Privacy Policy - Camden Storage

This Privacy Policy explains how Camden Storage collects, uses, stores, shares, and protects personal data relating to all Camden Storage customers in the area. It applies to every customer, prospective customer, visitor, and other individual whose personal data Camden Storage processes in connection with our storage services, account management, billing, enquiries, security, and day-to-day business operations.

1. Who We Are

Camden Storage acts as a data controller for the personal data we process in relation to our services. This means we decide why and how your personal data is used. We are committed to handling personal data in accordance with the UK GDPR and the Data Protection Act 2018, as well as other applicable privacy laws.

We aim to process personal data fairly, lawfully, and transparently. This policy is designed to explain what we do with your information and the rights you have in relation to it.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, date of birth, and identification details where required for verification.
Contact data: address, email address, phone number, and emergency contact details where provided.
Account data: account number, booking information, storage unit details, payment status, and service preferences.
Financial data: payment card information, billing records, transaction history, and invoice details.
Technical data: IP address, device information, browser type, and usage information if you interact with our digital systems.
Security and access data: CCTV images, entry logs, access records, and incident reports where relevant.
Correspondence data: records of communications, complaints, feedback, and customer support interactions.

We may also collect limited special category data only where necessary and lawful, for example if you voluntarily provide information relating to accessibility, health, or vulnerability so that we can make appropriate service adjustments. We only process such data with appropriate safeguards and where a lawful basis exists.

3. How We Use Your Data

Camden Storage may use your personal data for the following purposes:

to register you as a customer and manage your account;
to provide storage services and allocate storage units;
to verify your identity and prevent fraud or misuse;
to take payment, issue invoices, and manage debt recovery where necessary;
to communicate service updates, notices, or changes to terms;
to maintain security, monitor access, and protect our premises, staff, customers, and property;
to respond to enquiries, complaints, and support requests;
to meet legal, regulatory, tax, and accounting obligations;
to improve our services, processes, and customer experience;
to establish, exercise, or defend legal claims.

We only use personal data where it is necessary and proportionate for a specific purpose.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Camden Storage relies on the following lawful bases, depending on the activity involved:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as setting up an account, providing storage services, processing payments, or managing access to your storage unit.

Legal Obligation

We may process personal data where we are required to do so by law, including obligations relating to taxation, accounting, anti-fraud measures, health and safety, and regulatory compliance.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. Examples include maintaining security, preventing crime, managing customer relationships, improving services, and handling operational administration. When we rely on legitimate interests, we assess whether the processing is necessary and balanced against your privacy rights.

Consent

In limited cases, we may rely on your consent, for example where required for certain marketing activities or specific optional processing. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Vital Interests and Legal Claims

In rare circumstances, we may process personal data to protect someone’s vital interests or to establish, exercise, or defend legal claims.

5. Data Sharing and Processors

We may share your personal data with trusted third parties where necessary for the purposes described in this policy. These third parties may act as processors or independent controllers.

Processors are organisations that process personal data on our behalf and under our instructions. Camden Storage uses appropriate contracts and safeguards with all processors to ensure they handle personal data securely and lawfully.

Examples of processors and service providers may include:

payment processing providers;
IT hosting, software, and cloud service providers;
customer relationship management systems;
security and CCTV monitoring service providers;
maintenance and facility management contractors;
professional advisers such as accountants, auditors, or lawyers;
debt recovery or collections services where lawful and appropriate.

We may also disclose personal data to law enforcement, regulatory bodies, courts, insurers, or other third parties where required or permitted by law. We do not sell your personal data.

6. Data Retention

Camden Storage retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, contractual, and reporting requirements.

Retention periods may vary depending on the type of data and the reason for processing. For example:

customer account and contract records may be retained for the duration of the relationship and for a period afterward to manage disputes, legal claims, and compliance;
financial and invoicing records may be retained for the period required by tax and accounting law;
security logs and access records may be retained for a shorter period unless they are required for investigations or legal matters;
correspondence and complaint records may be retained for as long as needed to resolve the matter and demonstrate compliance.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include restricted access controls, encryption, secure storage, staff training, confidentiality obligations, and regular system reviews.

No system can be guaranteed to be completely secure, but Camden Storage works to reduce risks and to respond promptly to any suspected data breach.

8. International Transfers

Where personal data is transferred outside the UK, Camden Storage will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We will take reasonable steps to ensure your data receives an equivalent level of protection.

9. Your Rights

Depending on the circumstances and the legal basis for processing, you may have the following rights under data protection law:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete information.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction: to ask us to limit how we use your data in certain circumstances.
Right to data portability: to receive certain data in a structured, commonly used format and have it transferred where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.
Right to complain: to raise concerns with the relevant data protection authority if you believe your rights have been infringed.

Some rights may be limited by legal obligations or the need to retain data for legitimate business or compliance purposes.

10. Automated Decision-Making

Camden Storage does not ordinarily use fully automated decision-making that produces legal or similarly significant effects. If this changes, we will provide appropriate information about the logic involved, the significance and consequences of such processing, and your available rights.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in exceptional circumstances and lawfully provided by a responsible adult. Where we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practices, or service arrangements. The most recent version will apply to the processing of your personal data. We encourage customers to review this policy periodically to stay informed.

13. Summary of Key Principles

Camden Storage is committed to processing personal data lawfully, fairly, and transparently. We collect only the data we need, use it for clear and legitimate purposes, retain it for no longer than necessary, and protect it with suitable safeguards. We also ensure that our processors are bound by appropriate contracts and that customers can exercise their privacy rights effectively.

This policy applies to all Camden Storage customers in the area.