Storage Noak Hill Privacy Policy
This Privacy Policy explains how Storage Noak Hill collects, uses, stores and protects personal data relating to customers and prospective customers in our service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
By using our storage services or contacting us about our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Noak Hill customers, prospective customers and authorised account contacts within our service area, regardless of the storage unit or service you use. It covers personal data collected in person at our site, over the phone, by post and through any online forms or digital tools we provide.
Data Controller Responsibility
Storage Noak Hill is the data controller for the personal data it collects and processes about you. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data when you enquire about or use our services:
Identification information, such as your full name, title, date of birth and identification document details where required for verification.
Contact information, such as your residential address, correspondence address, and information needed to contact you, excluding any direct electronic contact identifiers in this document.
Account and contract information, such as storage unit number, contract start and end dates, payment status, access permissions and authorised contacts on your account.
Payment and billing information, such as partial payment card details processed securely by our payment processors, billing address, payment history and records of invoices and receipts.
Access and security information, such as CCTV footage at our premises, access control logs or gate entry records, and information relating to safety or security incidents.
Communication records, such as records of your enquiries, complaints, feedback, and any correspondence or notes relating to customer service interactions.
Technical information, where applicable, such as IP address, device identifiers and usage data relating to any online customer portals or digital tools we provide.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, obtain a quote, sign a storage agreement, make a payment, update your details, or contact us for support.
We may also collect personal data from third parties where permitted by law, such as background check providers, payment service providers, and authorised persons acting on your behalf.
In addition, we obtain personal data automatically through security systems at our premises, such as CCTV and access control systems.
Lawful Bases for Processing
We only process your personal data when we have a lawful basis to do so. Depending on the circumstances, we rely on the following lawful bases:
Contract: We process personal data when it is necessary to enter into or perform a contract with you, such as providing storage services, managing your account, processing payments and communicating with you about your agreement.
Legal obligation: We process personal data when it is necessary to comply with legal or regulatory requirements, including tax, accounting, security, law enforcement and health and safety obligations.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests. This may include managing and improving our services, ensuring site security, preventing fraud and handling customer queries and disputes.
Consent: In limited cases, we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you are free to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage and related services to you, including setting up and administering your storage agreement and managing access to your unit.
To process payments, issue invoices and receipts, and manage any debt collection or account queries.
To maintain the safety and security of our premises, staff, customers and property, including through the use of CCTV and access control systems.
To respond to your enquiries, handle complaints, provide customer support and keep you informed about important information relating to your account or our services.
To comply with legal and regulatory obligations, including record keeping and cooperation with law enforcement or regulatory authorities where required.
To improve our services, internal processes, site management and customer experience, including through statistical analysis and service monitoring.
To send you information about our services or offers that may be of interest to you, where this is permitted by law and, where required, where you have provided consent.
Data Sharing and Processors
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are contracted to only process your personal data in accordance with our instructions and applicable data protection laws.
These processors may include payment processing providers, IT and cloud service providers, customer management and billing system providers, security and CCTV system providers, and professional advisers such as accountants or legal advisers where necessary.
In certain circumstances, we may also share your personal data with independent data controllers where legally required or justified. This may include law enforcement agencies, regulatory bodies, insurance providers, courts, debt collection agencies and other parties involved in legal proceedings or dispute resolution.
We do not sell your personal data.
International Data Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, or where data is otherwise transferred internationally, we ensure that appropriate safeguards are in place to protect your personal data. Such safeguards may include standard contractual clauses approved by relevant authorities or other legally recognised mechanisms.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
In general, we retain contract and billing records for a period required by applicable law after your storage agreement has ended. Security records such as CCTV footage and access logs are retained for shorter periods, unless they are required for the investigation of an incident, legal claim or law enforcement request.
When personal data is no longer required, we will securely delete or anonymise it.
How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, security systems at our premises, staff training, data minimisation practices and the use of reputable service providers that adhere to strong security standards.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: You have the right to request a copy of the personal data we hold about you, as well as information about how we process it.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: You have the right to request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and there is no legal reason for us to retain it.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or assess an objection.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. You also have the right to object to direct marketing at any time.
Right to data portability: In certain situations, you have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format and to request that we transmit it to another controller where technically feasible.
Where we rely on your consent as the basis for processing, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details provided on our main customer information materials or at our premises.
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any changes will take effect when the updated Privacy Policy is made available to customers. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
