Storage Enfield Highway Privacy Policy
This Privacy Policy explains how Storage Enfield Highway collects, uses, stores and shares personal data about customers and prospective customers in the Enfield Highway area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Storage Enfield Highway customers and anyone who makes an enquiry or interacts with us in connection with our storage services in the local area.
1. Data Controller
Storage Enfield Highway acts as the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is used and are responsible for ensuring that it is processed in a lawful, fair and transparent manner.
2. Personal Data We Collect
We collect and process different types of personal data about you depending on how you interact with us and which services you use. The categories of data we may collect include the following.
Identity and contact details, such as your name, postal address, billing address, and any other contact details you choose to provide.
Customer account details, such as your account number, storage unit number, contract dates, payment history, and related correspondence.
Payment and transaction data, such as records of payments made to us and from us, and details of services you have purchased. We do not store full payment card details when payment is processed through a third-party payment processor.
Verification and security data, such as copies of identification documents you provide for verification, vehicle registration numbers used to access our facilities, and entry and exit logs from our security systems.
Communication data, such as records of your communications with us, including enquiries, complaints or feedback provided by telephone, in person or in writing.
Technical and usage data, such as basic information relating to how you use our website or online services, including log data and device information, where applicable.
3. How We Collect Your Data
We collect personal data in a variety of ways.
Directly from you when you contact us, visit our premises, open an account, sign a contract, reserve a unit, pay an invoice, or otherwise communicate with us.
Automatically when you use our website or digital services, for example through access logs and similar technologies.
From third parties, such as payment processors, credit reference agencies where applicable, or service providers who assist us in delivering our services.
4. Lawful Bases for Processing
We will only process your personal data where we have a lawful basis to do so. Depending on the specific activity, we rely on the following lawful bases.
Contract. We process your personal data when it is necessary to enter into or perform a contract with you, for example to manage your storage agreement, administer your account, and provide support.
Legal obligation. We process certain personal data because we are required to do so by law, such as for tax, accounting and health and safety purposes and to respond to lawful requests from public authorities.
Legitimate interests. We process personal data for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. Examples include maintaining the security of our premises, monitoring access to storage units, managing and improving our services, and defending our legal rights.
Consent. In limited cases, we may ask for your consent, for example to send you particular types of marketing communications where these are not covered by our legitimate interests. Where we rely on consent, you can withdraw it at any time.
5. How We Use Your Personal Data
We use your personal data for the following purposes.
To provide storage services, including assessing enquiries, setting up accounts, managing bookings, processing payments and providing customer support.
To operate and secure our storage facilities, including administering access controls, maintaining appropriate records of entry and exit, and monitoring for unauthorised activities.
To manage our relationship with you, including responding to enquiries, notifying you about changes to terms or services, and handling complaints.
To comply with legal and regulatory obligations, including accounting, tax, and safety requirements, and responding to lawful requests from authorities.
To improve our services, including internal analysis, quality control, staff training, and service development.
To send you information about similar products or services that may be of interest to you, where we rely on our legitimate interests or your consent in accordance with applicable law.
6. Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.
In general, we retain customer account and contract information for a period following the end of your storage agreement, in line with statutory limitation periods for legal claims and regulatory requirements. Payment and invoicing records are kept for the period required by tax and accounting rules.
Security and access records are kept for a shorter period, which is determined by our risk assessments and legal obligations. Communication records and enquiry information are retained for a reasonable period to enable us to respond to queries and improve our services.
When your data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
7. Data Processors and Third Parties
We may share your personal data with carefully selected third-party service providers who act as data processors on our behalf. These processors only process your data according to our instructions and for the purposes set out in this Privacy Policy, and they are required to implement appropriate security measures.
Examples of such processors include payment processing providers, IT and cloud hosting providers, customer management system providers, security and access control system providers, professional advisers and auditors where they require access to limited personal data to provide their services.
We may also share personal data with independent controllers where required or permitted by law, including public authorities, law enforcement agencies, regulators, or our professional advisers in the context of legal proceedings or regulatory matters.
We do not sell your personal data. If we are involved in a business reorganisation, transfer or sale, your personal data may be transferred as part of that transaction in accordance with data protection laws.
8. International Data Transfers
Where it is necessary for us to transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses approved by relevant authorities or transferring data to countries that have been recognised as providing an adequate level of data protection.
9. Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our premises, restricted access to personal data, staff training on data protection responsibilities, and the use of secure systems and processes.
While we take reasonable steps to protect your personal data, no system can be completely secure. You are responsible for keeping any access credentials for your account confidential and for notifying us promptly of any suspected misuse.
10. Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Enfield Highway customers and individuals whose data we process in the Enfield Highway area, subject to certain conditions and exceptions in the legislation.
Right of access. You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction. You may ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used format and to have it transmitted to another controller where technically feasible.
Right to object. You can object to our processing of your personal data where we rely on legitimate interests, including for direct marketing. We will stop processing your data for direct marketing purposes when you object.
Rights related to consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide in the Enfield Highway area. Any updated version will be made available using the same channels as this policy, and the date of the latest revision will be indicated. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
