Storage Muswell Hill Privacy Policy
This Privacy Policy explains how Storage Muswell Hill collects, uses, stores, and protects personal data for all customers in the Muswell Hill area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Muswell Hill customers, prospective customers, and website visitors located in the Muswell Hill area who interact with our services, whether online, by phone, or in person. Storage Muswell Hill is the data controller for the personal data it processes in connection with the provision of storage and related services.
Types of Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:
Identification and contact details, such as full name, postal address, billing address, contact address, date of birth, and preferred contact method.
Communication details, such as email correspondence and records of communications with our customer service team, including the date, time, and subject of your queries or complaints.
Contract and account information, such as storage unit details, contract start and end dates, payment history, and information related to bookings, reservations, or changes to your agreement.
Payment and billing information, such as payment method details and transaction records. We will not store full payment card numbers where this is not necessary and will follow industry standards for payment security.
Security and access information, such as vehicle registration numbers used for access and records of access to our facilities, including time and date stamps generated by access control systems.
Technical and usage data, such as information about how you interact with our website, including pages visited, time spent on pages, and basic device and browser information collected through necessary cookies or similar technologies.
Lawful Bases for Processing
We will only process your personal data when we have a valid lawful basis under the UK GDPR. Depending on the context, we rely on the following lawful bases:
Contract. We process your personal data when it is necessary to enter into or perform a contract with you, for example to set up your storage unit, manage your account, arrange payments, and provide customer support.
Legal obligation. We may process your personal data where we are required to do so by law, such as retaining transaction records for tax and accounting purposes or complying with lawful requests from regulatory authorities.
Legitimate interests. We process certain personal data for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. This includes maintaining the security of our premises, managing and improving our services, and handling queries and complaints.
Consent. In some situations, we may ask for your consent to use your personal data, for example for certain types of marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We may use the personal data we collect for the following purposes:
To provide storage services and manage your account, including setting up and administering your storage contract, enabling access to our facilities, processing payments, and communicating with you about your agreement.
To communicate with you about service-related matters, such as booking confirmations, changes to your contract, payment reminders, and important updates about the operation of our facilities.
To ensure the safety and security of our customers, staff, and property, including managing access to our premises and monitoring usage of our services to prevent misuse or fraud.
To manage our business operations, including maintaining accurate records, handling queries and complaints, improving our processes, and producing anonymised statistics for internal reporting.
To comply with legal and regulatory obligations, including tax and accounting requirements, responding to lawful requests from authorities, and retaining records in line with regulatory guidelines.
Data Retention
We only retain personal data for as long as it is necessary for the purposes for which it was collected, or as required by law. The exact retention period depends on the type of data and the context in which it is processed.
Customer account and contract information is typically retained for the duration of your relationship with us and for a set period after your contract ends, to handle any queries, disputes, or legal obligations. After this period, your data will be securely deleted or anonymised.
Payment and transaction records are kept for the period required by tax, accounting, and financial regulations. Access and security records are retained for a shorter period, unless they are required for an ongoing investigation or legal claim.
Where we have obtained your consent for specific processing, we will retain your data only for as long as your consent remains valid or until you withdraw it.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged to provide services that help us operate our business and deliver our services. They are required by contract to process your data only in accordance with our instructions, to keep it secure, and to comply with applicable data protection laws.
Examples of processors include payment processing providers, secure data storage providers, customer management and billing systems, and providers of security and access control systems.
We may also share personal data with other third parties where required by law, such as regulatory authorities, law enforcement, or legal advisors, when this is necessary to comply with legal obligations, protect our rights, or assist in the prevention and detection of crime.
We do not sell your personal data to third parties. Where we need to transfer your data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent measures, to protect your data.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions, but we will always respond to any request you make in accordance with the law.
Right of access. You have the right to request confirmation that we are processing your personal data and to receive a copy of the personal data we hold about you.
Right to rectification. You have the right to ask us to correct inaccurate or incomplete personal data. We encourage you to keep your contact information and other details up to date.
Right to erasure. In certain circumstances, you have the right to request the deletion of your personal data, for example where the data is no longer needed for the purposes for which it was collected or where you have withdrawn consent.
Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our processing.
Right to data portability. Where the processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine readable format and to request that we transmit it to another controller where technically feasible.
Right to object. You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the contact details provided on our main customer communication materials or through our usual customer service channels.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with our handling of your personal data. We would, however, appreciate the opportunity to address your concerns directly before you approach the authority, so we encourage you to contact us first.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or to comply with legal or regulatory developments. The updated version will apply from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
Your continued use of Storage Muswell Hill services after any changes to this Privacy Policy will be deemed acceptance of those changes, subject to your rights under applicable data protection laws.
