Storage Dollis Hill Privacy Policy
This Privacy Policy explains how Storage Dollis Hill collects, uses, stores, and protects personal data relating to our self-storage services. It applies to all Storage Dollis Hill customers and prospective customers in our service area, including individuals, sole traders, and representatives of businesses that use or enquire about our storage facilities.
Storage Dollis Hill acts as the data controller for the personal data described in this Privacy Policy. By using our services, visiting our premises, or otherwise interacting with us, you acknowledge that you have read and understood this Policy.
Personal Data We Collect
We collect and process personal data that is necessary for the provision and management of our storage services and for the safe and lawful operation of our facility. This may include the following categories of information:
Identification and contact details, such as name, postal address, billing address, and other contact details you voluntarily provide. Account and contract information, including storage unit details, contract dates, pricing, payment status, access records linked to your unit, and correspondence related to your agreement. Payment and billing data, such as limited payment details required to process your transactions and records of invoices and payments. Facility security information, including CCTV images recorded on and around our premises, access control logs, vehicle details recorded when entering or exiting, and incident reports. Communication records, including enquiries about our services, complaints, feedback, call notes, and any other messages you send to us by any communication method. Business-to-business information, such as job title, business name, and work contact details if you act on behalf of a company or organisation.
We endeavour to collect personal data directly from you. In some circumstances we may receive data from third parties, for example if you are introduced via a broker or business partner, or where this is necessary for fraud prevention or debt collection.
Lawful Basis for Processing
We process personal data only where permitted by the UK General Data Protection Regulation and other applicable data protection laws. Our main lawful bases are:
Contract. We process your data where it is necessary to enter into, perform, or manage a contract for storage services, including taking steps at your request prior to entering into a contract. This covers processing for reserving and providing a unit, taking payment, administering your account, managing renewals, and responding to service queries.
Legal obligation. We process data where required to comply with legal and regulatory obligations, such as financial reporting, tax requirements, safety regulations, law enforcement requests, and complying with statutory retention rules.
Legitimate interests. We process data where it is necessary for our legitimate interests and these are not overridden by your rights and freedoms. This includes securing our premises and property using CCTV and access control, preventing fraud and misuse of our facility, managing debt recovery, maintaining and improving our services, and handling general business operations.
Consent. In limited situations we may rely on your consent, for example for certain optional marketing communications where consent is required. You can withdraw consent at any time, without affecting the lawfulness of processing that took place before withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage services, including setting up and administering your account, allocating units, managing payments, and handling renewals or terminations. To communicate with you regarding bookings, account matters, changes to terms, service notices, and queries you raise with us. To operate a safe and secure facility, including controlling and recording access, monitoring our premises using CCTV where installed, investigating incidents, and preventing crime or misconduct. To comply with laws, regulations, and guidance issued by authorities, including record keeping, responding to lawful requests, and cooperating with investigations where required. To manage our business operations, including internal reporting, service development, staff training, handling complaints, and considering or conducting transfers of business assets.
Data Sharing and Processors
We may share personal data with carefully selected third parties where this is necessary and lawful. These third parties act either as independent controllers or as processors that handle data on our behalf. Where we appoint processors, we ensure that appropriate contractual and security safeguards are in place.
Typical categories of recipients include payment and billing service providers that support payment processing and financial administration. Professional advisers such as accountants, auditors, and legal advisers who assist us in complying with our obligations and managing our business. Security and maintenance providers that support the operation and security of our facility and systems, including CCTV maintenance and access control systems where used. Information technology and data hosting providers that enable us to operate our reservation, account management, and communication systems. Debt collection and tracing agencies, where this is necessary to recover unpaid sums lawfully owed to us. Law enforcement bodies, regulators, courts, and other authorities, where we are required or permitted by law to share data.
We do not sell your personal data. If we were to consider any form of restructuring or transfer of our business, we may need to disclose relevant data to potential buyers or their advisers under appropriate confidentiality obligations, and this would be done in accordance with data protection laws.
International Data Transfers
Where any of our service providers or systems involve the transfer of personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are used, such as adequacy regulations or standard contractual clauses, and that your data remains protected in line with applicable law.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements.
In general, customer account and contract records, including billing information, will be retained for a period that allows us to address any queries or disputes after the end of your storage agreement and to comply with legal retention obligations. CCTV recordings and access logs are typically kept for a shorter period, unless an incident requires us to keep them for longer for investigation, legal proceedings, or law enforcement purposes.
When personal data is no longer required for the purposes for which it was collected, and there is no lawful requirement to retain it, we will delete it or anonymise it so that you can no longer be identified.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply in many situations, although they are not absolute and may be subject to conditions and exemptions.
Right of access. You can request confirmation of whether we process your personal data and receive a copy of that data, together with related information. Right to rectification. You can ask us to correct inaccurate data or complete data that is incomplete.
Right to erasure. In certain circumstances you can request that we delete your personal data. This may not apply where we need to retain data to comply with a legal obligation or to bring or defend legal claims.
Right to restriction. You can ask us to restrict the processing of your data in certain cases, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object. You can object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds that override your interests or we need to continue the processing for legal claims. You can always object to direct marketing, and we will stop sending it.
Right to data portability. In specific circumstances, you may request that we provide certain personal data in a structured, commonly used, machine-readable format or transfer it to another controller where technically feasible.
Where we rely on your consent, you have the right to withdraw that consent at any time.
Exercising Your Rights and Complaints
If you wish to exercise any of your rights or raise a concern about how we handle your personal data, you can contact us using the contact details provided on our website or at our premises. We may need to verify your identity before responding to certain requests, and we will respond within the time limits set by data protection law.
You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you consider that your rights have been infringed. In the United Kingdom, this is the Information Commissioners Office.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. The latest version will always be available at our premises or on our website. We encourage you to review this Policy periodically to stay informed about how we protect your information.
