Storage Brent Cross Privacy Policy
This Privacy Policy explains how Storage Brent Cross collects, uses, stores and protects personal data relating to our customers and prospective customers in the Brent Cross area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Brent Cross customers and anyone who makes an enquiry or interacts with us in relation to our storage services in the area.
Who this Privacy Policy applies to
This Privacy Policy applies to individuals and businesses who use, or enquire about, Storage Brent Cross services. It covers personal data relating to customers, prospective customers, authorised account contacts, guarantors and individuals making enquiries on behalf of an organisation. By using our services, entering into a storage agreement with us, or submitting personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Types of personal data we collect
We may collect and process the following categories of personal data about you, depending on how you interact with us and which services you use:
Identification and contact details, such as your name, address, postcode, date of birth, gender, and contact details including your preferred communication method. Proof of identity information, including information from identity documents you provide to us when entering into a storage agreement or accessing our facilities. Contract and account information, such as unit number, contract dates, payment history, rental charges, deposit details and any communications relating to your contract. Payment and billing information, including details required to process payments and maintain financial records, excluding full card details where processed by approved payment processors. Communication records, such as emails, written correspondence, records of telephone calls where relevant, and any enquiries or complaints you submit. Security and access data, including access codes, entry and exit logs, and where in operation, CCTV footage covering entrances, exits, corridors and other communal areas for security and safety purposes. Marketing and preference data, such as your preferences regarding receiving marketing communications and your responses to any surveys or feedback requests.
How we collect your personal data
We collect personal data directly from you when you complete a storage contract, request a quote, make a booking, visit our facility, contact us by telephone or in writing, or sign up to receive updates or marketing from us. We may also receive personal data indirectly where someone acts on your behalf, such as an authorised contact named on your account or an employer arranging storage. In addition, we may obtain personal data from publicly available sources and from third parties such as credit reference agencies where this is necessary for the purposes set out in this Privacy Policy and where permitted by law.
Lawful basis for processing your data
Storage Brent Cross processes your personal data only where we have a lawful basis under UK data protection law. Depending on the context, we may rely on the following lawful bases:
Contract. We process personal data to take steps at your request before entering into a contract, to enter into a storage agreement with you, and to perform our obligations under that contract, such as managing your account, processing payments and providing access to your storage unit. Legal obligation. We may process your data to comply with legal and regulatory requirements, including tax, accounting and record-keeping obligations, and to cooperate with law enforcement or regulatory authorities where required. Legitimate interests. We may process personal data where it is necessary for our legitimate interests, provided that your interests and fundamental rights do not override those interests. This includes ensuring the security of our premises, preventing fraud, managing and improving our business operations, and communicating with you about our services. Consent. In specific circumstances, we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How we use your personal data
We use your personal data for the following purposes:
To provide storage services, including setting up and managing your account, allocating storage units, managing access and handling billing and payments. To communicate with you, including responding to enquiries, sending service-related notifications, and informing you of any changes to our terms, policies or facilities. To maintain safety and security, including monitoring access to our facility, using CCTV where installed for crime prevention and health and safety purposes, and investigating incidents or complaints. To manage our business operations, such as record keeping, auditing, reporting, handling insurance claims, and improving our services. To carry out marketing activities, where permitted by law, such as sending you information about similar services you have used or shown interest in, subject to your right to opt out at any time. To comply with legal and regulatory obligations and to establish, exercise or defend legal claims.
Data processors and third parties
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors may provide services such as payment processing, customer relationship management systems, secure data storage, IT support, security services including access control and CCTV management, and professional advisers such as accountants or legal advisers. These processors are only permitted to process your personal data in accordance with our instructions and are required to keep your data secure and confidential.
We may also share personal data with other third parties where we act as an independent controller, for example with insurers, law enforcement agencies, regulatory authorities or debt recovery agencies where necessary. We do not sell your personal data to third parties.
International transfers
Where we use service providers located outside the United Kingdom, or where personal data is processed in a country that does not provide the same level of data protection as the UK, we take appropriate safeguards to protect your information. These safeguards may include using standard contractual clauses approved by relevant authorities or ensuring that the recipient is subject to an adequacy decision.
Retention of your personal data
Storage Brent Cross keeps your personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements. The retention period will depend on the type of data and our relationship with you.
In general, we retain core contract and billing information for a period required by tax and accounting laws after the end of your storage agreement. Access records and CCTV footage, where used, are kept for a shorter period unless they are required for the investigation of an incident, legal claim or law enforcement request. Marketing and enquiry data will be held for a reasonable period to manage our relationship with you, or until you withdraw your consent or object to further processing, whichever occurs first. When data is no longer required, it will be securely deleted or anonymised.
Your data protection rights
Under UK data protection law, you have a number of rights in relation to your personal data held by Storage Brent Cross. These include:
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how we use it. Right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you. Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it. Right to restriction of processing. You can request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or assess an objection you have raised. Right to data portability. Where we process personal data based on your consent or as part of a contract, and the processing is carried out by automated means, you may request that we provide your data in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible. Right to object. You have the right to object to processing of your personal data that is based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests or for the establishment, exercise or defence of legal claims. You also have an absolute right to object at any time to the use of your personal data for direct marketing purposes. Right to withdraw consent. Where we rely on your consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it is withdrawn.
How we protect your data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include secure physical storage, access controls, encryption, staff training and regular review of our security procedures. While we take reasonable steps to safeguard your data, no system is completely secure and we cannot guarantee absolute security.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our practices or applicable law. Any updated version will apply from the date it is published and will supersede previous versions. You are encouraged to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.
Contact and complaints
If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details provided on our website or at our facility. You also have the right to lodge a complaint with the UK Information Commissioners Office if you believe that your data protection rights have been infringed. We would, however, welcome the opportunity to address your concerns directly in the first instance.
