Storage Hackney Wick Privacy Policy
This Privacy Policy explains how Storage Hackney Wick collects, uses, shares and protects personal data relating to customers and prospective customers. It applies to all Storage Hackney Wick customers and service users in the Hackney Wick area, including individuals, sole traders and business clients who use, or enquire about, our storage services.
Who this Privacy Policy applies to
This Privacy Policy applies to all customers, potential customers, authorised account holders, payers, emergency contacts and any individuals whose personal data we process in connection with providing storage and related services in the Hackney Wick area.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us:
Identification and contact details, such as name, postal address, billing address, date of birth, and other identifiers required to verify your identity and manage your account.
Account and contract information, such as storage unit number, rental start and end dates, payment status, transaction records and communications about your contract or enquiries.
Payment information, such as payment method details, billing history and information necessary to process payments, refunds or security deposits. Where card payments are used, card details are handled and stored by our payment processors in line with applicable security standards.
Communications data, such as emails, online forms, letters, and records of calls or in-person conversations relating to your use of our services.
Security and access data, such as CCTV footage at our premises, entry and exit time logs, access codes or key information, and incident records to help maintain the safety and security of the site, customers and staff.
Marketing preferences, such as whether you have opted in or out of receiving marketing communications about our services, offers or updates.
How we collect personal data
We collect personal data directly from you when you contact us, request a quote, make a booking, sign a storage agreement, make a payment or communicate with us in any way.
We may also receive limited personal data from third parties where this is necessary for our services, for example from payment processors confirming that a payment has been authorised or declined, or from law enforcement or regulatory bodies where we are required to cooperate with official requests.
Lawful bases for processing
We only process personal data when we have a lawful basis to do so under the UK General Data Protection Regulation and related data protection laws. The main lawful bases we rely on are:
Performance of a contract: where processing is necessary to enter into or perform a storage agreement with you, including managing your booking, payments, access, communications and any related services.
Legal obligation: where we need to retain or disclose certain information to comply with legal requirements, accounting rules, tax laws, health and safety obligations or responses to lawful requests from public authorities.
Legitimate interests: where processing is necessary for our legitimate business interests, and those interests are not overridden by your rights and interests. This includes securing our premises, preventing fraud and misuse, improving our services, managing business records, and handling routine customer service interactions.
Consent: where we rely on your clear consent, for example for certain types of marketing communications. You can withdraw consent at any time, which will not affect lawful processing carried out before consent was withdrawn.
How we use personal data
We use personal data to:
Provide storage and related services, including booking units, managing your contract, facilitating access, and responding to queries or issues.
Administer billing and payments, process deposits, manage arrears, and handle refunds or changes to your account.
Maintain safety and security at our premises through CCTV monitoring, access systems, incident management and enforcement of site rules.
Communicate with you about your storage unit, contract updates, important service information, and any changes to this Privacy Policy or our terms.
Comply with legal and regulatory obligations, including record keeping, health and safety, and responding to lawful requests from authorities.
Improve and develop our services, for example by reviewing how our facilities are used and how customers interact with us.
Send marketing information about our services where permitted by law and in line with your preferences.
Data retention
We keep personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law.
Customer and contract records are normally retained for a period following the end of your storage agreement in order to deal with any queries, disputes or claims, and to meet legal and accounting requirements.
Financial and transaction records are retained for the period required by applicable tax and financial regulations.
CCTV recordings are kept for a limited period, generally only long enough to investigate incidents, ensure site security or comply with legal obligations. They are then securely deleted or overwritten unless longer retention is required in connection with a specific incident or legal claim.
Where we no longer need personal data and no longer have a legal requirement to keep it, we will securely delete or anonymise it.
Data processors and sharing of personal data
We may share personal data with trusted third parties who act as data processors on our behalf. These processors only act on our instructions and are required to protect personal data with appropriate technical and organisational measures.
Categories of processors we may use include:
Payment service providers that process card payments and other transactions.
IT and cloud service providers that host or support our systems and data storage solutions.
Security and access control service providers that assist with CCTV, alarm systems and access management.
Professional advisers, such as accountants or legal advisers, where necessary for the management of our business and to protect our legal rights.
We may also share personal data where we are required to do so by law or by a lawful request from a public authority, court or law enforcement body, or in order to establish, exercise or defend legal claims.
We do not sell personal data to third parties.
International data transfers
Where any of our processors or service providers transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms, so that your data remains protected in line with UK data protection law.
How we protect personal data
We use a combination of organisational and technical measures to keep personal data secure, including controlled access to systems and premises, password protections, encryption where appropriate, and staff awareness of confidentiality obligations.
While we take reasonable steps to protect personal data, no system is completely secure. We monitor our security arrangements and aim to respond promptly to any suspected data incidents in line with our legal obligations.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access: you can request confirmation about whether we process your personal data and ask for a copy of that data along with information about how it is used.
Right to rectification: you can ask us to correct or update inaccurate or incomplete personal data.
Right to erasure: in some circumstances, you can request that we delete your personal data, for example where the data is no longer needed for the original purpose or where you withdraw consent and there is no other legal basis for processing.
Right to restriction: you can ask us to restrict the processing of your data in certain situations, for example while we verify its accuracy or assess an objection you have raised.
Right to object: you can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests and rights or the processing is required for legal claims.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transmitted to another controller where technically feasible.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time. This will not affect processing carried out before consent was withdrawn.
You also have the right to raise concerns with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns directly.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. When we make significant changes, we will take reasonable steps to inform customers. The latest version will always apply to how we process personal data for Storage Hackney Wick customers in the area.
