Privacy Policy - Muswellhill Storage

This Privacy Policy explains how Muswellhill Storage collects, uses, stores, shares, and protects personal data in connection with its services. It applies to all Muswellhill Storage customers in the area, including individuals and businesses that enquire about, use, or manage storage services with us. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Muswellhill Storage provides storage-related services to customers in the area. For the purposes of data protection law, we are the data controller for the personal data we collect and use about customers, prospective customers, visitors, and other individuals who interact with us in relation to our services.

This policy applies to all personal data processed by us in connection with storage enquiries, bookings, access management, payments, security, administration, and customer support.

2. Personal Data We Collect

We collect only the data necessary to provide and manage our services, meet legal obligations, and support legitimate business operations. The types of personal data we may collect include:

Identity details such as name, title, and date of birth where required for identity verification.
Contact details such as postal address, email address, and telephone number.
Account and service information such as booking details, unit allocations, access permissions, and customer preferences.
Payment information such as billing records, transaction details, and payment status.
Correspondence data including emails, phone call notes, complaints, enquiries, and support requests.
Security information where needed, such as CCTV images, access logs, and incident records.
Technical data such as IP address, device type, and browser information if you interact with our digital systems.

We generally do not seek to collect special category data. If such information is provided to us incidentally, we will handle it with additional care and only process it where a lawful basis exists.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To set up and manage customer accounts and storage services.
To verify identity and protect access to storage facilities.
To process payments, refunds, and account administration.
To communicate about service changes, notices, and operational updates.
To maintain safety and security, including monitoring access and investigating incidents.
To comply with legal, tax, accounting, and regulatory obligations.
To defend or establish legal claims and manage disputes.
To improve our services, systems, and customer experience.

We will only use your data for the purposes for which it was collected, unless we reasonably consider that another compatible purpose applies and the law allows it.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the activity, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you, such as creating your storage booking, managing your account, providing access, and handling payments.

Legal Obligation

We process personal data where required to comply with legal obligations, including accounting, tax, fraud prevention, and regulatory record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests. This may include service administration, security, preventing misuse, customer support, and business improvement.

Consent

In limited cases, we may rely on consent, for example where it is specifically required for optional communications or particular uses of data. Where consent is used, you may withdraw it at any time.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, or operational requirements. Retention periods vary depending on the type of information and the reason for processing.

Customer account and contract records are generally retained for the duration of the relationship and for a reasonable period afterwards.
Payment and invoicing records are retained as required by tax and accounting laws.
Security records such as access logs or CCTV footage are retained for limited periods unless needed for an incident investigation or legal claim.
Enquiry records may be kept for business administration and service follow-up purposes.

When personal data is no longer required, we will delete, anonymise, or securely destroy it.

6. Processors and Data Sharing

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they process data on our behalf and under our instructions. Examples may include:

Payment service providers that handle card or electronic payments.
IT and system providers that support storage management, email services, data hosting, or security systems.
Accountancy and professional advisers where necessary for financial, legal, or compliance purposes.
Security service providers supporting surveillance, monitoring, or incident response.
Debt recovery or legal advisers where needed to enforce agreements or resolve disputes.

We require processors to protect personal data, use it only for agreed purposes, and implement appropriate security measures. We do not sell personal data.

In some cases, we may disclose data to independent controllers such as law enforcement, insurers, or regulators where there is a lawful reason to do so.

7. International Transfers

If any of our processors or systems transfer personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms approved under applicable data protection law.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, staff training, secure storage, authentication procedures, and monitoring systems. While no system can be guaranteed to be completely secure, we aim to maintain a high standard of protection.

9. Your Rights

Depending on the circumstances and the lawful basis used, you may have the following rights under data protection law:

Right of access to request a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete information.
Right to erasure in certain situations, also known as the right to be forgotten.
Right to restriction of processing in certain circumstances.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability for information processed by automated means and based on consent or contract, where applicable.
Right to withdraw consent where processing relies on consent.
Right to complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

Some rights may be subject to legal limitations or exceptions. For example, we may retain certain information where required by law or where we have compelling grounds to continue processing.

10. Children’s Data

Our services are intended for adults and businesses. We do not knowingly collect personal data from children in connection with routine storage services. If we become aware that a child’s data has been collected inadvertently, we will take appropriate steps to delete or safeguard it, unless there is a lawful reason to retain it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updated version will apply from the date it is made available. We encourage customers to review the policy periodically to stay informed about how personal data is handled.

12. Summary of Our Commitment

Muswellhill Storage is committed to processing personal data lawfully, securely, and transparently. We collect only what is needed, use it for clear purposes, retain it only as long as necessary, and share it only with trusted processors or other parties where legally justified. This policy applies to all Muswellhill Storage customers in the area and is designed to uphold your privacy rights while enabling us to provide reliable storage services.