Storage Hainault Privacy Policy
This Privacy Policy explains how Storage Hainault collects, uses, stores and protects your personal data when you use our storage facilities and related services. It applies to all Storage Hainault customers and prospective customers in the Hainault area, including those who make enquiries, visit our premises or use our services in any other way.
We are committed to processing your personal data fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation and applicable data protection legislation.
Data Controller
Storage Hainault is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identity data, such as your full name, title, date of birth and proof of identity details shown on official documents.
Contact data, such as your residential address, postal address, and any other contact details you choose to provide.
Contract data, such as storage unit number, rental dates, services selected, contract history, payment plans and related correspondence.
Financial and transaction data, such as details of payments made to us, payment method used and invoices or receipts issued. We do not store full payment card details; where card payments are used, they are processed securely by our payment service providers.
Security and access data, such as CCTV footage at our premises, access control records, vehicle registration numbers where recorded for site security, and records of entry to and exit from the site.
Communication data, such as enquiries, complaints, feedback, and any other information you choose to share with us by letter or in person.
Technical and usage data, where relevant, such as information about how you use any online services we may make available in connection with your contract, including basic diagnostic and usage information.
How We Collect Your Data
We collect your personal data in a number of ways, including:
Directly from you when you complete a storage agreement, visit our premises, make an enquiry, or communicate with us.
From your use of our premises, including CCTV monitoring and access control systems operated for safety and security.
From third party service providers that help us verify identity or process payments, where this is required to enter into or perform a contract with you or to meet our legal obligations.
Lawful Bases for Processing
We only process your personal data where we have a valid legal basis to do so under data protection law. Depending on the context, we may rely on one or more of the following lawful bases:
Contract. We process your data to enter into and perform our contract with you, including setting up your storage unit, managing your account, taking payments, communicating with you about your booking, and providing customer service.
Legal obligation. We process certain data to comply with our legal obligations, for example in relation to tax, accounting, anti money laundering, fraud prevention and health and safety legislation, and to respond to lawful requests from public authorities.
Legitimate interests. We process some personal data where it is necessary for our legitimate business interests or those of a third party, and where these interests are not overridden by your rights and freedoms. This includes maintaining site security, preventing and detecting crime, managing customer relationships and improving our services.
Consent. In limited circumstances, we may rely on your consent, for example where you choose to receive certain optional communications. Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage and related services, including setting up and managing your account, allocating and maintaining your unit, taking and processing payments and communicating with you about your contract.
To respond to enquiries, provide quotes, and handle questions or complaints from prospective or existing customers.
To maintain the safety and security of our premises, customers, staff and property, including through the use of CCTV, access control systems and other site security measures.
To manage our business operations, including accounting, auditing, billing and internal reporting.
To comply with legal and regulatory requirements, including cooperation with law enforcement, regulators and other authorities where we are legally required to do so.
To protect our legal rights, including debt collection, enforcement of contractual terms and the establishment, exercise or defence of legal claims.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where this is necessary and lawful. These may include:
Service providers who act as data processors and provide services such as payment processing, secure data hosting, IT support, document storage, CCTV system maintenance and professional advisory services. These service providers only process your personal data on our instructions and are subject to strict contractual obligations to safeguard your data.
Professional advisers, including lawyers, accountants and insurers, where necessary for the management of our business, to obtain professional advice or to manage or defend legal claims.
Public authorities, law enforcement bodies and regulators, where we are required to disclose personal data by law or where disclosure is necessary to protect the rights, property or safety of Storage Hainault, our customers or others.
Debt collection agencies or courts where this is necessary to recover sums owed to us or to enforce our contractual rights.
We do not sell your personal data to third parties.
International Transfers
Where we use processors or service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of legally approved standard contractual clauses or reliance on an adequacy decision by the relevant authorities. Further details of these safeguards are available on request.
Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements.
In general, we retain contract and billing records for a minimum period required by tax and accounting laws after your contract ends. CCTV footage and access control data are kept for a limited period that is appropriate for security and incident investigation purposes, unless a longer retention period is required in connection with a specific investigation or legal claim.
When personal data is no longer required for the purposes for which it was collected, we will delete it or anonymise it so that it can no longer identify you.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Hainault customers in the Hainault area, subject to certain legal exceptions and limitations. Your rights include:
Right of access. You have the right to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification. You have the right to ask us to correct inaccurate or incomplete personal data. We encourage you to notify us promptly of any changes to your details.
Right to erasure. You may have the right to request that we delete your personal data where there is no longer a lawful basis for us to keep it, for example where the data is no longer necessary for the purposes for which it was collected or you withdraw consent where consent was the only basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object. You have the right to object to processing of your personal data that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds to continue or the processing is required in connection with legal claims.
Right to data portability. Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format and to request that it is transmitted to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process your personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of your rights, please contact us in writing or in person at our premises. We may need to verify your identity before responding to your request. We aim to respond within the timescales required by law.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include physical security at our premises, secure systems for storing and accessing data, access controls, staff training and regular review of our security arrangements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection best practice. Any updates will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
Contact and Complaints
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details available at our premises or through our usual communication channels.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are unhappy with how we have handled your personal data. We would, however, appreciate the chance to address your concerns first and invite you to contact us in the first instance.
