Storage Neasden Privacy Policy
This Privacy Policy explains how Storage Neasden collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Neasden service area. It is intended to comply with the General Data Protection Regulation and applicable UK data protection laws. By using our services, making an enquiry, or entering into a contract with us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Neasden customers and individuals who make enquiries, visit our premises, or interact with us within our service area. It covers personal data processed in connection with storage unit rentals, related services, and our day-to-day business operations.
Data Controller
Storage Neasden is the data controller in respect of the personal data that we collect and process about you. As data controller, we determine the purposes and means of the processing of your personal data and are responsible for ensuring that such processing is carried out in accordance with data protection law.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us. This may include:
Identification data such as full name, date of birth, and a form of identification where required for security or contractual purposes.
Contact details such as home address, billing address, and information necessary for communication about your booking or account.
Account and contract information such as storage unit number, contract start and end dates, payment terms, and service preferences.
Payment information such as details required to process payments and refunds. Payment details may be handled by third-party payment processors on our behalf.
Communication data such as records of communications with you, including enquiries, complaints, and service requests made in person or by other channels.
Security and access data such as access logs, CCTV footage from our premises, and records relating to entry to and use of our storage units, to the extent permitted by law.
Technical data such as basic information generated when you use our online tools or digital services, such as date and time of access and general device information.
How We Collect Your Data
We may collect your personal data in several ways:
Directly from you when you make an enquiry, book a storage unit, sign a contract, make a payment, or contact us with a question or complaint.
When you visit our premises, including by means of CCTV recordings and access control systems used to secure our site.
When you interact with our digital services, such as completing online forms or engaging with our online tools, where applicable.
From third parties, for example from payment service providers, credit reference agencies where relevant to our services, or from individuals acting on your behalf with your authority.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis to do so. Depending on the context, the lawful basis will be one or more of the following:
Performance of a contract: We process personal data that is necessary to enter into and perform our contract with you, such as creating your storage agreement, managing your account, taking payments, and providing storage services.
Compliance with a legal obligation: Certain processing is required to comply with legal and regulatory obligations, such as record-keeping, tax and accounting obligations, health and safety requirements, and responding to lawful requests from authorities.
Legitimate interests: We may process your personal data where it is necessary for our legitimate business interests and where these interests are not overridden by your rights and freedoms. This includes ensuring site security, preventing fraud, managing and improving our services, handling customer queries, and maintaining business records.
Consent: In limited cases, we may rely on your consent, for example for specific optional communications or marketing activities. Where we rely on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide and manage storage services, including processing bookings, preparing contracts, managing access to storage units, and handling renewals, upgrades, or terminations.
To take and process payments, manage invoices, handle refunds where applicable, and maintain accurate financial records.
To communicate with you about your booking, payments, access, changes to our terms and policies, and other important service-related information.
To ensure security and protect property on our premises, including through the use of CCTV, access control logs, and other site security measures.
To respond to enquiries, complaints, and feedback, and to maintain and improve the quality of our services.
To comply with legal and regulatory obligations, including responding to lawful requests from public authorities and enforcing our legal rights in connection with disputes or claims.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting requirements. The specific retention period will vary depending on the type of data and the context of processing.
Customer account and contract data are typically retained for a defined period after the end of your contract to deal with any queries, disputes, or legal claims. Financial and transaction records are kept for the period required by applicable tax and accounting laws. Security records, including CCTV and access logs, are generally kept for a shorter period unless required for the investigation of an incident or legal proceedings.
When personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymise it in a way that irreversibly prevents identification.
Data Sharing and Processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged to provide services that support our operations, and they process your data only in accordance with our instructions and applicable law.
Categories of processors may include payment processing providers, secure data storage and hosting providers, information technology support services, and professional advisers such as accountants or legal advisers where necessary for our business and compliance obligations.
Where required, we may also share personal data with public authorities, law enforcement agencies, or regulators when we are legally obliged to do so or where it is necessary to protect our legitimate interests or the safety and security of our premises and customers.
We do not sell your personal data to third parties.
International Transfers
If it becomes necessary to transfer your personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law. This may include using standard contractual clauses or other lawful transfer mechanisms. Where such transfers occur, you can request further information about the safeguards used.
Your Data Protection Rights
As a customer or individual within the Storage Neasden service area, you have a number of rights in relation to your personal data under data protection law. Subject to certain conditions and exemptions, these include:
The right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you, together with information about how we use it.
The right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure: You can request that we delete your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the original purpose and we are not required to retain it by law.
The right to restriction of processing: You can request that we temporarily suspend the processing of your personal data in certain circumstances, for example while we verify its accuracy or our grounds for processing it.
The right to data portability: In certain situations, you can request that we provide your personal data in a structured, commonly used, and machine-readable format and that it be transmitted to another organisation where technically feasible.
The right to object: You can object to certain types of processing based on our legitimate interests, particularly where the processing relates to direct marketing or where your rights and interests override our grounds for processing.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, physical security at our premises, secure storage systems, and staff training on data protection obligations.
While we strive to protect your personal data, no system can be completely secure. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will take steps to mitigate the impact and will notify you and any relevant authorities where required by law.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any changes will take effect when the updated policy is published or otherwise made available to you. You are encouraged to review this Privacy Policy periodically to stay informed about how Storage Neasden protects your personal data.
