Storage Notting Hill Privacy Policy
This Privacy Policy explains how Storage Notting Hill collects, uses, shares and protects personal data relating to customers and prospective customers in the Notting Hill area. It is intended to meet the requirements of the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Notting Hill customers and anyone who makes enquiries about our services in the Notting Hill area, whether in person, by post, over the phone, or online. Storage Notting Hill is the data controller in respect of the personal data described in this Privacy Policy, which means we determine the purposes and means of processing your personal data.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you, where relevant to the services you use or request:
Identification data, such as your full name, date of birth and proof of identity details shown on documents you provide for verification purposes. Contact data, such as your home address, billing address, and other postal addresses you choose to supply, together with your preferred contact channels. Account and contract data, including storage unit numbers, contract dates, payment history, service preferences, communication history and notes relating to your account. Financial and payment data, such as limited payment card or bank details processed via secure payment processors, payment authorisations and transaction records. Security and access data, such as CCTV images on our premises, access logs, entry codes and details of persons authorised to access your storage unit. Communication data, such as enquiries, complaints, feedback and any correspondence you send to us or we send to you.
How We Collect Your Personal Data
We collect personal data directly from you when you request a quote, enter into a storage agreement, contact us with an enquiry, visit our facilities or otherwise interact with us. We may also generate data about you, for example, records of your access to the site or your payment history. In some cases, we may receive data about you from third parties, such as payment processors, reference or verification services where required, and other individuals you authorise to act on your behalf.
Lawful Bases for Processing
We only process your personal data where we have a valid legal basis under data protection law. The main lawful bases we rely on are:
Performance of a contract. We process personal data where it is necessary to set up, manage and fulfil your storage agreement or any other contract you have with us. This includes processing identification data to create your account, managing access to storage units and handling payments. Compliance with legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, such as maintaining records for tax purposes, responding to lawful requests from authorities, or ensuring health and safety at our facilities. Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Our legitimate interests include managing and improving our services, protecting our premises and assets, preventing fraud and misuse, and handling customer service queries. Consent. In limited circumstances, we may rely on your explicit consent, for example for certain types of optional marketing. Where we rely on consent, you have the right to withdraw it at any time.
Purposes for Which We Use Personal Data
We may use your personal data for the following purposes:
To provide storage and related services, including creating and managing your customer account, allocating storage units, arranging access, and administering your contract. To handle payments and billing, including taking payments, issuing invoices and dealing with queries about charges. To maintain security and safety at our facilities, including monitoring CCTV, managing access control systems and investigating security incidents. To communicate with you about your account, bookings, changes to our terms, service updates, and responses to your enquiries or complaints. To manage our business operations, including record keeping, auditing, data analysis, service improvement and staff training. To comply with legal obligations, enforce our contractual rights, and protect our legal position in the event of disputes or claims. To send you information about similar services or offers that may be of interest, where lawful to do so. You can opt out of marketing communications at any time.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements. In general, we will retain customer account and contract records for a period after your agreement ends, to deal with any queries, disputes or legal claims. Financial transaction records will be retained for periods required by tax and accounting laws. CCTV footage and access logs are retained for shorter periods, unless a particular recording or log is required for the investigation of a specific incident, in which case it may be stored for longer. When personal data is no longer needed, we will securely delete or anonymise it.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as our data processors. These processors only process your personal data on our documented instructions and are contractually required to protect it.
Typical categories of processors include providers of data storage and hosting services that support our business systems, payment processing services that handle card or bank transactions, security service providers that support CCTV, access control and alarm systems, and professional advisers such as accountants or legal advisers who assist us in meeting our obligations. Where we use processors located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses or other legally recognised measures.
How We Protect Your Personal Data
We take appropriate technical and organisational measures to safeguard your personal data against unauthorised access, accidental loss, destruction or damage. These measures include limiting access to systems to authorised staff, using secure storage for physical records, applying reasonable security protections to our information systems, and ensuring that staff who handle personal data are subject to confidentiality obligations and receive guidance on data protection responsibilities. While we take reasonable steps to protect your data, no system can be guaranteed to be completely secure.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data and certain additional information about how it is used. Right to rectification. You have the right to ask us to correct inaccurate personal data about you and to complete incomplete data. Right to erasure. You may have the right to request that we delete your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the original purpose and we have no legal obligation to retain it. Right to restriction of processing. You may have the right to request that we restrict the use of your personal data in certain circumstances, such as while we verify its accuracy or our reasons for processing it. Right to data portability. For certain data you have provided to us, and where the processing is based on consent or contract and carried out by automated means, you may have the right to receive that data in a structured, commonly used and machine readable format and to request that we transfer it to another organisation where technically feasible. Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests, including profiling based on those interests. We will stop processing your data unless we have compelling legitimate grounds that override your interests or it is needed for legal claims. You also have an absolute right to object at any time to the use of your personal data for direct marketing.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, please contact Storage Notting Hill using your usual customer communication channels. We may need to verify your identity before responding to your request. We aim to respond to all valid requests within the statutory time limits and will explain if we need more time or are unable to comply with your request for legal or operational reasons. You also have the right to lodge a complaint with the UK supervisory authority for data protection if you are concerned about the way we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any updates will take effect from the date of publication. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data at Storage Notting Hill.
