Self Storage Highbury Privacy Policy

This Privacy Policy explains how Self Storage Highbury collects, uses, stores, and protects personal data relating to current and prospective customers, including all Self Storage Highbury customers in the Highbury area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.

By using our storage services, making an enquiry, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to personal data processed by Self Storage Highbury in connection with the provision of self-storage units and related services to individuals and businesses located in the Highbury area. It covers data collected online, by phone, in person at our premises, and through any other communication channels that we operate.

Personal Data We Collect

We only collect personal data that is relevant and necessary for the purposes described in this Privacy Policy. Depending on your relationship with us, we may collect the following categories of data:

Identification and contact data: name, postal address, billing address, previous address, date of birth, and other identification details;

Contact details: email address, preferred correspondence address, and other contact information you provide to us; and

Contract and account data: storage unit number, contract start and end dates, rental fees and payment history, deposit details, records of communications and correspondence with you, and any information needed to manage your account and fulfil our contract with you.

We may also collect the following data where applicable and necessary:

Verification and security data: information from identity documents such as passport or driving licence details, and vehicle registration details;

Payment data: payment method, bank details or card information processed via secure payment processors in order to take rental payments, deposits, and other charges; and

CCTV and access control data: CCTV images from our premises, entry and exit records, key fob or access code logs, and related information used for security and crime prevention.

In the normal course of business, we do not intentionally collect special categories of personal data such as health data or information about your religion or ethnicity. If such data is inadvertently provided by you, we will handle it securely and only as necessary and lawful.

How We Collect Your Personal Data

We may collect your personal data in several ways, including when you:

Request a quote or make an enquiry about our storage services;

Enter into a storage agreement with us or sign related documentation;

Communicate with us in person at our site, by post, or by any communication channels we may provide;

Set up or manage payments for your storage unit; or

Visit our premises, where CCTV operates for security purposes.

We may also receive personal data from third parties, such as identity verification providers, payment processors, or law enforcement agencies where legally permitted.

Lawful Basis for Processing

We will only process your personal data where a lawful basis applies. Depending on the context, we may rely on the following lawful bases:

Contract: to take steps at your request before entering into a contract, and to perform our contract with you for the provision of self-storage services;

Legal obligation: to comply with legal and regulatory requirements, including accounting, tax, fraud prevention, and law enforcement obligations;

Legitimate interests: to operate, manage, and improve our business and premises in a way that we believe does not unduly impact your rights and freedoms, for example by ensuring site security, preventing non-payment, managing customer relationships, and handling queries and complaints; and

Consent: where we rely on your explicit consent for specific processing activities, such as certain types of optional marketing. You have the right to withdraw your consent at any time.

Purposes for Which We Use Personal Data

We may use your personal data for the following purposes:

To provide, manage, and administer storage units and related services;

To verify your identity and eligibility to enter into a storage agreement;

To manage billing, payments, and account administration;

To maintain the safety and security of our premises, including through CCTV and access control;

To communicate with you about your contract, payments, access arrangements, or any changes to our services and terms;

To handle queries, complaints, disputes, and legal claims;

To comply with legal, regulatory, and law enforcement requirements; and

To conduct internal reporting, management information, and business planning.

Data Retention

We will retain your personal data only for as long as is necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting requirements.

In general, we keep customer and contract-related records for a period necessary to manage your storage agreement and for a period after it ends to respond to any questions, disputes, or legal claims. Financial and transactional records may be retained for longer periods in line with statutory retention requirements.

CCTV recordings and access logs are retained for a limited period appropriate to our security purposes and then securely deleted or overwritten, unless a longer retention period is required in connection with an incident, investigation, or legal claim.

When personal data is no longer required, we take steps to securely delete or anonymise it.

Data Processors and Third Parties

We may share your personal data with trusted third-party service providers who act as data processors on our behalf. These may include:

Payment processing providers that handle card and bank transactions;

IT and cloud service providers that host or support our systems, databases, and communications;

Security and maintenance contractors that support the operation and safety of our premises; and

Professional advisers, such as accountants or legal advisers, where necessary for our business operations and legal compliance.

These processors are only permitted to process your data on our instructions, must keep it secure, and are subject to contractual obligations consistent with this Privacy Policy and applicable data protection law.

We may also share personal data with other third parties where required by law, for example with law enforcement authorities, courts, or regulatory bodies, or where it is necessary to protect our rights, property, or safety or that of our customers and others.

We do not sell your personal data.

International Data Transfers

Where any of our service providers or systems are located outside the United Kingdom, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection law. This may include the use of standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of data protection.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exceptions, you may have the right to:

Access: request confirmation that we process your personal data and obtain a copy of that data;

Rectification: ask us to correct inaccurate or incomplete personal data about you;

Erasure: request that we delete your personal data in certain circumstances;

Restriction: ask us to restrict the processing of your personal data in certain situations;

Data portability: request that we provide your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible and lawful to do so;

Objection: object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests, and we will cease such processing unless we have compelling legitimate grounds to continue; and

Withdraw consent: withdraw any consent you have previously given us, in which case we will stop the processing covered by that consent, unless we have another lawful basis.

We may need to verify your identity before responding to a rights request. We aim to respond within the timeframes required by law.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, encryption, staff training, and regular review of our security procedures. However, no system can be completely secure, and you acknowledge that transmission of information is at your own risk.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any changes will take effect from the date the revised Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy or how we process your personal data, or if you wish to exercise any of your data protection rights, you can contact us in writing at our Self Storage Highbury premises.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly first.