Storage Cockfosters Privacy Policy
This Privacy Policy explains how Storage Cockfosters collects, uses, stores and protects personal data relating to customers and prospective customers in the Cockfosters area. It applies to all individuals who use our storage services, make enquiries, visit our premises, or otherwise interact with us as a customer or potential customer.
We are committed to complying with the UK General Data Protection Regulation and the EU General Data Protection Regulation where applicable, as well as relevant data protection and privacy laws. This Privacy Policy explains what personal data we collect, the lawful bases we rely on, how long we keep your data, how we work with processors, and the rights you have in relation to your personal data.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and the services you use.
Identification and contact details. This can include your name, postal address, billing address, contact address, proof of identity details, and details contained in documents used to verify your identity.
Contact and communication data. This can include your correspondence with us, details of enquiries or complaints, and notes of interactions relating to your account or use of our services.
Contract and account data. This includes records of your storage unit bookings, rental agreements, access permissions, payment history relating to storage services, key or code allocation, and any instructions you give us about your unit or belongings.
Payment and billing data. This covers information necessary to process your payments, such as partial card details or other payment references provided to us by you or your payment provider, billing addresses, and transaction records. We do not store full payment card details when this is not necessary.
Security and access data. In the course of operating our premises we may collect information relating to your visits and access to our facilities, such as access log records, timings of entry and exit, and where in use, CCTV footage for security and safety purposes.
Technical data. If you visit our website or online booking tools, we may process technical data made available by your device, such as IP address, browser type, and approximate location derived from IP address. We may also use cookies or similar technologies where this is necessary for the functioning of our online services or where you have agreed to their use.
Special category data. We do not routinely collect special category data such as health information, political opinions, or religious beliefs. If you voluntarily provide such information, we will only process it where strictly necessary and in accordance with data protection law.
Lawful Basis for Processing
We only process personal data when we have a valid lawful basis to do so. Depending on the context, we may rely on the following lawful bases.
Performance of a contract. We process your personal data to enter into and perform storage agreements with you. This includes taking steps at your request before entering into a contract, such as providing quotes or reserving a storage unit, managing your account, processing payments, and communicating with you about your booking or unit.
Compliance with legal obligations. We may process your personal data where necessary to meet legal and regulatory requirements. This can include obligations relating to taxation, accounting, record keeping, crime prevention and detection, and responding to lawful requests from authorities.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests and where these are not overridden by your rights and interests. Examples include ensuring the security of our premises and stored goods, maintaining and improving our services, preventing fraud, managing business operations, and dealing with disputes or complaints. When we rely on legitimate interests, we balance our interests against your privacy rights.
Consent. In certain situations, we may rely on your consent, for example for specific forms of marketing or for non-essential cookies and similar technologies. Where we rely on consent, you can withdraw it at any time and we will stop the relevant processing, unless another lawful basis applies.
How We Use Your Personal Data
We use your personal data for the following purposes.
To provide and manage storage services, including processing bookings, managing access, handling payments, and providing customer support.
To verify your identity where necessary for safety, security or legal reasons.
To protect our premises, staff, customers and stored property, including the use of security systems such as access control and CCTV where in operation.
To manage our relationship with you, including responding to enquiries, handling feedback or complaints, and notifying you about important changes to our services or terms.
To maintain business records, perform internal administration, accounting and auditing, and manage risk, legal claims or disputes.
Where permitted, to provide you with information about similar services that may be of interest to you, and to understand how our services are used so that we can improve them.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting or reporting requirements.
Customer and contract records. We generally retain records relating to your storage agreement for the duration of the contract and for a reasonable period afterwards. This is to respond to any queries, comply with legal obligations and exercise or defend legal claims.
Financial and transaction records. We keep transaction records and related financial information for the periods required by tax and accounting laws.
Security data. Access logs and CCTV footage, where used, are retained for limited periods that reflect the security needs of our business and relevant legal and regulatory requirements, after which they are securely deleted or anonymised unless required for an ongoing investigation or legal claim.
Marketing records. Where you have consented to receive marketing, we retain your contact details and preferences until you opt out or withdraw consent, or until we determine that the information is no longer needed.
When personal data is no longer needed, we delete it or anonymise it so that you can no longer be identified.
Data Processors and Sharing of Personal Data
We may share your personal data with selected third parties who act as data processors on our behalf. These processors are only allowed to use your personal data in accordance with our instructions and for the specific purposes we have agreed with them. They are required to implement appropriate technical and organisational measures to protect your data.
Examples of processors we may use include providers of IT and cloud services, payment processing services, accounting or billing platforms, security and access control systems, and document storage or destruction services. We remain responsible for the actions of our processors in relation to the personal data they handle for us.
We may also share personal data with other organisations where required or permitted by law, such as regulatory bodies, law enforcement agencies, courts, professional advisers, or where necessary to exercise or defend legal claims or protect our rights, property or safety, or that of our customers or others.
We do not sell your personal data. Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your information in accordance with data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data we hold about you. These rights apply to all Storage Cockfosters customers in the Cockfosters area, subject to any legal restrictions or exemptions.
Right of access. You have the right to request confirmation of whether we process your personal data and to receive a copy of the personal data we hold about you, together with information about how we use it.
Right to rectification. You may request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and no other lawful basis applies.
Right to restriction of processing. You can request that we restrict the processing of your personal data in certain situations, such as while we are investigating a complaint that the data is inaccurate.
Right to data portability. In some cases, you have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to request that we transfer it to another controller where technically feasible.
Right to object. You may object to processing based on our legitimate interests, including profiling, and we will stop such processing unless we can demonstrate compelling legitimate grounds. You have an absolute right to object to direct marketing at any time.
Rights in relation to automated decision making. We do not carry out automated decision making that produces legal or similarly significant effects on you without human involvement. If this changes, we will update this Privacy Policy and explain your rights.
You are also entitled to lodge a complaint with the relevant data protection authority if you have concerns about how we handle your personal data. We encourage you to contact us first so that we can try to resolve any issues directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we handle personal data, or changes in law. When we make significant changes, we will take reasonable steps to notify you, for example by making the updated version available at our premises or on our website. The date of the latest version will be indicated in the policy.
Your continued use of our services after any changes have been made will be treated as acceptance of the updated Privacy Policy. We encourage you to check this page periodically to ensure that you are aware of the most recent version.
