Privacy Policy - Noakhill Storage

This Privacy Policy explains how Noakhill Storage collects, uses, shares, stores, and protects personal data in connection with our storage services. It applies to all Noakhill Storage customers in area, including individuals and business customers who use our facilities, related services, or communicate with us in any way. We are committed to processing personal data in a fair, transparent, and lawful manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where applicable.

1. Personal Data We Collect

We collect only the data that is necessary for operating our storage services, meeting legal obligations, and protecting our business and customers. Depending on how you interact with us, we may collect the following categories of personal data:

Identification data: name, date of birth, and government-issued identification details where required for verification.
Contact data: address, email address, telephone number, and billing address.
Account and service data: unit number, access records, tenancy details, payment history, service preferences, and communication records.
Payment data: payment method details, transaction records, and invoicing information. We do not intentionally store full card details where a secure payment provider handles them.
Security data: CCTV footage, access logs, alarm records, incident reports, and other information collected to secure our premises and property.
Correspondence data: information contained in emails, forms, calls, notices, complaints, and requests made by you or on your behalf.

We may also collect limited technical data when you use digital systems connected to our services, such as device information, browser type, or log data, if relevant to service security and administration.

2. How We Use Your Data

We use personal data only for specified and legitimate purposes. These include:

setting up and managing storage agreements;
verifying identity and preventing fraud;
processing payments and issuing invoices;
providing customer support and managing service requests;
maintaining safety, access control, and site security;
investigating incidents, disputes, or breaches of contract;
meeting legal, regulatory, tax, and accounting obligations;
communicating service updates, reminders, and important notices;
protecting the rights, property, and safety of Noakhill Storage, our customers, staff, and visitors.

We do not use personal data for purposes that are incompatible with these original reasons unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. We rely on the following bases as appropriate:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes creating your account, administering your storage unit, managing payments, and providing customer support connected to the storage agreement.

Legal Obligation

We process data where necessary to comply with legal duties, such as tax laws, accounting requirements, identity verification obligations, fraud prevention rules, and lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include site security, CCTV monitoring, service improvement, debt recovery, record keeping, and internal administration.

Consent

In limited situations, we may ask for your consent, for example where it is required for a specific optional service or communication. When we rely on consent, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to provide our services, operate our business, or comply with the law. These third parties act either as independent controllers or as processors acting on our instructions.

Examples of processors and service providers may include:

payment processing providers;
IT and cloud hosting providers;
security and CCTV monitoring service providers;
maintenance and facilities contractors;
accounting, bookkeeping, and administrative service providers;
identity verification or fraud prevention providers;
professional advisers such as lawyers, auditors, and insurers.

We require processors to handle personal data securely, keep it confidential, and process it only according to our instructions and GDPR requirements. We do not sell your personal data.

We may also disclose data where required by law, by a court order, or to protect the rights, safety, and property of Noakhill Storage, our customers, or others.

5. International Transfers

If any processor or service provider stores or accesses personal data outside the UK or the European Economic Area, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms required under GDPR.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and as long as required by law, contract, or legitimate business needs. Retention periods vary depending on the type of data and the reason for processing.

Customer account and contract records are retained for the duration of the agreement and for a reasonable period afterwards.
Financial and tax records are typically retained for the period required by applicable accounting and tax laws.
Security records, including CCTV and access logs, are retained only as long as needed for security monitoring, incident investigation, or legal purposes.
Correspondence and complaint records are retained for the time needed to handle the matter and to maintain appropriate business records.

When retention is no longer necessary, we will securely delete, anonymise, or archive data in a manner consistent with our legal and operational obligations. We apply retention limits so that personal data is not kept longer than necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access restrictions, staff training, secure systems, physical security controls, and supplier due diligence. While no system can guarantee complete security, we work to protect data in line with the nature of the information we hold and the risks involved.

8. Your Rights

As a data subject, you have rights under GDPR in relation to your personal data. Subject to legal limits and applicable exemptions, these may include the right to:

access your personal data and receive a copy of it;
rectify inaccurate or incomplete personal data;
erase your personal data in certain circumstances;
restrict processing in certain situations;
object to processing based on legitimate interests;
data portability for data you provided to us where processing is based on contract or consent and carried out by automated means;
withdraw consent at any time where consent is the basis for processing;
complain to the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. Some rights may not apply in every situation, for example where we must keep data to comply with legal obligations or to establish, exercise, or defend legal claims.

9. Children’s Data

Our storage services are generally intended for adults and business users. We do not knowingly collect personal data from children except where necessary in relation to a lawful customer or contractual arrangement. If we learn that we have collected personal data from a child inappropriately, we will take steps to address it in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our processing practices. Any revised version will apply from the effective date stated in the updated policy. We encourage customers to review it periodically so they remain informed about how their data is handled.

11. Contact and Complaints

If you have questions about this Privacy Policy, your data rights, or how your personal data is handled, you may raise your concerns with us through our ordinary customer communication channels. You also have the right to lodge a complaint with the relevant supervisory authority if you are unhappy with how we process your data.

Noakhill Storage is committed to respecting privacy, maintaining trust, and processing personal data responsibly. We aim to ensure that every customer in area can use our services with confidence that their information is handled lawfully and securely.