Storage Tufnell Park Privacy Policy
This Privacy Policy explains how Storage Tufnell Park collects, uses, stores and protects personal data relating to customers and prospective customers in our local service area. It is intended to comply with the UK General Data Protection Regulation and related data protection laws. By using our storage services, contacting us, or providing your information in any way, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all Storage Tufnell Park customers and prospective customers in the area, including individuals, sole traders and representatives of business clients. It applies whether you contact us in person, by post, online or through any other channel that we make available.
Who we are and scope of this policy
Storage Tufnell Park acts as the data controller for the personal data described in this Privacy Policy. This means we determine how and why your personal data is processed. This Privacy Policy covers our storage services and related customer interactions, including enquiries, bookings, contracts, payments and ongoing communications.
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or best practice. Any updated version will apply from the date it is made available and will replace earlier versions.
Personal data we collect
We only collect personal data that is relevant and necessary for the purposes set out in this Privacy Policy. The types of personal data we may collect include:
Identification and contact details: name, title, postal address, billing address, contact preferences and similar details.
Account and contract information: customer reference numbers, unit numbers, contract details, move-in and move-out dates, and related correspondence.
Payment and transaction details: payment method details to the extent necessary to process your payment, payment history, invoices, refunds and records of financial transactions with us. Where we use secure third-party payment processors, they may process some payment information on our behalf.
Usage and interaction data: information about your interactions with us, such as enquiries, complaints, feedback and communication records.
Security and access data: information needed for site security and access control, such as access logs, gate or door entry records, vehicle information where relevant, and closed-circuit television images where CCTV is in operation on our premises.
Business customer information: for customers acting on behalf of a company or organisation, we may collect job title, business contact details and information about the organisation you represent.
We generally do not seek to collect special categories of personal data such as health information, unless you choose to share such information with us where it is relevant to our services, and only where we have a lawful basis to process it.
How we collect your personal data
We collect personal data in a variety of ways, including:
Information you provide directly: when you make an enquiry, request a quote, sign a storage agreement, make a payment, update your details or communicate with us by any means.
Information generated by our services: records of your use of our storage services, such as access logs, account activity and transaction data.
Information from third parties: where lawful and appropriate, we may receive limited personal data from third parties, such as payment processors or service providers acting on our behalf, or from public sources such as business registries in the case of corporate customers.
Lawful bases for processing your data
We rely on one or more of the following lawful bases under data protection law to process your personal data:
Contract: to take steps at your request before entering into a contract, and to perform our contract with you. This includes managing your storage booking, processing payments, administering your account and providing customer service.
Legal obligation: to comply with legal and regulatory requirements, such as tax, accounting and safety obligations, and to assist law enforcement where we are legally required to do so.
Legitimate interests: to pursue our legitimate business interests in a way that is proportionate and respects your privacy. This includes managing and improving our services, maintaining site security, preventing fraud, handling customer queries and maintaining business records.
Consent: where required by law, for example in relation to certain types of direct marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage storage services, including setting up and managing your account, providing access to your storage unit, responding to enquiries and requests, and handling any issues or disputes.
To process payments and maintain accurate financial records, including issuing invoices, managing recurring payments where applicable, and handling refunds or chargebacks.
To communicate with you about your bookings, contracts, account status, changes to our terms, service updates and other important notices.
To maintain the safety and security of our premises, customers and staff, including the use of CCTV where in operation, access control systems and security monitoring.
To manage our business operations, including planning and forecasting, auditing, and quality assurance.
To comply with applicable laws and regulations and to respond to lawful requests from public authorities.
Where permitted, to provide you with information about our services that may be relevant to you, and to understand how our services are used so that we can improve them.
Data retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, and to meet legal, accounting or reporting requirements. The exact retention period will vary depending on the type of data and our legal obligations.
In general, we retain core customer and contract information for a period after your contract ends, to enable us to handle any queries, disputes or legal claims. Financial records are retained for the period required by tax and accounting laws. Data from security systems such as CCTV and access logs is usually retained for a shorter period, unless needed for an ongoing investigation or legal matter.
At the end of the relevant retention period, we will securely delete or anonymise your personal data so that it can no longer be associated with you.
Data processors and sharing of personal data
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers are engaged under written contracts, are required to process personal data only in accordance with our instructions, and must implement appropriate security measures. Examples of such processors may include payment processing providers, IT and cloud service providers, customer management systems and security service providers.
We may also share your personal data where this is required by law, for example with law enforcement agencies, courts or regulatory bodies, or where we believe it is necessary to protect our rights, property or the safety of our customers, staff or the public.
Where we need to share personal data with professional advisers, such as legal or accounting advisers, they will act as independent controllers or processors, depending on the circumstances, and will be bound by professional or contractual confidentiality obligations.
We do not sell your personal data.
International transfers
Where we use service providers that process personal data outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your data is protected in line with applicable data protection laws. This may include using countries that have been recognised as providing an adequate level of data protection, or entering into contracts that contain approved data protection clauses.
How we protect your data
We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, accidental loss, disclosure or destruction. These measures may include access controls, encryption, secure storage, staff training and regular review of our security practices.
While we take reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. We therefore encourage you to take your own precautions, such as keeping account details secure and notifying us promptly if you suspect any unauthorised use of your information.
Your data protection rights
Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:
The right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, along with certain information about how it is processed.
The right to rectification: you can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
The right to restrict processing: you can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection.
The right to object: you can object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is for legal claims.
The right to data portability: where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
If you wish to exercise any of these rights, you can contact us using the contact details published on our main customer documents or official channels. We may need to verify your identity before responding to your request.
Complaints and further information
If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live, work or believe a breach has occurred.
This Privacy Policy is intended to give you clear and accessible information about how Storage Tufnell Park processes personal data. If you have any questions about this Policy or how we handle your information, you can contact us using our published contact details.
