Storage Hampstead Privacy Policy
This Privacy Policy explains how Storage Hampstead collects, uses, stores and protects personal data about customers and prospective customers in the Hampstead area. It applies to all Storage Hampstead services, including storage rentals, related services and any associated customer support or enquiries made in person, by post, by phone or online. Storage Hampstead is committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018.
Scope and Data Controller
This Privacy Policy applies to all Storage Hampstead customers and prospective customers located in the Hampstead area who rent or enquire about storage units or related services. For the purposes of data protection law, Storage Hampstead acts as the data controller for the personal data described in this Privacy Policy. This means Storage Hampstead decides how and why your personal data is used.
Types of Personal Data We Collect
Storage Hampstead collects and processes different categories of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details, such as your full name, residential address, correspondence address, date of birth, and other contact details you provide such as postal address or any online contact details you choose to use.
Account and contract information, such as storage unit number, contract start and end dates, payment history, services requested, access permissions for authorised persons, and records of changes to your contract.
Payment and billing information, such as billing address and payment details necessary to process your transactions. Where payments are processed by third party payment providers, Storage Hampstead does not store your full card information but may receive transaction references and confirmation details.
Communication data, such as records of your interactions with Storage Hampstead, including enquiries, complaints, feedback, and notes from customer support communications.
Security and access data, such as records of site access control systems, time and date of entry and exit where relevant, and any incident reports necessary for safety and security purposes.
Technical information, such as basic technical identifiers where you access online information about our services, including IP address, device information and basic usage data, collected through standard server logs.
Lawful Bases for Processing
Storage Hampstead processes your personal data only where there is a lawful basis under data protection law. Depending on the circumstances, we may rely on one or more of the following lawful bases:
Performance of a contract: We process your personal data to set up, manage and fulfil your storage contract, including taking payment, providing access to your unit, managing renewals and responding to contractual queries.
Compliance with legal obligations: We process personal data where required by applicable law, for example to comply with tax, accounting, anti-money laundering, law enforcement or court requirements.
Legitimate interests: We may process your data for our legitimate business interests, provided these are not overridden by your rights and freedoms. This can include ensuring the security of our premises, preventing fraud, managing our business operations, improving our services, and keeping basic records of interactions with customers and prospective customers.
Consent: In some limited situations, we may rely on your consent, for example for certain types of optional marketing. Where processing is based on consent, you can withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
How We Use Your Personal Data
Storage Hampstead uses personal data for the following purposes:
To provide storage and related services to you, including processing bookings, managing storage contracts, collecting payments, providing customer support and handling renewals or terminations.
To maintain the safety and security of our premises, including managing access control systems, investigating incidents, enforcing site rules and helping to protect customers, staff and property.
To manage our relationship with you, including communicating important information about your contract, any changes to our terms and conditions, and service updates that affect your use of our facilities.
To manage our business operations, including internal record keeping, budgeting, auditing, quality control, staff training and the maintenance of our IT and security systems.
To comply with legal and regulatory requirements, respond to lawful requests from authorities, and establish, exercise or defend legal claims.
To send you information about similar services you already use with us, where allowed by law. You can object to this type of communication at any time.
Data Retention
Storage Hampstead keeps personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we retain customer contract records for a period that allows us to respond to queries, manage potential disputes, comply with tax and accounting laws and demonstrate that we have met our legal obligations. After the relevant retention period has expired, personal data is securely deleted, anonymised or archived.
Security and access data may be kept for shorter periods unless it is required for an ongoing investigation, legal claim or security review. Where we have relied on your consent for optional communications, we will keep the relevant data until you withdraw your consent or until it is no longer needed for the original purpose, whichever occurs first.
Data Processors and Third Parties
Storage Hampstead may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your data according to our documented instructions and are bound by contractual obligations to protect your data and keep it confidential.
These processors may include providers of payment processing services, IT and cloud hosting services, access control and security systems, document storage, accounting or administrative support services and professional advisers such as auditors or legal advisers where necessary.
Storage Hampstead may also share personal data with third parties acting as independent controllers where required by law, such as regulatory bodies, law enforcement agencies, tax authorities or insurers. In those cases, the third party is responsible for its own compliance with data protection law.
Where personal data is transferred outside the United Kingdom or the European Economic Area, Storage Hampstead will ensure that appropriate safeguards are in place, such as recognised adequacy regulations or standard contractual clauses, so that your data continues to be protected to a standard essentially equivalent to that in the UK.
Security of Your Personal Data
Storage Hampstead takes the security of your personal data seriously. We implement technical and organisational measures designed to protect your data from unauthorised access, accidental loss, alteration or disclosure. These measures may include access controls, role based permissions, secure storage systems, staff training and regular review of our security arrangements.
While we use reasonable safeguards, no system can be completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you and any relevant authorities in accordance with our legal obligations.
Your Data Protection Rights
Under data protection law, you have certain rights in relation to your personal data held by Storage Hampstead. These may include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how and why we process it.
Right to rectification: You can request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal obligation or overriding legitimate interest to retain it.
Right to restriction of processing: You can request that we limit the way we use your data in certain situations, for example while we review a request to rectify data or an objection to processing.
Right to data portability: In some circumstances, you can request that we provide you with your personal data in a structured, commonly used and machine readable format, or that we transmit it to another controller where technically feasible.
Right to object: You can object at any time to certain types of processing based on legitimate interests, including profiling, and you have an absolute right to object to direct marketing.
Right not to be subject to automated decision making: Storage Hampstead does not make decisions about customers based solely on automated processing that have legal or similarly significant effects.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights in relation to your personal data held by Storage Hampstead, you can write to us describing which right you wish to exercise and the information your request relates to. We may need to verify your identity before responding. We aim to respond to all valid requests within one month, or within any other timeframe required by law.
You also have the right to raise a complaint with the relevant data protection supervisory authority if you are concerned about how Storage Hampstead handles your personal data. We encourage you to contact us first so that we have an opportunity to address your concerns directly.
Changes to This Privacy Policy
Storage Hampstead may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. When we make material changes, we will take appropriate steps to inform you, which may include making the updated Privacy Policy available at our premises or through our usual communication channels. The most recent version will always apply to the personal data we hold.
