Storage Enfield Town Privacy Policy
This Privacy Policy explains how Storage Enfield Town collects, uses, stores and protects personal data relating to our customers and prospective customers in the Enfield Town area. It is intended to meet the requirements of the UK General Data Protection Regulation and related data protection laws. By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
This Privacy Policy applies to all Storage Enfield Town customers, previous customers, and enquiries in the Enfield Town area and surrounding neighbourhoods. For the purposes of data protection laws, Storage Enfield Town is the data controller for the personal data described in this policy. This means we decide how and why your personal data is processed.
Types of Personal Data We Collect
We only collect personal data that is relevant for the provision and management of our storage services, customer relationships and legal obligations. The types of data we may collect include the following:
Identification details such as full name, title, date of birth and proof of identity details required to set up a storage agreement.
Contact details such as home or business address, billing address and other correspondence addresses.
Communication details such as the information you provide when you contact us, request a quote, make a booking, or provide feedback about our services.
Contract and account information such as storage unit number, contract start and end dates, payment history, correspondence relating to your account, and records of any queries or complaints.
Payment information such as payment method details and transaction history. We do not store full payment card information if payments are processed through secure third party payment processors.
Security and access information such as vehicle registration numbers for on site access control systems and CCTV footage captured on or around our premises where necessary for safety, security and crime prevention.
Technical information related to our online services such as basic log data and information supplied through online forms, where applicable. This may include the date and time of your visit and details of the pages you access.
Lawful Basis for Processing Your Data
We only process your personal data where we have a lawful basis under data protection law. Depending on the specific activity, we rely on one or more of the following legal bases:
Contract. We process personal data that is necessary to enter into and perform our storage agreements with you. This includes setting up your account, managing your storage unit, handling payments and communicating with you about your contract.
Legal obligation. We process personal data where this is required to comply with legal duties, such as record keeping, tax reporting, fraud prevention, health and safety and responding to requests from public authorities where we are legally obliged to do so.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. Examples include maintaining site security, operating CCTV for crime prevention, managing customer relationships, improving our services and handling general business operations.
Consent. In some limited situations we may rely on your consent, for example where we send certain types of optional marketing communications that are not based on our existing customer relationship. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide storage services and operate our facilities, including the administration of storage agreements, allocation of units and customer support.
To manage your customer account, including billing, payment processing, debt recovery where applicable and maintaining accurate records.
To communicate with you about your storage unit, changes to our services, important updates and other service messages that are necessary for the performance of your contract.
To ensure the security and safety of our premises, customers, staff and property through measures such as site access control and CCTV monitoring.
To handle enquiries, complaints and disputes and to provide customer service and support.
To comply with our legal obligations and cooperate with law enforcement or regulatory bodies where we are required to do so by law.
To manage and improve our business operations, including training, quality control, planning and service development.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our instructions and solely for the purposes described in this Privacy Policy. We require all processors to implement appropriate technical and organisational measures to protect your data.
Processors and third parties may include payment processing providers, accounting and invoicing services, information technology and system support providers, physical security and CCTV maintenance providers, and professional advisers such as accountants or legal advisers where needed to support our business.
We may also share your personal data with public authorities, regulatory bodies or law enforcement agencies where we are legally obliged to do so or where this is necessary to protect our rights, the rights of our customers or the safety of our premises.
We do not sell your personal data to third parties. If we ever propose to transfer any part of our business or assets, personal data may be disclosed to a prospective purchaser solely for the purpose of the transaction, subject to appropriate confidentiality safeguards.
Data Retention
We retain your personal data only for as long as is reasonably necessary for the purposes for which it was collected and to meet any legal, regulatory, accounting or reporting requirements. Retention periods vary depending on the nature of the information and our legal obligations.
Customer contract and billing records are generally kept for a period required under applicable tax, accounting and regulatory rules following the end of your contract. CCTV footage and access control data are retained for a shorter period, unless a longer period is required in connection with an incident, investigation or legal claim.
When personal data is no longer required, we will either securely delete it or irreversibly anonymise it so that it can no longer be associated with you.
Your Data Protection Rights
As an individual in the Enfield Town area whose personal data we process, you have several rights under data protection law. These rights are subject to certain conditions and legal exemptions but we will always consider and respond to any request in accordance with applicable law.
Right of access. You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, together with certain information about how we use it.
Right to rectification. You have the right to ask us to correct or complete any personal data that you believe is inaccurate or incomplete.
Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and no other legal basis applies.
Right to restriction. You have the right to ask us to restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our use of it.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims.
Right to data portability. Where our processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transfer it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process certain personal data, you can withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you wish to exercise any of these rights, please contact us using the usual contact details you use for Storage Enfield Town. We may need to verify your identity before we can respond to your request.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. Measures may include secure access controls, staff training, physical security on site and regular review of our procedures and systems.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. Any changes will take effect as soon as the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
