Storage Arnos Grove Privacy Policy
This Privacy Policy explains how Storage Arnos Grove collects, uses, stores and protects personal data about its customers, prospective customers and website visitors in the local area. It also explains the lawful bases we rely on under the UK General Data Protection Regulation and the EU General Data Protection Regulation, how long we keep personal data, when we share it with processors, and the rights you have in relation to your personal data.
This Privacy Policy applies to all Storage Arnos Grove customers and individuals who use our services or interact with us in the Arnos Grove area, whether you contact us online, by post, or in person at our storage facilities.
Data Controller
Storage Arnos Grove is the data controller responsible for determining how and why your personal data is processed in connection with our storage services. When this policy refers to we, us or our, it refers to Storage Arnos Grove acting as the data controller.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you when you enquire about, reserve, or use a storage unit, or otherwise interact with us:
Identification data such as your full name, title, date of birth and identification document details where required for verification and security purposes.
Contact data such as your home address, billing address, correspondence address, and any other address you provide to us, together with your preferred contact channels.
Account and contract data such as your customer ID, storage unit number, contract start and end dates, access permissions, payment history and details of services you have purchased from us.
Financial and payment data such as limited payment card details required to process transactions, partially redacted card information, bank details where applicable, and records of payments made and received. We do not retain full payment card details beyond what is necessary to process your payment.
Communication data such as records of correspondence, enquiries, complaints, feedback, call notes, and any information you provide when you contact us or respond to customer surveys.
Security and access data such as CCTV images at our facilities, access control logs, times of entry and exit to storage areas, and records of any security incidents.
Website and technical data such as IP address, device identifiers, browser type, operating system, access times, and pages viewed when you visit our website. This may include the use of cookies or similar technologies for essential site functionality and performance analysis.
Purposes and Lawful Bases for Processing
We only process your personal data when we have a valid lawful basis under GDPR. The main purposes for which we use personal data, and the corresponding lawful bases, are described below.
To provide storage services and manage your contract. We use your identification, contact, account and payment data to set up your account, verify your identity, reserve and allocate storage units, manage billing and payments, handle renewals, and provide customer support. Our lawful basis is that processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
To maintain the security and safety of our facilities. We use CCTV, access control logs and incident reports to protect customers, staff, property and stored goods, to prevent and detect crime, and to investigate incidents. Our lawful bases are our legitimate interests in maintaining the security of our premises and, where relevant, compliance with legal obligations.
To manage our business operations. We may use your personal data for internal administration, accounting, auditing, reporting, service improvement, and staff training. Our lawful basis is our legitimate interests in operating and improving our business in a responsible manner.
To comply with legal obligations. We may process your personal data to comply with laws and regulations, such as tax rules, anti money laundering obligations, fraud prevention, and responses to lawful requests from authorities or regulators. Our lawful basis is compliance with legal obligations.
To communicate with you about your account and our services. We may contact you with important information about your storage contract, changes to our terms or policies, payment reminders, service updates, and similar operational messages. Our lawful bases are performance of contract and our legitimate interests in keeping you informed about matters affecting your use of our services.
To send marketing communications. We may use your contact details to send you information about promotions, new services or offers that may be relevant to you. Where required by law, we will only send marketing communications with your consent. In other cases, we may rely on our legitimate interests in promoting our services, and you will always have the right to opt out of marketing at any time.
To manage enquiries and complaints. We process personal data included in your enquiries or complaints to respond, resolve issues, and improve our services. Our lawful bases are performance of contract, where relevant, and our legitimate interests in managing customer relationships and improving customer satisfaction.
Data Retention
We keep personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy and to meet any legal, regulatory, tax, accounting or reporting requirements.
Customer account and contract data are generally retained for the duration of your contract with us and for a period after the contract ends, to deal with any queries, disputes, or legal claims, and to comply with statutory retention periods. This period will normally not exceed six years after your contract ends, unless a longer period is required by law or necessary in relation to a legal claim.
CCTV recordings and access control logs at our facilities are retained for a shorter period, which is determined by security needs and storage capacity. This period is usually limited to what is necessary to investigate incidents or respond to security related requests.
Marketing data relating to your communication preferences is retained until you unsubscribe or object to marketing, or until we determine that the information is no longer accurate or necessary.
In all cases, when personal data is no longer required for the purposes for which it was collected, we will securely delete, anonymise or otherwise render it unusable.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties that provide services to us and act as our data processors. These service providers are only permitted to process your personal data on our instructions and for the purposes specified by us, and they are required to keep your data secure and confidential.
Categories of data processors we may use include providers of payment processing services, secure data storage and cloud hosting, customer relationship management systems, IT support and maintenance, security and CCTV maintenance providers, and professional advisers such as accountants or auditors.
We may also share personal data with other third parties in limited circumstances, such as with law enforcement agencies, regulators, or courts where required by law, or with our professional advisers in connection with legal claims or compliance obligations. In these cases, we will only share what is necessary and will ensure there is a lawful basis for the disclosure.
We do not sell your personal data to third parties.
International Data Transfers
Where any of our processors are located outside the United Kingdom or European Economic Area, or where data is accessed from outside these areas, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include the use of standard contractual clauses approved by the relevant data protection authorities or other legally recognised mechanisms to ensure that your rights are protected.
Your Data Protection Rights
Under GDPR, you have a number of rights in relation to your personal data, which apply to all Storage Arnos Grove customers in the Arnos Grove area.
Right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of the personal data we hold about you, together with certain information about how it is used.
Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data about you. We encourage you to keep your contact and account details up to date so that we can provide our services effectively.
Right to erasure. In some circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing. This right is subject to certain limitations, for example where we are required to retain data by law or where it is needed for legal claims.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, for example where you contest the accuracy of the data or object to our processing, while we consider your request.
Right to data portability. In specific cases, where the processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive the personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transfer it directly to another controller where technically feasible.
Right to object. You have the right to object at any time to processing of your personal data based on our legitimate interests, including profiling related to those interests. We will then stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims. You also have an absolute right to object to the use of your personal data for direct marketing, and we will respect any request to stop marketing communications.
Rights in relation to automated decision making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless certain conditions apply. We do not typically make decisions about customers solely by automated means.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority and encourage you to contact us first so that we can try to resolve any issues.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. When we make significant changes, we will take appropriate steps to bring these changes to your attention, for example by updating the date of the policy and, where appropriate, notifying you directly.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data at Storage Arnos Grove.
