
Communications, such as emails, written correspondence and notes of telephone conversations with our staff, including queries, complaints, feedback and requests.
Security and access data, such as CCTV footage on and around our premises, access logs related to entry systems and key codes, and records of visits to our site where applicable.
Website and technical information, such as basic device and usage data generated when you visit our website, including pages visited, the time and date of your visit, and general technical data provided by your browser. We do not knowingly use this information to directly identify you unless it is combined with other information you provide.
Purposes of Processing and Lawful Bases
We process personal data only where we have a lawful basis under data protection law. The purposes for which we use your data and the corresponding lawful bases include:
To provide storage services: We use your identification, contact, account and payment information to set up and manage your storage contract, administer your account, process payments and provide customer support. Our lawful basis for this is the performance of a contract or taking steps at your request prior to entering into a contract.
To manage our relationship with you: We may contact you about changes to your agreement, service notifications, billing updates and queries you raise. Our lawful basis is performance of a contract and, where applicable, our legitimate interests in managing customer relationships.
To maintain site security and safety: We use CCTV and access data to protect our premises, customers, staff and property, and to prevent and detect crime. Our lawful basis is our legitimate interests in ensuring the security of our operations and complying with any legal obligations relating to safety and crime prevention.
To handle payments and debt recovery: We may process payment data and share limited information with payment processors and, where necessary, debt recovery partners. Our lawful basis is performance of a contract and our legitimate interests in securing payment for services.
To comply with legal and regulatory obligations: We may use and retain personal data where required by law, for example for tax, accounting, insurance, or law enforcement requests. Our lawful basis is compliance with a legal obligation.
To improve our services: We may use aggregated or de-identified data from customer interactions and website visits to help us understand usage trends and improve our services. Our lawful basis is our legitimate interests in developing and enhancing our business.
Data Retention
We will not retain personal data for longer than is necessary for the purposes for which it was collected or to meet our legal, accounting or reporting requirements.
Customer account and contract records are normally kept for the duration of the contract and for a period afterwards to deal with any queries, disputes or legal claims and to meet accounting and tax obligations. The exact period may vary depending on the type of data and applicable legal requirements.
CCTV recordings are generally stored for a limited period only, unless a longer retention is justified, for example in connection with an incident, investigation or legal claim.
Correspondence and communications will be retained as long as reasonably necessary for customer service and record-keeping purposes, and then securely deleted or anonymised.
When personal data is no longer required, we will take steps to securely delete it or anonymise it so that it can no longer identify individuals.
Data Processors and Third Parties
We may share personal data with trusted third parties who process data on our behalf to help us deliver our services. These parties act as data processors and are only permitted to use personal data in accordance with our instructions and data protection law.
Categories of processors and third parties may include:
Payment processors that handle card and other payment transactions on our behalf.
IT and cloud service providers that support our systems, data storage and communications.
Security and maintenance contractors that may have access to CCTV systems, access control logs or our premises as part of their services.
Professional advisers such as accountants or legal advisers where this is necessary for our business or to manage legal rights and obligations.
Debt recovery agents or similar services where this is required to recover unpaid amounts owed under a contract.
Where required by law, we may also disclose personal data to law enforcement agencies, regulatory authorities or courts.
We take steps to ensure that any processors and third parties who handle personal data on our behalf maintain appropriate security and confidentiality measures.
International Transfers
If we transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses or ensuring the destination offers an adequate level of data protection as recognised by applicable law.
Security of Personal Data
We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. These may include access controls, physical security at our premises, secure storage environments, and staff training on data protection responsibilities.
While we take reasonable steps to secure your data, no system can be completely secure. You also have a role in helping to protect your information, such as keeping access codes and passwords confidential and notifying us promptly if you suspect any misuse.
Your Data Protection Rights
Under data protection law, individuals have certain rights in relation to their personal data processed by Storage Hackney Marshes. These include:
The right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how we use it.
The right to rectification: You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
The right to erasure: In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be limited where we need to retain data to comply with legal obligations or to establish, exercise or defend legal claims.
The right to restrict processing: You can ask us to restrict the use of your personal data in certain situations, for example while we investigate a concern you raise about its accuracy.
The right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may request to receive the personal data you provided in a structured, commonly used and machine-readable format and ask us to transmit it to another organisation where technically feasible.
The right to object: You may object to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is needed for legal claims.
Rights related to consent: Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are dissatisfied with how we handle your personal data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. Any updated version will apply to all customers and prospective customers in our service area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
