Storage Camden Privacy Policy
This Privacy Policy explains how Storage Camden collects, uses, shares and protects personal data relating to customers and prospective customers using our storage facilities and services in the Camden area. It is intended to provide clear information in accordance with the UK General Data Protection Regulation and applicable data protection laws.
By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all Storage Camden customers and prospective customers located in our service area, as well as individuals who communicate with us in relation to our services.
Data Controller
Storage Camden is the data controller in respect of the personal data we collect and process in connection with the provision of our storage services. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with data protection law.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details, such as your full name, postal address, billing address, and other contact information you choose to provide when you enquire about or use our services.
Account and contract information, such as customer reference numbers, storage unit numbers, details of your chosen storage plan, start and end dates of contracts, payment status, and communications relating to your contract.
Payment and transaction information, such as details relating to the method of payment you use, transaction dates and amounts, and information required for invoicing and accounting. We do not store full payment card numbers when processed by a secure payment provider.
Identity verification and security information, which may include proof of identity documents presented to us for verification, such as passport or driving licence details, and records of key fob or access code assignments where relevant.
Usage and access data, such as records of visits to our facilities, access control logs, CCTV footage in and around our premises where in use, and records of communications you have with us in person, by post, or electronically.
Marketing and communication preferences, including whether you wish to receive information about our services, offers or updates, and your preferences for how we contact you.
Any other information you choose to provide to us when communicating about your storage arrangements or related services.
How We Collect Your Data
We generally collect personal data directly from you when you make an enquiry, request a quote, enter into a storage agreement, make a payment, visit our facilities, or communicate with us by post, phone, or electronic means.
We may also generate personal data as part of providing our services, for example by creating invoices, logging access to our premises, or recording CCTV images for security and safety purposes.
In some circumstances we may receive personal data about you from third parties acting on your behalf, such as authorised representatives or joint account holders, or from service providers who support our operations, for example payment processors.
Lawful Basis for Processing
We will only process your personal data where we have a lawful basis under data protection law. Depending on the context, the lawful bases we rely on include:
Contract: We process personal data where it is necessary to enter into or perform a contract with you, including setting up and managing your storage unit, processing payments, and communicating with you about your agreement.
Legal obligation: We process personal data where it is necessary for compliance with our legal and regulatory obligations, such as tax, accounting, record keeping, and responding to lawful requests from public authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. These interests include operating and improving our storage facilities, protecting the safety and security of our premises, preventing and detecting fraud, managing customer relationships, and pursuing or defending legal claims.
Consent: In some limited cases, we may rely on your consent, for example for certain types of direct marketing communications where this is required by law. When we rely on consent, you are free to withdraw it at any time, and this will not affect the lawfulness of processing based on consent before it was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide storage services to you, including setting up and managing your account, allocating storage units, providing access to facilities, handling payments, and responding to your enquiries and requests.
To administer and support our business operations, such as maintaining internal records, managing invoices and accounts, conducting audits, and planning and improving our services.
To maintain the security and safety of our premises, customers, and staff, including controlling access to storage units, monitoring for unauthorised activity, and using CCTV where in place for security and incident investigation.
To communicate with you regarding your storage arrangements, including sending service messages, updates relating to your contract, and important information about changes to our terms, policies, or facilities.
To comply with applicable laws and regulations, respond to lawful requests and orders from public authorities, and cooperate with law enforcement where required.
To manage and resolve disputes, establish or exercise our legal rights, and defend legal claims.
To send you marketing communications about our services where permitted by law and in line with your communication preferences, and to analyse the effectiveness of these communications.
Data Retention
We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements.
In general, we keep customer account and contract data for a period after the end of your storage agreement, in order to respond to queries, manage disputes, and comply with statutory retention periods. Financial and accounting records may be retained for the period required under tax and company laws.
CCTV recordings and access logs, where used, are typically retained for a limited period necessary for security and incident investigation, unless a longer retention period is required in relation to a specific incident or legal claim.
When personal data is no longer required for the purposes for which it was collected, and we no longer have a legitimate need or legal obligation to retain it, we will take appropriate steps to delete or anonymise it securely.
Data Processors and Sharing of Personal Data
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers process personal data only in accordance with our instructions and are subject to contractual obligations to implement appropriate technical and organisational measures to protect your data.
Examples of such processors include providers of payment processing services, secure storage and data hosting, customer relationship management systems, accounting and billing services, and providers who assist us with security and maintenance of our facilities and IT systems.
We may also share personal data with professional advisers, such as lawyers and accountants, where necessary to obtain advice or protect our legal rights, and with public authorities and law enforcement agencies where we are legally required or permitted to do so.
Where we share data, we do so on a need to know basis, limiting the data shared to what is necessary for the relevant purpose.
International Transfers
Where our service providers or their systems are located outside the United Kingdom or the European Economic Area, your personal data may be transferred to and processed in countries that may not offer the same level of data protection as the laws in your home jurisdiction.
In such cases, we will ensure that appropriate safeguards are in place to protect your personal data, such as the use of standard contractual clauses or other measures recognised under applicable data protection law, and we will take steps to ensure that your data remains protected in line with this Privacy Policy.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: You have the right to request confirmation as to whether we process your personal data and, if so, to receive a copy of that data together with certain information about how it is used.
Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, for example while we are assessing a request for rectification or where you object to processing based on our legitimate interests.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it be transmitted to another controller where technically feasible.
Right to object: You have the right to object to processing of your personal data where it is based on our legitimate interests, including profiling based on those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims. You also have an absolute right to object to direct marketing at any time.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, the supervisory authority is the Information Commissioners Office.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or damage.
Measures may include controlled access to our premises, secure storage systems, encryption and password protection where appropriate, and restricting access to personal data to personnel and service providers who need it for legitimate business purposes and who are subject to confidentiality obligations.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
