Storage Seven Sisters Privacy Policy
This Privacy Policy explains how Storage Seven Sisters collects, uses, stores and protects personal data relating to customers and prospective customers within the Storage Seven Sisters service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our services, facilities or website, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Seven Sisters customers, former customers and prospective customers in our operating area, as well as individuals who contact us with enquiries or visit our premises. It covers personal data collected through our website, over the phone, in person at our facility, and through any other communication channels we use.
Data Controller and Responsibility
Storage Seven Sisters is the data controller for the personal data described in this Privacy Policy. As data controller, we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and how you interact with our services. The main categories of data we may collect are:
Identification and contact details, such as your name, postal address, billing address, and general location details within our service area.
Account and contract information, such as customer account numbers, storage unit numbers, contract start and end dates, rental terms and payment status.
Payment information, such as records of payments made and payment method details, limited to what is necessary to process and verify payments. Where payments are handled by a payment processor, we may receive confirmation of payment and transaction references.
Communication records, such as enquiries, complaints, messages, and any other correspondence with us by phone, in writing, online, or in person.
Security and access information, such as access codes, vehicle registration details, visit logs, and recordings from security cameras in and around our premises where these are in operation to maintain safety and protect property.
Website and technical data, such as basic technical information when you visit our website, which may include your IP address, device type and general usage information required to operate and secure our online services.
How We Collect Personal Data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, make a payment, visit our facility, or otherwise interact with us. We may also receive data from third parties such as payment service providers and, where applicable, business partners that you authorise to share information with us.
Lawful Bases for Processing
Storage Seven Sisters processes your personal data only when we have a lawful basis to do so. The primary lawful bases we rely upon are:
Performance of a contract: We process personal data to set up, manage and fulfil storage contracts with you, including taking payments and providing access to storage units.
Compliance with legal obligations: We may process and retain certain data to meet legal, regulatory, tax and accounting obligations, and to respond to lawful requests from authorities.
Legitimate interests: We may process data for our legitimate business interests, such as ensuring site security, preventing fraud, maintaining accurate records, improving our services and managing customer relationships. When we rely on this basis, we assess that our interests are not overridden by your rights and freedoms.
Consent: In limited cases, we may rely on your consent, for example for specific forms of optional communication. Where processing is based on consent, you have the right to withdraw that consent at any time.
Purposes of Data Use
We use your personal data for the following purposes:
To provide and manage self-storage services, including creating and administering your customer account, issuing invoices, managing access to units and responding to your enquiries.
To process payments, handle billing queries, manage arrears and maintain accurate financial records.
To communicate with you about your contract, renewals, service updates, changes to our terms, and important information relating to your use of our facilities.
To ensure the safety and security of our premises, customers and stored property, including monitoring access, maintaining access logs and operating security systems where in place.
To manage and improve our business operations, including training staff, monitoring service quality and conducting internal reporting.
To comply with legal and regulatory obligations and to assist with the prevention and detection of crime, fraud or misuse of our facilities.
Data Processors and Third Parties
Storage Seven Sisters may engage carefully selected third-party service providers to act as data processors on our behalf. These processors may provide services such as payment processing, customer account management systems, secure data storage, and security or maintenance services.
Where we use processors, we ensure that appropriate data protection and security obligations are in place through written agreements. Processors may only process your personal data in accordance with our documented instructions and are not permitted to use it for their own purposes.
We may also share personal data with other third parties where required by law, where necessary for the establishment, exercise or defence of legal claims, or where you have explicitly requested or authorised such sharing.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The retention period will vary depending on the type of data and the nature of our relationship with you.
Contract and billing records are typically retained for a period required by applicable tax and accounting laws. Security and access logs are kept for a limited period that is appropriate for safety, security and incident investigation purposes. When personal data is no longer needed, we will securely delete or anonymise it.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data. These may include the use of recognised data transfer mechanisms, together with contractual commitments that ensure an adequate level of protection consistent with data protection law.
Data Security
We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include restricting access to personal data to authorised personnel, using secure systems for storing and processing data, and implementing security safeguards at our premises.
Your Data Protection Rights
Under data protection law, you have a range of rights in relation to your personal data. Subject to certain conditions and exemptions, you may be entitled to:
Access your personal data and receive information about how it is processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no compelling reason for its continued processing.
Object to the processing of your personal data where we rely on legitimate interests, particularly where the processing relates to direct communications.
Request restriction of the processing of your personal data in certain circumstances, for example while a dispute about accuracy or lawfulness is being resolved.
Request the transfer of your personal data to you or to another organisation in a commonly used electronic format, where processing is based on consent or contract and carried out by automated means.
Where processing is based on your consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights
If you wish to exercise any of your data protection rights, or if you have any questions about how Storage Seven Sisters uses your personal data, you can contact us using the contact methods available through our usual customer communication channels or at our premises. We may need to verify your identity before responding to your request. We aim to respond to all valid requests within the timescales required by data protection law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can address the issue. You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection matters in the jurisdiction where you live or work, or where you consider that a breach of data protection law has occurred.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in legal requirements. Any updates will be made available through our normal communication channels. We recommend that you review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
