Storage North End Privacy Policy
This Privacy Policy explains how Storage North End collects, uses, stores, shares, and protects personal data relating to customers and prospective customers within our service area. It is intended to comply with the UK General Data Protection Regulation and, where applicable, the EU General Data Protection Regulation. This Policy applies to all Storage North End customers in our operating area, including individuals and business contacts.
Who we are and scope of this Privacy Policy
Storage North End provides storage and related services to customers in our local area. When we refer to we, us, or our in this Privacy Policy, we mean Storage North End acting as the data controller for the personal data we collect and use in connection with our services, website, and customer communications.
This Privacy Policy applies to personal data about customers, potential customers, guarantors, authorised persons listed on storage agreements, and individuals who contact us with enquiries or visit our premises.
Types of personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and the services you use:
Identification and contact data: name, title, postal address, billing address, contact address, date of birth, and other basic identity information necessary to open and manage an account.
Communication data: information you provide when you contact us in person or by other written or verbal communications, including enquiries, complaints, and feedback.
Contract and account data: records of storage agreements, unit numbers, access permissions, move-in and move-out dates, payment status, and related contractual information.
Payment and billing data: payment records, billing history, and limited payment details needed to process transactions through our payment processors. We do not store full card details when using secure third-party payment providers.
Security and access data: vehicle registration numbers where provided, access logs for entry systems, and, where in operation, CCTV images captured on our premises for security and safety purposes.
Technical and usage data: information about how you use our website or online services, including basic device and usage information such as IP address, browser type, and pages visited, collected through standard web technologies and cookies where permitted.
Marketing preferences: information about whether and how you wish to receive marketing communications from us.
How we collect personal data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, visit our premises, or update your details. We may also collect personal data when you use our website and online tools.
We may receive personal data about you from third parties, for example from payment processors, credit reference agencies where lawful, or business partners who refer you to us. In such cases, we will only use the data as described in this Privacy Policy.
Lawful bases for processing your personal data
We only process personal data where we have a lawful basis under the GDPR. Depending on the context, we may rely on:
Contract: where processing is necessary to enter into or perform a storage agreement or other contract with you, including taking steps at your request before entering into a contract.
Legal obligation: where we must process personal data to comply with our legal and regulatory obligations, such as record-keeping, tax, accounting, and health and safety requirements, or to respond to lawful requests from authorities.
Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, and your interests and fundamental rights do not override those interests. This includes securing our premises and units, managing and improving our services, preventing fraud, and defending legal claims.
Consent: where we rely on your freely given, specific consent, for example for certain marketing communications or optional cookies, you may withdraw your consent at any time.
How we use your personal data
We use personal data for the following purposes:
To provide storage services: setting up and managing your account, preparing and administering storage agreements, managing access permissions, and communicating with you about your storage unit and services.
To process payments and invoices: managing billing, processing payments through our payment providers, handling direct debits or card payments where applicable, and managing any outstanding balances.
To communicate with you: responding to enquiries, sending service messages, updates about your account, and essential notices relating to security, access, or changes to our terms and policies.
To ensure security and safety: operating CCTV where in place, monitoring access to the site, investigating incidents, preventing unauthorised access, and maintaining a safe environment for customers, visitors, and staff.
To manage our business: conducting internal administration, maintaining accurate records, analysing service usage for operational planning, and improving our services and customer experience.
For marketing: with your consent or where permitted by law, providing information about services, offers, or updates that may be of interest to you, and respecting any marketing preferences you communicate to us.
For legal and compliance purposes: complying with applicable laws, responding to legal claims or regulatory requests, and protecting our rights, property, and the rights and safety of others.
Data sharing and data processors
We do not sell your personal data. We may share personal data with selected third parties in the following circumstances:
Service providers and processors: companies that provide services on our behalf, such as payment processors, IT and system hosting providers, security and CCTV maintenance companies, accountants, and document storage or shredding services. These parties act as data processors and are only permitted to process personal data following our instructions and subject to contractual obligations to protect it.
Professional advisers: including lawyers, auditors, and insurers, where necessary for the establishment, exercise, or defence of legal claims or for compliance and governance purposes.
Authorities and regulators: where required by law or where necessary to protect our legal rights or the rights of others, we may share personal data with law enforcement, courts, regulatory bodies, or government authorities.
Business transfers: in the event of a sale, merger, or other reorganisation of our business, personal data may be transferred as part of that transaction, in which case any new owner would be required to use it only in ways consistent with this Privacy Policy and applicable law.
If personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place in accordance with the GDPR to protect your data.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide our services, meet legal and regulatory obligations, resolve disputes, and enforce our agreements.
In general, we retain contract and billing records for a period required by tax, accounting, and regulatory rules following the end of the customer relationship. CCTV footage, where in use, is retained for a limited period, typically only long enough to investigate incidents, unless a longer retention is required in connection with a specific investigation or legal claim.
When personal data is no longer required for the purposes described in this Privacy Policy, we will securely delete, anonymise, or archive it in accordance with our data retention and deletion procedures.
Your data protection rights
Subject to certain legal conditions and exceptions, individuals have the following rights in relation to their personal data:
Right of access: to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to erasure: to request deletion of your personal data where there is no good reason for us to continue processing it, subject to our legal and contractual obligations.
Right to restriction: to request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or where you object to processing.
Right to data portability: to request the transfer of certain personal data you have provided to us in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Right to object: to object to processing based on our legitimate interests, including profiling, and to object at any time to the use of your personal data for direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before its withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so that we can address your concerns directly.
Security of your personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, secure storage, staff training, and regular review of our security procedures. However, no system can be completely secure, and we cannot guarantee absolute security of information transmitted or stored.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. When we make changes, we will revise the date of the latest version and, where appropriate, notify customers through our usual communication channels. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
