Storage Totteridge Privacy Policy
This Privacy Policy explains how Storage Totteridge collects, uses, stores, and protects personal information relating to customers and prospective customers in the local area. It is intended to meet the requirements of the UK General Data Protection Regulation and the Data Protection Act 2018, and it applies to all Storage Totteridge customers, including individuals and business customers using storage or related services.
Scope of this Privacy Policy
This policy applies to all personal data processed by Storage Totteridge in connection with enquiries, reservations, contracts, and the use of storage units and associated services. It covers data collected in person at our premises, by phone, through online forms, and in any written correspondence. By engaging with Storage Totteridge, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
For the purposes of data protection law, Storage Totteridge is the data controller for the personal information it processes about customers and prospective customers. As data controller, Storage Totteridge determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection legislation.
Types of Personal Data We Collect
Storage Totteridge may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identity and contact information such as full name, postal address, billing address, contact address, and other contact details.
Verification and identification details such as date of birth and proof of identity or proof of address documents when required for security, verification, or legal reasons.
Contract and account information such as unit number, contract dates, storage purpose, services selected, and related correspondence.
Payment and billing information such as payment method details, billing history, and records of payments and refunds. Payment card details are handled via secure payment processors and are not stored by Storage Totteridge in full.
Usage and operational information such as access logs, dates and times of entry to the facility, and any records generated for security and operational management.
Communication records such as enquiries, complaints, feedback, and other communications you have with us.
Where necessary, CCTV images and security-related information relating to the use of our premises, to maintain the safety and security of customers, staff, and property.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us with an enquiry, request a quote, make a reservation, sign a contract, or use our storage services. We also collect information when you provide identification documents or communicate with us by phone, in person, or in writing. In some cases, we may obtain information from third parties, for example where a business customer provides contact details of authorised users of a storage unit, or where we verify identities and addresses using third-party systems.
Lawful Basis for Processing Your Data
Storage Totteridge processes your personal data only where we have a lawful basis for doing so. The main lawful bases we rely on are:
Performance of a contract: We process personal data to enter into and perform our storage agreements and related services, including managing reservations, payments, access, and ongoing customer service.
Compliance with a legal obligation: We process certain information to comply with legal and regulatory requirements, such as tax, accounting, fraud prevention, and law enforcement requests where applicable.
Legitimate interests: We process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights. These interests can include facility management, security and safety of customers and staff, prevention and detection of crime, improvement of services, and handling of enquiries or complaints.
Consent: In limited circumstances, we may rely on your consent, for example where you choose to receive certain optional communications. Where processing is based on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
Storage Totteridge uses your personal information to:
Handle enquiries, provide quotes, and respond to requests for information.
Set up and manage your customer account and storage contract.
Process payments, issue invoices, and manage billing queries.
Provide access to storage units and monitor access for security and safety purposes.
Manage our premises, including the use of CCTV and access systems, to protect people and property.
Communicate with you about your contract, including notices, renewals, changes to terms, and service updates.
Handle feedback, complaints, and disputes.
Maintain business records, carry out audits, and comply with legal and regulatory obligations.
Data Retention
Storage Totteridge keeps personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, and to meet any legal, regulatory, tax, or accounting requirements. Retention periods may vary depending on the category of data and the context in which it was provided.
Customer contract and billing records are typically retained for the duration of your contract and for a period afterwards to comply with legal obligations and to resolve any potential disputes. Access logs and security records, including CCTV footage, are retained for shorter periods unless required for the investigation of an incident, legal proceedings, or law enforcement requests, in which case they may be kept for longer. When personal data is no longer required, it is securely deleted or anonymised.
Data Processors and Third Parties
Storage Totteridge may share your personal data with carefully selected third parties who act as data processors on our behalf. These may include providers of payment processing services, IT and cloud storage services, customer management systems, security and access control systems, and professional advisers such as accountants or legal advisers where necessary.
These processors are only permitted to process your personal data in accordance with our instructions and for specified purposes, and they are required to implement appropriate technical and organisational measures to protect your information. We do not sell your personal data to third parties. Where required by law, we may also share information with regulatory bodies, law enforcement, or other public authorities.
International Data Transfers
We aim to keep your personal data within the United Kingdom or the European Economic Area wherever possible. If it becomes necessary to transfer personal data to a country outside these areas, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other recognised mechanisms, to ensure that your data is afforded a level of protection essentially equivalent to that provided under UK data protection law.
Security of Your Personal Data
Storage Totteridge takes the security of your personal information seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. These measures may include controlled access to systems and premises, encryption or pseudonymisation where appropriate, regular review of access permissions, staff training on data protection, and secure disposal of information when it is no longer needed.
Your Data Protection Rights
Under data protection law, you have several rights in relation to the personal data that Storage Totteridge holds about you. These rights may be subject to certain conditions and legal limitations, but generally include:
Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how and why it is processed.
Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
Right to erasure: In certain circumstances, you may request that we delete your personal data where there is no longer a lawful basis for us to retain or use it.
Right to restriction of processing: You may ask us to restrict the processing of your data in specific situations, for example while we are considering a request to correct it.
Right to data portability: Where the legal basis for processing is consent or contract and the processing is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or that it be transmitted to another controller where technically feasible.
Right to object: You have the right to object to processing based on our legitimate interests, including certain types of profiling, where your particular situation justifies it.
Right to withdraw consent: Where we rely on consent for processing, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights in relation to Storage Totteridge, you can make a request by contacting us using your usual communication channels with the company. We may need to verify your identity before responding to your request. We aim to respond to all valid requests within the time limits set by data protection law.
If you are not satisfied with how we handle your personal data or respond to your requests, you also have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom.
Changes to This Privacy Policy
Storage Totteridge may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any significant changes will be made available at our premises and, where appropriate, communicated to you directly. You are encouraged to review this Privacy Policy periodically to stay informed about how we handle your personal information.
