Storage Belsize Park Privacy Policy
This Privacy Policy explains how Storage Belsize Park collects, uses, stores, and protects personal data relating to customers and prospective customers in the Belsize Park area. It is intended to be clear, transparent, and compliant with the UK General Data Protection Regulation and related data protection laws.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Belsize Park customers and prospective customers in the local area who use, enquire about, or are otherwise interested in our storage services. It applies to personal data collected in person at our premises, over the phone, by post, and through any digital or online interactions. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
We may collect and process the following categories of personal data about you, where relevant to the services we provide:
Identification data, such as your full name, date of birth, and identification document details when required for verification and security purposes.
Contact details, such as your residential address, correspondence address, and any alternative contact address you choose to provide to us.
Communication details, such as your communication preferences and records of communications between you and Storage Belsize Park, including enquiries, complaints, and notes of conversations.
Account and contract information, such as storage unit numbers, rental agreements, billing history, payment records, and details of services you have requested or used.
Payment and billing information, such as payment method details and transaction records, processed securely in accordance with relevant financial and data protection regulations. We do not store full payment card details beyond what is necessary to process transactions in a secure manner.
Security and access information, such as access codes, entry and exit logs, vehicle registration details, and CCTV footage captured at our premises, where this is in place for security and safety purposes.
Lawful Bases for Processing Your Data
We will only process your personal data where we have a lawful basis to do so. Depending on the context, we may rely on one or more of the following lawful bases:
Performance of a contract. We process personal data in order to set up, manage, and perform our storage agreements with you, including processing your bookings, managing your account, billing you, and communicating with you about your contract.
Compliance with legal obligations. We may process your data to comply with applicable laws and regulations, including tax and accounting rules, anti money laundering measures, fraud prevention, and any law enforcement requirements that apply to us.
Legitimate interests. We may process your data for our legitimate business interests, where these are not overridden by your rights and freedoms. Examples include managing our premises, maintaining security through CCTV where used, preventing fraud and misuse of our services, improving our services, and managing customer relationships.
Consent. In certain limited situations, we may rely on your consent, for example where we send you optional marketing communications or where we use your information for a purpose not covered by the above lawful bases. Where processing is based on consent, you have the right to withdraw that consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes, to the extent that they are relevant to you and our relationship with you:
To set up and administer your storage account, including verifying your identity where required and preparing your storage agreement.
To provide and manage storage services, including organising access to units, managing bookings and renewals, and handling any requests or queries you submit to us.
To process payments and maintain financial records in accordance with legal and contractual obligations.
To maintain the safety and security of our premises, staff, and customers, including the operation of access systems and, where in place, CCTV monitoring for security and incident investigation.
To communicate with you, including sending important service related notices such as contract changes, payment reminders, access updates, and information about your stored goods when necessary.
To manage and improve our business operations, including service quality monitoring, training, record keeping, and resolving disputes or complaints.
Where permitted, to send you information about related services that may be of interest to you, subject to your marketing preferences and any right to opt out.
Data Retention
We keep personal data only for as long as necessary to meet the purposes for which it was collected or as required by law. This means that retention periods vary depending on the nature of the information and the context in which it was collected.
Account and contract records, including essential contact details and identification details linked to a contract, are generally retained for a period after the end of your contractual relationship with us. This is to meet legal, tax, and accounting obligations and to enable us to deal with any queries, disputes, or legal claims that may arise.
Payment and transaction records are kept in line with applicable financial and tax rules and then securely deleted or anonymised.
CCTV footage, where operated, is retained for a limited period sufficient for security monitoring and incident investigation, after which it is overwritten or deleted, unless specific footage needs to be retained for longer in connection with a particular investigation or claim.
Where we rely on consent for a specific purpose, we will retain related data only for as long as we have your consent and a continuing need to process the data for that purpose.
Data Processors and Third Parties
We may use carefully selected third party service providers to process personal data on our behalf. These processors act only on our instructions and are contractually required to implement appropriate technical and organisational measures to protect your data and to comply with data protection laws.
Categories of processors we may use include secure payment processing providers, cloud based data storage and backup providers, customer management system providers, and providers of security or access control systems used at our premises.
We may also share personal data with other third parties where required by law, such as regulatory authorities, law enforcement bodies, or courts, or where necessary for the establishment, exercise, or defence of legal claims.
We do not sell your personal data and we do not provide your data to third parties for their own independent marketing purposes.
International Transfers
Where any of our processors or systems involve transferring personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with data protection laws. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms to ensure that your data is protected to a standard essentially equivalent to that in the UK.
Your Data Protection Rights
You have a number of rights in relation to your personal data, subject to certain conditions and exemptions under data protection law.
Access. You have the right to request confirmation that we process your personal data and to request a copy of the personal data we hold about you.
Rectification. You have the right to request that inaccurate or incomplete personal data is corrected or updated.
Erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and we have no other legal basis to continue processing.
Restriction. You may request that we restrict the processing of your personal data in specific situations, such as while we are investigating the accuracy of data you believe to be incorrect.
Objection. You have the right to object to certain types of processing based on our legitimate interests, including profiling, and may object at any time to the use of your data for direct marketing.
Data portability. Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided in a structured, commonly used, and machine readable format and to request that it is transmitted to another controller where technically feasible.
Where processing is based on consent, you also have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
How to Exercise Your Rights or Raise Concerns
If you wish to exercise any of your rights or raise a concern about how we handle your personal data, you can contact us using the usual contact methods associated with Storage Belsize Park. We will respond to your request in accordance with applicable data protection laws and may need to verify your identity before we can act on your request to protect your privacy and security.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to contact us first so that we have an opportunity to address your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our processing activities, or applicable laws. Any updated version will apply to all customers and prospective customers from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
