Storage Finsbury Park Privacy Policy
This Privacy Policy explains how Storage Finsbury Park collects, uses, stores and protects personal data relating to our customers and prospective customers in the Finsbury Park area. It also explains your rights under the UK General Data Protection Regulation GDPR and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Finsbury Park customers, including individuals and businesses, who use or enquire about our storage services in the Finsbury Park area. By using our services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
Storage Finsbury Park is the data controller responsible for determining how and why your personal data is processed. Where we use third parties to process personal data on our behalf, they act as data processors and are bound by contractual obligations to protect your data.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with Storage Finsbury Park:
Identification and contact details, such as your full name, postal address, billing address, contact address, and other contact information you provide to us.
Account and contract information, such as customer account numbers, storage unit numbers, contract start and end dates, and details about the services you have purchased or enquired about.
Payment and billing information, such as payment method details and transaction history. We do not store full card details where payment is processed by a payment service provider, but we receive confirmation of payments and may hold partial information used for verification.
Communication records, such as emails, letters, and notes of telephone conversations or in-person enquiries relating to your storage arrangements or questions about our services.
Usage information, such as dates and times you access our facility, visitor logs, and records of your interactions with our staff. Where applicable, this may include entry and exit logs from access control systems.
CCTV footage, where CCTV is in operation at our premises for security and safety purposes. Images may include customers, visitors, vehicles and activities within or around the facility.
Business information, where you act on behalf of a company or other organisation, such as your job title, business contact details, and any associated business registration information supplied to us.
How We Collect Your Data
We collect personal data directly from you when you enter into a storage agreement, request a quote, visit our premises, communicate with us by phone or in writing, or complete forms relating to our services. We may also receive data from third parties where it is necessary to verify your identity, process payments, or comply with legal obligations.
Lawful Basis for Processing
Storage Finsbury Park processes your personal data only where we have a lawful basis under GDPR. Depending on the circumstances, we rely on one or more of the following lawful bases:
Contract performance. We process your data to take steps at your request before entering into a contract and to perform our obligations under the storage agreement, such as managing your booking, providing access, and administering your account.
Legitimate interests. We process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes maintaining the security of our premises, managing our operations, improving our services, preventing fraud, and enforcing our contractual rights.
Legal obligation. We process personal data where we are required to do so by law, for example to maintain accounting records, comply with tax, regulatory and law enforcement requirements, or respond to valid legal requests.
Consent. In limited circumstances, we may rely on your explicit consent, for example for certain types of direct marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide storage services, including setting up and managing your storage unit, processing payments, arranging access, and providing customer support.
To manage our relationship with you, including handling your enquiries, communicating about your account, notifying you of changes to our terms or services, and resolving issues or disputes.
To maintain security and safety at our premises, including use of access control systems, visitor logs and CCTV monitoring where in place.
To manage and improve our business operations, such as monitoring usage patterns, planning capacity, training staff, and improving the quality of our services.
To meet our legal, regulatory and compliance obligations, including financial reporting, tax compliance, and responding to law enforcement or regulatory authorities where required.
To send you service-related information and, where permitted, marketing communications about our services that may be of interest to you. You can opt out of marketing communications at any time.
Data Retention
Storage Finsbury Park retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal, regulatory or operational requirements. Retention periods may vary depending on the type of data and the context of processing.
Contract and account records, including contact details and details of your storage agreement, are typically kept for a period after your contract ends in order to manage any queries, disputes or legal claims and to comply with tax and accounting obligations.
Payment and transaction records are retained for the time required by applicable financial and tax regulations.
CCTV footage, where in operation, is kept for a limited period that is appropriate for security and incident investigation, unless specific footage needs to be retained longer in connection with an ongoing investigation or legal claim.
When data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a safe manner.
Data Processors and Third Parties
We may share your personal data with carefully selected third-party service providers who act as data processors on our behalf. These may include providers of payment processing, secure data storage, customer management systems, access control systems, IT support and maintenance, document archiving and professional advisors.
Where we use processors, they are only permitted to process your personal data in accordance with our instructions and for the specific purposes we have agreed. They must implement appropriate technical and organisational measures to protect your data.
We may also share personal data with third parties acting as independent controllers where required by law, such as regulators, law enforcement agencies, or other authorities, or where it is necessary to protect our rights, property, or the safety of our customers and staff.
If we are involved in a business reorganisation, sale or transfer of all or part of our business, personal data may be disclosed to potential or actual purchasers and their professional advisers, subject to appropriate confidentiality protections.
International Transfers
Where we use service providers or systems located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements. This may include using countries deemed to provide an adequate level of data protection or implementing standard contractual clauses or equivalent measures.
Data Security
Storage Finsbury Park takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include access controls, staff training, secure storage, and procedures for dealing with suspected data breaches.
Your Data Protection Rights
Under GDPR, you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Finsbury Park customers in the Finsbury Park area, subject to certain legal limitations and exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of the data we hold about you, along with information about how we use it.
Right to rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated without undue delay.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, such as while we are verifying the accuracy of data or considering an objection you have raised.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transmitted to another controller where technically feasible.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds. You also have an absolute right to object to direct marketing at any time.
Rights in relation to automated decision-making. You have rights in relation to decisions based solely on automated processing, including profiling, where such decisions have legal or similarly significant effects on you. Storage Finsbury Park does not generally make decisions of this nature in relation to customers.
If you wish to exercise any of your rights, we may need to verify your identity before responding. We aim to respond within the timeframes required by law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
